DAMM Capital Privacy Policy

Last Updated: November 1st, 2024

This Privacy Policy outlines how Damm Cap (“we,” “us,” or “our”) collects, uses, and processes your personal data when you use our services. We are committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (GDPR) and other relevant privacy laws.

1. Data Controller

Damm Cap, operated by Damm Labs. Ltd., located at Caiman, acts as the Data Controller responsible for processing your personal data. For inquiries regarding this Privacy Policy, you may contact us at [email protected] 

2. Personal Data We Collect

We may collect personal data when you use our services or interact with our platform. This data may include:

  • Identification data: such as your name, email address, wallet address, and IP address.

  • Usage data: details about how you use our platform, including transaction history and metadata from blockchain interactions.

  • Technical data: such as device information, browser type, and operating system.

We may collect this data directly from you or through automated means, such as cookies or blockchain interactions.

3. Lawful Basis for Processing

We process your personal data based on the following lawful grounds:

  • Consent: For certain data uses, such as marketing communications or the use of cookies, we rely on your explicit consent.

  • Contract: We process your data to fulfill our contract with you, such as providing access to our platform or executing your transactions.

  • Legitimate Interests: For purposes like security, fraud prevention, and platform improvements, we process data based on our legitimate business interests.

  • Compliance with Legal Obligations: We may process data to comply with regulatory requirements, including tax reporting and anti-money laundering laws.

4. How We Use Your Data

Your personal data is used for the following purposes:

  • To provide you with access to our platform and execute your transactions.

  • To maintain security, prevent fraud, and ensure the proper functioning of our services.

  • To comply with legal obligations, including tax and regulatory reporting.

  • To communicate with you, including responding to your inquiries and providing service updates.

  • To improve our platform by analyzing user behavior and trends.

5. Cookies

We use cookies and similar tracking technologies to collect usage data and improve your experience on our platform. You may manage your cookie preferences via your browser settings or through the cookie consent banner on our site. Cookies that are strictly necessary for the operation of the platform are enabled by default, while others (e.g., analytics cookies) require your explicit consent.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, unless a longer retention period is required by law. For example:

  • Transaction data is retained to fulfill contractual and legal obligations.

  • Data used for marketing is retained until you withdraw your consent or object to the processing.

7. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: You have the right to request access to your personal data and obtain a copy.

  • Right to rectification: You have the right to request the correction of inaccurate or incomplete data.

  • Right to erasure: You have the right to request the deletion of your personal data, under certain conditions.

  • Right to restrict processing: You can request that we limit the processing of your personal data in certain situations.

  • Right to data portability: You can request to receive your data in a structured, commonly used format, or have it transferred to another controller.

  • Right to object: You have the right to object to the processing of your data based on our legitimate interests or for direct marketing purposes.

  • Right not to be subject to automated decision-making: You can request not to be subject to decisions made solely on automated processing, including profiling, if those decisions have legal or similarly significant effects.

To exercise your rights, please contact us at [Contact Email]. We will respond to your request within one month, as required by GDPR.

8. Data Transfers Outside the EU/EEA

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). If such transfers occur, we ensure that adequate safeguards are in place to protect your data, such as the use of Standard Contractual Clauses approved by the European Commission.

9. Security Measures

We take the security of your data seriously. We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or destruction. However, no system is completely secure, and we cannot guarantee absolute security of your data.

10. Third-Party Services

We may use third-party service providers to assist with our operations (e.g., hosting services, data analytics). These providers act as Data Processors on our behalf and are bound by contractual obligations to protect your data in compliance with GDPR standards.

11. Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through our platform or via email. Your continued use of the platform after such changes will constitute your acknowledgment and acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your GDPR rights, please contact us at [Contact Email].