Privacy and Cookies Policies

1. Introduction

At DeXentra (“DeXentra“ “we”, “our”, “us”), we are committed to protecting and respecting your privacy. We are a company established in Switzerland with a registered office at Landis + Gyr-Strasse 1, 6300 Zug, and for the purpose of the EU General Data Protection Regulation (the “GDPR”), if not specified otherwise in this privacy policy, we are the data controller.

We will process your personal data in accordance with the Swiss Federal Data Protection Act (the “FDAP”). The GDPR would also apply to processing of your personal data if you are residing in the EU and such processing is done in connection with us offering you goods or services, irrespective of whether a payment of the data subject is required, or if your behavior is anyhow monitored. The GDPR would also apply, if any of the third-party service providers we use for processing of your personal data is based in the EU.

This privacy policy (“Policy”) sets out the basis on which we will process any personal data or usage information we collect from you, or that you provide to us, in connection with:

- your use of our website under the domain oilxcoin.io, oilxcoin.com, oilxcoin.ch, oilxcoin.eu, oilxcoin.info, oilxcoin.net, oilxcoin.org, oilxcoin.us, oilxcoin.international, oilxcoin.world, oilxcoin.biz, oilxcoin.cash (the “Website”)

- your use of our newsletter (the “Newsletter”)

- your use of the following products: OILX Token, OilXCoin NFT

- your participation in events and activities organized by DeXentra, such as conferences, meetups, trainings etc. (collectively: “DeXentra Events”).

Please read this policy carefully so that you understand your rights in relation to your personal data, and how we will collect, use and process it. If you do not agree with this Privacy Policy in general or any part of it, you should not access the Website or use DeXentra's products and/or services.

For every processing activity we provide you with information on the legitimate basis for such processing under the GDPR. The Swiss FDAP, on the other hand, does not require us to do so.

2. Changes and updates

This version of the Privacy Policy is effective as of 1st November 2023, and applies to any user of Websites, Newsletter, DeXentra Products, and people attending DeXentra Events. For those who have used the above mentioned products or services prior to that date the previous version of the Privacy Policy applies, if they consider it (or parts of it) as more favorable and protecting their interests to a higher extent.

3. How do we process your personal data

A. Website

Our Website collects certain information automatically and stores it in log files. The information may include:

• IP addresses,
• the region or general location where your computer or device is accessing the internet,
• preferred language used to display the website,
• device screen resolution,
• device type, browser type and operating system,
• mouse events (movements, locations and clicks),
• referring URL and domain,
• keypresses,
• date and time when the page was accessed,
• pages visited,
• model of your CPU and GPU.

In general, the above mentioned information is necessary to enter any website on the internet with hypertext transfer protocol (http); the applicable legal basis is the performance of the contract under GDPR Art.6.1(b) (terms and conditions of using the website).

We also use this information to help us design our Website to improve the user experience; the applicable legal basis for this is our legitimate interests under GDPR Art.6.1(f). For this purpose, we may also use tools provided by third parties, in particular analytical tools serving improvement of user experience.

We store log files for 30 days.

The Website contains links to other websites. This Privacy Policy applies only to our Website, so if you click on a link to another website, you should read its privacy policy.

B. Newsletter

You can subscribe to our Newsletter if you want to receive updates on DeXentra’s activities and on the development of various DeXentra tools and products. In order to do so, you will need to provide us with an email address to which the Newsletter will be sent. At the time of subscription, you will also be asked for voluntary information on your person (e.g. country of residence, how you heard about OilXCoin, etc.) which is solely used to improve the quality of our newsletter and to better understand, on an anonymous basis, our customer base.

By subscribing to the Newsletter, you consent to processing of your email address.

You may unsubscribe at any time by clicking the following link: https:// oilxcoin.io/en/unsubscribe.

In order to circulate the DeXentra Newsletter, we use the services provided by Intuit Mailchimp with which we will share your email address.

C. Social media sharing buttons:

You can share different content from our Website on your social media accounts by simply clicking on sharing buttons. For that purpose, we use services provided by a third party which is both GDPR and CCPA compliant.

D. Cookies:

When entering any of the websites we host you will be provided with a cookie notice. It will explain what type of cookies we use and will allow you to grant us consent on using them.

Cookies are text files placed on your device to collect standard internet log information and visitor behavior information.

More information about the cookies we use and how we process information collected with their use may be found in our Cookie Notice & Settings.

We use Google Analytics as a third-party analytics service, and to track our advertising campaigns on third party websites and services. We use Google Analytics to collect information about how our Website performs and how our users, in general, navigate through it. Types of information which may be collected from you vary and may include:

• your device and browser information;
• user ID;
• anonymized IP-address;
• geolocation data;
• date, time, and duration of use of the Website;
• links you visited;
• links, by which you were addressed to the Website.
• Google Analytics provides further information about its own privacy practices and cookieless tracking https://policies.google.com/privacy?hl=en.

E. Contact form

You may reach out to us through a contact form available on the Website: https://oilxcoin.io/en/contact

In order to do that, apart from writing your message or request, it is necessary that you provide us with your email address so we can contact you back. Your email address will be processed solely for the purpose of communicating with you in regards to your message or request; the applicable legal basis for this is our legitimate interests under GDPR Art.6.1(f).

CAUTION! We do not advise you to send us any data that is considered to be sensitive personal data in the meaning of Art. 9 GDPR, i.e. information on your racial or ethnic origin, sexual orientation, marital status, political affiliation, religion or any other beliefs, health, criminal records or a trade union membership.

Moreover, if you disclose personal information about others in your message, you declare and warrant that you are authorized to do so and that you will permit us to

4. Personal data we receive from third parties

In exceptional cases (such as events, contents and competitions as well as when purchasing products on our webpage), we may obtain your personal data from third parties - service providers. We will process it only if it was obtained in compliance with the applicable data protection regulation.

Whenever we will process personal data obtained from third parties, this Policy shall apply.

5. When and how we share your data

Depending on the processing activity, we may share your personal data with our third-party service providers working on our behalf. Every third party with which we will share your personal data comes from a jurisdiction which guarantees an adequate level of protection to the one provided for in the GDPR. Furthermore, as a rule, before we share any personal data of our users with third parties, we conclude appropriate data processing agreements with the recipients that guarantee security of the data and the rights of the data subjects.

A. Where do we store your data

The information that we collect from you will be transferred to, and stored at/processed within the European Economic Area (EEA), Switzerland, the United Kingdom, the United States and in other countries where our third party service providers are located. We will take all steps reasonably necessary to ensure that your personal data is treated securely, with a level of protection adequate to GDPR and in accordance with this policy. We have provided further details below regarding the steps taken to ensure adequacy of the processing of your personal data.

B. Whitelisted Countries:

Switzerland was found to have an adequate level of protection for personal data under European Commission Decision 2000/518/EC of 26 July 2000.

The United Kingdom was found to have an adequate level of protection of personal data under Commission Implementing Decision of 28th June 2021 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom.

C. Consequences of invalidation of Privacy Shield:

CAUTION! Taking into account the Court of Justice of the European Union’s decision in “Schrems II” C-311/18 in which the CJEU declared the EU-US Privacy Shield invalid, we undertake to ascertain the adequate level of protection of your personal data by entering into Model Clauses (described below) with our third-party service providers located in the US.

Model Clauses:

If we are transferring data to a third party located outside of the EEA who is not in a Whitelisted Country, we will enter into the European Commission’s model contracts for the transfer of personal data to third countries (i.e., the standard contractual clauses pursuant to Decision 2010/87/EU - SCCs) with the relevant data importer. Prior to entering into SCCs we assess, on a case-by-case basis, as outlined in the CJEU decision in Schrems II case, whether an adequate level of data protection, comparably to the level of data protection within the EU is given in the country where the data will be transferred to. If the appropriate level of protection is not given, additional protection provisions and measures will be contractually agreed and/or implemented by us to ensure the protection of personal data.

6. How long do we store your data

We aim to always store your personal data for the minimal period of time thus for the time we actually need it. We may, however, keep your personal data for a longer period of time. We will do that only in order to meet legal requirements imposed on us by the applicable laws and regulations (e.g. AML & CFT).

We regularly review our information and erase or anonymize personal data when we no longer need it.

7. The security of your personal data

Unfortunately, the transmission of information via the Internet or email is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your information transmitted through the Website, or over email; any transmission is at your own risk.

Nevertheless, once we have received your information, we will take appropriate technical and organizational measures to safeguard your personal data against loss, theft and unauthorized use, access or modification.

We will, from time to time, host links to and from the websites of our affiliates or third parties. If you follow a link to any of these websites, these websites will have their own privacy policies and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any information to those websites.

8. Your rights

In certain circumstances you have rights in relation to the personal data we hold about you. We set out below an outline of those rights and how to exercise those rights. Please note that we will require you to verify your identity before responding to any requests to exercise your rights.

To exercise any of your rights, please send your request by email to: dataprotection(at)oilxcoin.io

Please note that for each of the rights below we may have valid legal reasons to refuse your request, in such instances we will let you know if that is the case.

CAUTION! Please also bear in mind that we are not a data controller in regards to any personal data stored on blockchains. Therefore, we will not be able to satisfy your requests if you decide to exercise your rights.

A. Access:

You have the right to know whether we process personal data about you, and if we do, to access data we hold about you and certain information about how we use it and who we share it with.

B. Correction:

You have the right to require us to correct any personal data held about you that is inaccurate and have incomplete data completed.

C. Erasure:

You may request that we erase the personal data we hold about you in the following circumstances:

• where you believe it is no longer necessary for us to hold the personal data,
• we are processing it on the basis of your consent and you wish to withdraw your consent,
• we are processing your data on the basis of our legitimate interest and you object to such processing,
• you no longer wish us to use your data to send you marketing or you believe we are unlawfully processing your data.

Please provide us with as much detail as possible on your reasons for the request to assist us in determining whether you have a valid basis for erasure.

D.      Restriction of Processing to Storage Only:

You have a right to require us to stop processing the personal data we hold about you other than for storage purposes in the following circumstances:

- you believe the personal data is not accurate for the period it takes for us to verify whether the data is accurate,

- we wish to erase the personal data as the processing we are doing is unlawful but you want us to simply restrict the use of that data;

- we no longer need the personal data for the purposes of the processing but you require us to retain the data for the establishment,

- exercise or defense of legal claims; and

- you have objected to us processing personal data we hold about you on the basis of our legitimate interest and you wish us to stop processing the personal data whilst we determine whether there is an overriding interest in us retaining such personal data.

E. Objection:

You have the right to object at any time to our prospective processing of data about you and we will consider your request. Please provide us with details as to your reasoning so that we can assess whether there is a compelling overriding interest in us continuing to process such data or we need to process it in relation to legal claims.

F. Withdrawal of Consent:

Where you have provided your consent to us processing your personal data, you can withdraw your consent at any time.

G. Data Portability:

In case you have provided information directly to us, you have the right to receive a copy of these data and require us to transfer it to a third party. This right, however, only applies to information you provided to us and, not to the information we collected about you.

H. Objection to Marketing:

At any time you have the right to object to our processing of data about you in order to send you marketing including where we build profiles for such purposes and we will stop processing the data for that purpose.

I. Complain to the authority:

At any time you have the right to lodge a complaint to the competent supervisory authority. DeXentra is established in Switzerland which is not a part of the EEA. Thus, there is no lead supervisory authority over processing activities described in this Policy. Therefore, you are free to contact any data protection authority which is competent for the place of your residence or for the place where you think we have infringed your rights within the EEA. Contact details for data protection authorities in the EEA are available here.

J. Disclaimer

This Privacy Policy contains links to other websites. Please note that by clicking on a link you will be redirected to another website or document. These websites can be beyond DeXentra‘s sphere of influence. Liability is excluded. The operators of the linked websites are solely responsible for their content. We refer you to their privacy policy.

9. Contact

In the event that you wish to make a complaint about how we process your personal data, please contact us in the first instance at dataprotection(at)oilxcoin.io and we will endeavor to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with the data protection supervisory authority in the EEA country in which you live or work or where you think we have infringed data protection laws.