Privacy Policy

Privacy Policy


Last updated: June 18, 2024

Introduction

UAB CryptoBarrel, the legal operator of the Website https://001k.bot/, and Telegram Bot https://t.me/OO1kBOT (“We”, “Us”, and “Company”), prioritizes the protection of your personal data in connection with the use of our Services. 

This Privacy Policy describes how We use, collect, process, and share your personal data, as well as the security measures We have in place to protect your personal data and the rights in relation to your personal information.

This Privacy Policy has been created in compliance with the provisions of the General Data Protection Regulation ("GDPR") and the Republic of Lithuania Law on Legal Protection of Personal Data, along with other relevant laws.

By using our Services, you confirm that you have fully read, understood, and agreed to all the terms and conditions stated in this Privacy Policy. If you find any part of the Privacy Policy unsuitable, We advise you to abstain from using our Services in any way. All terms in this Policy align with the Terms of Use of 001k.bot and other applicable polices.

Please note that while using one of our products, namely Telegram Bot, you share your personal data with Telegram. For further details regarding the use of Telegram services, please consult the Telegram Privacy Policy.

If you have any questions about this Policy, please contact Us via email: support@001k.bot 

2. Data controller

Company name: UAB CryptoBarrel

Registered code: 306696279

Address:  Krivių g. 5, LT-01204, Vilnius, Lithuania 

UAB CryptoBarrel acts as the controller of your personal data. Pursuant to Article 4(7) of the GDPR, a controller is the natural or legal person, which, alone or jointly with others, determines the purposes and means of the processing of personal data.

For further clarification on how We use your personal data, please feel free to reach out to us at support@001k.bot.

3. What sources of personal data do we use?

We may collect personal data from various sources, including:

  • Voluntary Provision: We may obtain personal data directly from you when you voluntarily provide your personal information, as well as through other forms, and communication channels. This may include contact details, identification details, address details, etc.
  • Telegram Bot and Website Usage: We may collect personal data through the use of cookies and similar technologies when you interact with our bot and website. This may include browsing history, IP addresses, device information, and other usage data. For more information, please refer to our Cookie Policy.
  • Third-party Sources: We may receive personal data from third-party sources, such as service providers, business partners, or publicly available sources. This may include contact information and other relevant information obtained from reputable sources.

We emphasize that We gather personal data exclusively from lawful sources and strictly adhere to the principles of transparency, fairness, and accountability as outlined in the GDPR. 

4. What is the legal basis for collecting your personal data?

In compliance with the GDPR and other applicable data protection laws, We rely on a range of legal bases for processing your personal data. The legal bases are as follows:

  • your consent — you give us consent for the processing of your personal data (Article 6 (1a) of the GDPR);
  • the performance of a contract — We rely on this basis when processing your personal data to perform our contractual obligations to you in order to provide our Services (Article 6 (1b) of the GDPR);
  • compliance with a legal obligation to which We are subject — your personal data may be used as necessary for the fulfillment of the legal obligation itself (Article 6 (1c) of the GDPR);
  • legitimate Interests — We rely on this basis in cases where it is necessary for us to process your personal data to meet our own needs for the operation, management and development of our business or to protect legitimate interests that We or a third party pursue (provided that a balance of interests is achieved) (Article 6 (1f) of the GDPR).

We will be pleased to assist in clarifying the specific legal basis on which processing is carried out in any case.

5. What personal data do we collect? 

This section outlines the types of personal data We collect for Anti-Money Laundering (“AML”) and Combating Terrorism Financing (“CTF”) purposes, underscoring our dedication to safeguarding the confidentiality and integrity of this information.

When using our Services, you may provide us with two types of data:

  • personal data that you voluntarily share; and 
  • data that is collected automatically by your use of our Services.

For an identity verification procedure, We use the third-party service provider Sum and Substance Ltd (“SumSub”). For more information please refer to the AML/CFT Policy.

Under the Basic individual verification procedure, you need to submit the following information:  

  • Passport, or National ID, or Driver's license, or Visa for the country of residence.
  • Liveness check.
  • Email verification.
  • Completion of the Questionnaire providing the following information:

a. country of residence;

b. residential address (city, street, postcode);

c. telephone number;

d. selection of the source of funds from the proposed list;

e. provision of agreement with the proposed declarations (a declaration that you have provided Us with accurate data, a declaration that you have read Our rules and policies, and a declaration that you are not a Politically Exposed Person).

For the verification procedure of the legal entity representative, We need the following information:

  • Confirmation of a contact phone number.
  • Submission of an identity document.
  • Completion of a liveness check.
  • Documentation proving the representative's authority to act on behalf of the legal entity.
  • The legal entity representative must also complete a Questionnaire, affirming:

a. Understanding, acknowledgment, and agreement with the Terms of Use, Privacy Policy, and the current AML Policy.

b. Confirmation that neither the Customer’s representative nor any beneficial owners, shareholders, senior management, or directors are Politically Exposed Persons or close associates thereof.

c. Providing responses to the questionnaire.

The following documents are required to identify and verify the legal entity:

  • Extract of the registry card or registration certificate from the relevant register, or an equivalent document.
  • List of beneficiaries or similar documents (e.g., extended registry card).
  • Proof of address and identification documents for all shareholders and beneficial owners of the Customer.
  • Documents confirming the Customer’s proof of address.
  • Documents validating the Source of Wealth and Source of Funds.

For the provision of our Services, We also process your personal data related to the transactions and your activity using our Bot and Website:

  • payment information;
  • transaction and exchange history;
  • account status;
  • Digital wallet information:

a. private and public keys;

b. wallet balance. 

In addition, We collect the below-mentioned data automatically:

  • Device Data:

a. device name; 

b. operating system; 

c. device ID;

d. browser settings (browser version, language, date and time of request and destination URL etc.);

e. mobile network system;

f. your overall geographic location.

  • Online Identifiers:

a. IP address;

b. cookie identifiers;

c. pixel tags;

d. MAC addresses;

e. advertising IDs.

  • Usage Data:

a. download time from your device;

b. the functions you use and actions you perform;

c. time zone;

d. access dates and times;

e. type of computer or mobile device;

f. the length of the visit on our website;

g. search engine terms that you use.

The aforementioned data is only processed to such an extent which is necessary to ensure proper provision of our Services.

6. What personal data do we not collect?

It is important to note that We do not collect or process special categories of personal data that concern racial or ethnic origin of natural persons, their political opinions or religious, philosophical or other beliefs, membership in trade unions, and their health, sexual life and criminal convictions.

7. How do we process the personal data of minors?

We do not intentionally collect or store data about persons under the age of 18. Therefore, during the verification procedure you confirm that you have the legal capacity to enter into a binding agreement by using our website and Services.

If you suspect that a person under 18 has shared personal data, contact us at support@001k.bot

8. Why do we collect your personal data?

Our Company collects only essential personal data necessary to provide the Services you request. Understanding the reasons behind our collection of your personal data empowers you to make informed decisions regarding your privacy and data sharing practices when using our website. 

We collect and process personal data for the following purposes:

  • to optimize our Services and diagnose technical errors;
  • to provide assistance during the provision of our Services; 
  • to send you promotional content in accordance with your marketing preferences;
  • to fulfill our legal obligations and protect your rights;
  • to detect, prevent, and report potentially suspicious, fraudulent, or illegal activities;
  • to monitor business efficiency and generate internal reports.

By collecting personal data for these purposes, We aim to provide a secure and reliable cryptocurrency exchange platform while ensuring compliance with applicable laws and regulations, safeguarding user interests, and improving overall user experience.

9. What rights do you have?

In compliance with the GDPR and other applicable data protection laws, We acknowledge and uphold the fundamental rights of individuals concerning their personal data. 

This section outlines your rights as a data subject and describes the process for exercising these rights regarding the personal data We collect and process.

  1. Right of access

You have the right to request information about the categories of personal data We have collected from you, the purposes for which We process your data, the sources from which We obtained your data (if not directly from you), and the recipients to whom your data has been or will be disclosed.

Additionally, you have the right to receive a copy of the personal data We hold about you and to verify that We are processing it lawfully. The first copy will be provided free of charge, and subsequent copies may be subject to a reasonable fee to cover our administrative costs.

2. Right to rectification

You have the right to promptly request the correction of inaccurate personal data. Considering the purposes of processing, you also have the right to complete incomplete personal data by providing additional information.

If you need to add or modify any information, you can log into your account and update it in your settings. If you are unable to make the changes yourself, please contact us at support@001k.bot, and We will assist you.

Please note, We may deny your request if additional information is unnecessary for the purposes of processing personal data.

3. Right to erasure (“right to be forgotten”)

You have the right to obtain from us the erasure of your personal data without undue delay and We have the obligation to erase personal data without undue delay where one of the following grounds applies:

  • it is no longer necessary for the purposes for which personal data was collected or otherwise processed;
  • you withdraw the consent upon which the processing is based and if no other lawful basis for the processing exists; 
  • personal data has been unlawfully processed; 
  • if you object to the processing and there are no overriding legitimate grounds for such processing;
  • personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we belong.

4. Right to restriction of processing

You have the right to obtain from us restriction of processing where one of the following applies:

  • the accuracy of the personal data is contested by you, for a period that allows us to check the accuracy of the personal data;
  • in the case of illegal processing, and you are against erasure of the personal data and request the limitation of their use;
  • there is no longer a need for us to use personal data for the purposes of the processing, but it is necessary for you for the establishment, exercise or defense of legitimate claims;
  • you have objected to the processing prior to the verification of whether our legitimate grounds override yours.

5. Right to data portability

You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us, where:

  • the processing is based on your consent;
  • the processing is carried out by automated means.

6. Right to object

You can object to the processing of your personal data at any time if it is based on a legal basis other than your consent. To do so, you must notify us in writing of your objection. We will cease processing your personal data unless We have compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time. In this situation, your personal data will no longer be processed for marketing purposes.

7. Right to file a complaint

If you find that We have breached your rights, you are recommended to contact us at support@001k.bot in the first instance so that We can try to resolve your issue or dispute. 

In addition, you also have the right to lodge a complaint with the competent supervisory authority - State Data Protection Inspectorate.

We encourage you to familiarize yourself with your rights as outlined in this section and to reach out to us if you have any questions, concerns, or requests regarding the processing of your personal data.

10. In what manner can you exercise your rights?

In order to exercise the aforesaid rights, please send us your inquiries, complaints or demands in writing by email to support@001k.bot.

We strive to respond to your requests promptly, typically within one month. If necessary due to complexity, this may extend by up to two months, with notification provided within one month of receiving your request. For verification purposes, We may request an identity document in accordance with applicable laws.

If We are unable to provide the information you need and/or if you have concerns about how We handle your personal data, you have the right to file a complaint with the State Data Protection Inspectorate. Their contact information is provided below for your reference:

  • Address: 17 L. Sapiegos str., LT-10312 Vilnius
  • Phone: +370 5 271 2804 / 279 1445
  • E-mail: ada@ada.lt 
  • Fax: +370 261 9494  
11. Who we may disclose your personal data to?

We are not in the business of selling your personal data to others. In certain instances, We may disclose your personal data to third parties for the purpose of executing tasks and delivering Services to you on our behalf. Such sharing will only occur when deemed appropriate or essential to fulfill the purposes outlined in this Privacy Policy. We ensure that third parties receive only the minimal amount of personal data required to fulfill the specific service requested. 

Personal data may be disclosed to the following parties:

  • our parent companies, subsidiaries, affiliates;
  • business partners with whom We jointly offer products or Services as allowed by law;
  • suppliers;
  • sub-contractors;
  • our advertising partners.

We also ensure We have appropriate contractual protections in place with these third parties.

In some circumstances, We can share your personal data to law enforcement agencies (courts, prosecuting authorities), regulators (fraud or crime prevention agencies), government/public authorities (tax authorities, banks) and officials, or other relevant third parties.

In exceptional cases, our Company may transfer your personal data to other countries for the provision of our Services.

12. How does the international transfer of personal data proceed?

When you use our Services, you give us consent to transfer your data to other countries, even to countries with privacy and data protection laws that differ from those in your country. Whenever such transfers occur, We will protect and process your personal data as described in this Privacy Policy.

If We transfer personal data from the European economic area (“EEA”) to a country not deemed by the European Commission to provide an adequate level of protection for such data, the transfer will be governed by an agreement that complies with EU standards for transferring personal data to non-EEA countries. This may include the use of Standard Contractual Clauses endorsed by the European Commission. 

13. What are the provisions for retaining your personal data?

We retain your personal data for the duration necessary to provide our Services and comply with the national AML and CTF provisions. The duration of retention is five years after you close your account or stop using our Services.

14. How do we secure your personal data? 

Our company takes reasonable efforts to maintain a level of security appropriate to the risk associated with the processing of your personal data. Our aim is to prevent unauthorized access or interference with the personal data collected through our site by third parties unaffiliated with us.

Therefore, We employ appropriate electronic, managerial, and technical measures to safeguard and protect your personal data. The security measures We implement include, but are not limited to:

  • only employees who are duly authorized by us may access your personal data and these employees are obligated to maintain the confidentiality of your data;
  • the encryption of your personal information is in place to safeguard your data;
  • personally identifiable data is stored on our secure servers or stored on third party servers located in secure data centers.

Please note that no Internet or email transmission can be guaranteed to be entirely secure or error-free. Specifically, email communications to or from us may not be completely secure. Therefore, please use caution when deciding what information to transmit.

Furthermore, We cannot be held responsible for any bypassing of privacy settings or security measures on the third-party websites.

15. Who is responsible for the content of the links to third-party websites, products or Services?

We provide our Services with the protection of your privacy in mind. Although We endeavor to only link to sites, products or Services with high privacy standards, our Privacy Policy will no longer apply once you leave our website or bot.

In addition, by no means any link should be construed as an endorsement or approval of any third party by our Company. Therefore, We encourage you to examine the privacy policy of each website, product and service separately to be aware how they deal with your personal information. We are not responsible for the privacy practices employed by third parties. 

16. Marketing

With your consent, We may use your personal information for our marking purposes. You may receive the following communications: newsletters, promotional materials and announcements related to our new products. The content of these communications is designed to enhance your overall experience and keep you informed about the latest offerings.

In addition, We may share your personal data with our marketing partners for the purposes of targeting, analytics, as well as for advertising activities.

You can ask us or our partners to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at support@001k.bot.

 17. How is this Privacy Policy update managed? 

We reserve the right to update this Privacy Policy from time to time. Changes become effective when posted on this page. 

Any amendments will be displayed or otherwise communicated to you while using the Services. If you continue to use our Services within one week after receiving such notification, you will be deemed to have accepted all changes and agreed to comply with the updated Policy. 

If you do not agree with any changes made to this Privacy Policy, please discontinue using our Services.

In the event of any discrepancies or inconsistencies in translation between the English version and any translated versions of this Policy, the English original shall prevail and be binding.


Report Page