In accordance with Article 13(1) and (2) of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016, hereinafter referred to as GDPR, we inform you that:

1. The Administrator of your personal data is GIFTARO Limited seated on Marshall Islands, correspondence address: GIFTARO Ltd, Trust Company Complex, Ajeltake Road, Ajeltake Island, Majuro, Marshall Islands, MH96960, e-mail address: [email protected] hereinafter referred to as the Seller,

2. Your personal data will be processed for the purpose related to the conclusion and performance of the sales contract and for marketing purposes, including profiling, in relation to the products and services of the Seller, pursuant to Article 6(1)(a), (b) and (f) of GDPR, and pursuant to the legally justified interest pursued by the administrator shall be concidered as asserting claims arising from the concluded sales contract.

3. Entities cooperating with the Seller, responsible for marketing and advertising services, as well as for the proper performance of the sales contract on behalf of the Seller will be recipients of your personal data.

4. Your personal data will be stored until the expiration of limitation of claims under the sales contract or until the expiration of the obligation to store the data, arising from legal regulations, in particular the obligation to store accounting documents related to the contract. Personal data entrusted for marketing purposes will be processed for a period of 5 years from the date of granting a consent or until the withdrawal of your consent given for this purpose.

5. You have the right to access the content of your data, as well as the right to request a copy of your data, or to rectify, erase, limit the processing of your data, the right to data portability and the right to be forgotten.

6. If the processing of your personal data is based on the legitimate interests of the Administrator, you have the right to object, as referred to in Article 21 of the GDPR, in particular to the processing of your personal data for the purposes of direct marketing, including profiling.

7. Notwithstanding the above, to the extent that your personal data is based on the given consent, you have the right to withdraw the consent at any time without affecting the lawfulness of the processing carried out on the basis of consent prior to its withdrawal. Withdrawal of consent may be carried out by using the form below or by contacting the administrator.

8. In order to exercise your rights, you should contact the data Administrator.

9. Your personal data may be transferred outside the European Economic Area, i.e. to a third country/international organisation.

10. You have the right to lodge a complaint with the President of the Office for the Protection of Personal Data if you believe that the processing of your personal data concerning you violates the rules of the GDPR; The Administrator has ensured adequate personal data protection safeguards and effective legal protection measures.

11. The provision of personal data by you is voluntary, but necessary for the conclusion and execution of a sales contract. The provision of personal data by you for marketing purposes, including profiling, in relation to the products and services of the Seller is voluntary.

12. Your data will not be processed automatically. Your data will be processed in the form of ordinary profiling in order to adjust the offers of the seller to your needs as much as possible.

Please read our Privacy Policy.