Privacy Policy

Preamble

ARK Digital Assets, a Société par Actions Simplifiée (simplified joint stock company) of IT services and digital consultancy firm with a capital of 10,000 euros, having its registered office at 31 bis Rue des longs pres – 92100 Boulogne Billancourt and registered with the official registration number 949 869 499.

ARK Digital Assets (hereafter ARK DA) is committed to complying with the legislation in force in France and in Europe (Regulation 2016/679 of 27 April 2016), to ensuring the protection, confidentiality and security of personal data, as well as to ensuring respect for privacy.

This Personal Data Protection Policy (hereinafter "the Policy") describes how ARK DA collects and processes the personal data of ARK DA and all other persons affected by the processing carried out by ARK DA.

The Policy also sets out the legal basis on which we process personal data, with whom we share it and how it is stored.

ARK DA is, depending on the processing, a Data Controller or a Data Processor:

ARK DA complies with applicable privacy regulations and is committed to the following principles:

Article 1. Definitions

"Personal data" / "Personal data" / "Data": any information relating to an identified or identifiable natural person, directly by name or surname, for example, or indirectly by reference to an identifier, such as an identification number, location data, an online identifier or to one or more factors specific to his or her physical, physiological, genetic, psychological, economic, cultural or social identity.

Article 2. For which purposes your data are processed

Your Personal Data are used for the following purposes:

Article 3. On what legal basis is the data processed? How long is my data kept

When health data is collected and processed, the legal bases are, on the one hand, the one on which the processing is based, and, on the other hand, consent.

Very important

For some processing operations, ARK DA acts as a processor. For example, third party companies may subcontract certain processing to ARK DA

In such cases, your Data is processed in accordance with the Data Protection Policies of those companies.

Article 4. Who are the recipients of your data?

Only those persons who need to know your data in the context of their missions have access to it. These are other companies linked to ARK DA, which are ARK DA 31 bis rue des longs pres 92100 Boulonge Billancourt RCS Nanterre 834 041 618

These companies are likely to collect the Data concerned by this Policy. ARK DA’s partners and their management delegates who may have the status of data processors depending on the type of processing in question; ARK DA’s employees or intermediaries; –intermediaries in partnership with ARK DA; administrative and judicial authorities to meet legal and regulatory obligations. ARK DA’s subcontractors.

Article 5. Transfer of data outside the European Union

When the processing of Your data involves a transfer outside the European Union, these transfers are made in return for appropriate guarantees in terms of confidentiality and security of the data, in full compliance with the applicable regulations. Transfers outside the European Union are based on standard contractual clauses, in accordance with the model clauses validated by the European Commission.

Article 6. What rights do You have regarding Your Personal Data?

You have the following rights regarding Your Personal Data: To learn more about Your rights, you can visit the CNIL website (www.cnil.fr/fr/comprendre-vos-droits). When ARK DA processes Your Data as a subcontractor (for example of an insurance company), your request to exercise these rights may be transmitted to this company. The above rights are exercised within the legal and regulatory framework and within the limits of our contractual obligations to you or to the insurers we work with.

When requesting the exercise of rights, proof of identity may be requested, in particular to preserve the security of the processing that is the subject of the request. A reply will be sent to you, depending on the complexity of your request, within the time limits prescribed by article 12.3 of the RGPD. For any complaint to the Commission Nationale Informatique et Libertés (CNIL), you can write to the following address CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris cedex 07.

Article 7. How is your personal data protected?

ARK DA ensures that the data is treated with complete security and confidentiality, including when certain operations are carried out by subcontractors. To this end, we put in place appropriate technical and organizational measures to prevent the loss, misuse, alteration and deletion of Your personal data. These measures are adapted according to the level of sensitivity of the processed data and the level of risk that the processing or its implementation presents.

Article 8. How to exercise my rights?

To exercise Your rights, ARK DA's Data Protection Officer (DPO) is available at contact@ark-digitalassets.com or at ARK DA's postal address – 31 bis Rue des longs pres – 92100 Boulogne Billancourt.

ARK DA has, in accordance with Article 12 of the GDPR, one month to respond to your request. This period may be extended by two months, taking into account the complexity and number of requests.