DATA PROTECTION & PRIVACY NOTICE
Last Updated: October 2022
1. Introduction
This Data Protection Notice explains how XIXO Chain ("we", "us", or "our") processes and safeguards personal information in connection with our digital services, offerings (the "Services"), and our online platform (the "Platform"). Protecting your privacy and ensuring secure handling of your data is a core priority in the operation of XIXO Chain.
Our Platform may contain links to third-party websites or external services. XIXO Chain is not responsible for the privacy practices of those external providers. We recommend reviewing their respective privacy policies before sharing information.
All information collected through our Services is treated with strict confidentiality. We apply appropriate technical, administrative, and organisational safeguards to protect Personal Data against unauthorised access, misuse, alteration, accidental loss, destruction, or disclosure.
When submitting information via the Platform, you may be asked to provide personal details such as your full name, email address, telephone number, date of birth, and identification information. These details may be used to verify identity, manage your account, provide customer support, and fulfil contractual or legal obligations. We may also send service-related notifications and, where consent is given, promotional communications. You may manage communication preferences or opt out at any time.
2. Platform Access – Visitors and Users
2.1 General Overview
This section describes how XIXO Chain collects and processes information from Platform visitors ("Visitors"), registered users ("Users"), and business partners ("Partners"). Personal Data may include IP address, contact details, identifying information, and information relating to your interaction with XIXO Chain, in accordance with applicable data protection laws.
2.2 Collection and Use of Data
By accessing or using the Platform, you acknowledge and agree to the collection and processing of your Personal Data as outlined here. If you do not agree, you should refrain from using the Platform. Data may be collected automatically (such as IP address, browsing behaviour, and cookies) as well as through forms, registrations, and direct communications.
2.3 Purpose of Processing Personal Data
XIXO Chain processes Personal Data to enhance functionality, improve user experience, provide relevant communications, deliver customer support, fulfil contractual obligations, and collaborate with authorised partners where appropriate. All processing activities are conducted on a valid legal basis in accordance with applicable data protection regulations.
The following table outlines the purposes and legal bases for processing Personal Data:
| Account registration and profile setup | Your consent; Performance of Services or contractual necessity |
| Delivery and operation of the Services | Performance of Services or contractual necessity |
| Service notifications and operational updates | Performance of Services or contractual necessity |
| Responding to enquiries and providing support | Legitimate interests or performance of Services |
| Personalised services, advertising and marketing | Legitimate interests or your consent |
| Improving existing Services and developing new features | Consent and legitimate interests |
| Distribution of promotional and marketing materials | Your consent |
| Evaluating marketing campaign performance | Legitimate interests or consent |
| Operational and administrative support activities | Legitimate interests or contractual necessity |
| Analytics and statistical evaluation | Legitimate interests |
| Protection of rights, property, and legal interests | Legitimate interests or legal obligation |
2.4. Sharing of Personal Data
XIXO Chain may share Personal Data with trusted service providers, authorised partners, and contractors where necessary for operational purposes. For Visitors and Users located within the European Economic Area (EEA), data processing is conducted in accordance with the General Data Protection Regulation (GDPR) and applicable data protection legislation.
3. Partners
3.1. Overview
In order to deliver Services and collaborate with business partners, XIXO Chain may collect and process certain categories of information. Partners remain responsible for their own data, and secure access methods are used when interaction is required.
3.2. Processing of Personal Data
Processing of Partner-related Personal Data is based on contractual necessity, legitimate interests, or Partner consent where applicable. Aggregated or anonymised datasets may be generated for service improvement and quality enhancement.
3.3. Controller / Processor Roles
XIXO Chain may act as either Data Controller or Data Processor depending on the context:
- Visitor/User Data: Data Controller
- Partner Data: Data Processor
- All data is securely hosted using industry-standard protection measures, including physical, technical, and organisational safeguards.
3.4. External Data Processing
If Services involve processing Personal Data on an external platform:
- XIXO Chain acts as Data Processor
- Processing follows documented instructions from the relevant party
- Appropriate technical and organisational safeguards are applied
- Any data breaches are reported in accordance with legal obligations
- No subcontracting occurs without prior authorisation
- No processing outside the European Economic Area without appropriate safeguards
- Electronic marketing communications require consent and include opt-out mechanisms
4. Security
XIXO Chain implements administrative, organisational, and technical safeguards designed to protect Personal Data from unauthorised access, disclosure, alteration, misuse, or destruction. When Personal Data is shared with external providers, contractual safeguards ensure equivalent levels of data protection.
If you suspect that your interaction with XIXO Chain has been compromised, you should notify us immediately. While we apply robust security standards, no system can guarantee absolute protection against external threats. Users acknowledge the inherent risks of online data transmission.
5. Cookies
Please refer to our Cookie Policy for detailed information regarding the types of cookies and tracking technologies used, their purposes, and how you may manage or withdraw consent.
6. Links to External Websites
The Platform may contain links to third-party websites beyond the control of XIXO Chain. We are not responsible for the privacy practices or content of such websites. Users are encouraged to review external privacy policies before submitting any Personal Data.
7. Data Retention and Deletion
Personal Data is retained only for as long as necessary to fulfil the purposes described in this Notice, or as required by applicable law. Users with active accounts are responsible for managing and deleting information where appropriate. Upon termination of an account or partnership, relevant Personal Data will be deleted or anonymised in accordance with legal requirements and internal policies.
Withdrawal of consent may result in restricted access to certain Services offered by XIXO Chain, without entitlement to compensation or claims.
8. Your Rights
Under applicable data protection laws, Users have the following rights:
8.1. Right of Access
- Confirmation of whether Personal Data is being processed
- Access to Personal Data and related information
- Information regarding purposes, categories, recipients, retention periods, rights, and existence of profiling activities
8.2. Right to Rectification
- Correction of inaccurate Personal Data
- Completion of incomplete Personal Data
8.3. Right to Erasure
- Request deletion of Personal Data under applicable legal grounds
8.4. Right to Restriction of Processing
- Request limitation of processing in certain circumstances
8.5. Right to Data Portability
- Receive Personal Data in a structured, machine-readable format
- Transfer Personal Data to another controller where technically feasible
8.6. Right to Object
- Object to processing based on legitimate interests or direct marketing
- Processing will cease unless overriding legal grounds apply
8.7. Right to Withdraw Consent
- Withdraw consent for processing at any time
9. Advertising and Marketing Materials
Where consent is provided, XIXO Chain may use Personal Data to deliver marketing communications and promotional materials. Consent may be withdrawn at any time by contacting us via the email address provided below.
10. Acceptance of this Notice
By using the Platform and/or Services, Visitors, Users, and Partners acknowledge that they have read and agreed to this Data Protection Notice. Continued use following updates constitutes acceptance of modifications. XIXO Chain reserves the right to amend this Notice periodically.
11. Legal Disclosure Requirements
Personal Data may be disclosed without prior notice where necessary to comply with legal obligations, enforce rights, protect property, or pursue legal remedies against suspected unlawful activity.
12. Data Protection Contact
For any questions regarding privacy or data protection matters, please contact our designated Data Protection Officer at