Privacy Policy and Data Protection – Blackrose Finbitnex

This Privacy Policy defines the strict data security protocols that Blackrose Finbitnex ("the Platform", "we", "us" or "our") uses to protect user information processed via https://blackrosefinbitnex-crypto.com. Located at De Haagse Poort in The Hague, we are unconditionally committed to protecting your digital privacy in accordance with the General Data Protection Regulation (GDPR).

1. Data Architecture and Collection

To provide a secure and compliant crypto analysis environment, we collect the following categories of personal data:

Identity Data

Full name, date of birth, and official identification documents required for mandatory Know Your Customer (KYC) verification under the Wwft.

Contact Data

Verified email address, active phone number, and registered residential address.

Digital Telemetry

IP addresses, wallet addresses, browser specifications, and detailed interaction logs from our trading interfaces.

Financial Compliance

Information on the origin of funds, necessary to comply with Dutch anti-money laundering guidelines.

2. Legal Basis for Processing

In accordance with European legislation, we process your personal data based on:

Contractual necessity: To manage your account and provide our technical analysis services.
Legal obligations: To comply with the registration and reporting requirements for crypto service providers in the Netherlands.
Legitimate interests: For fraud prevention, system integrity, and the security of digital assets.

3. Security Standards and Retention

Blackrose Finbitnex utilizes enterprise-grade 256-bit AES encryption and cold-storage protocols for data integrity. Your data is stored on highly secure servers within the European Economic Area (EEA). We maintain a statutory retention period of a minimum of 5 to 7 years for data relevant to financial audit and compliance purposes.

4. Your Rights under the GDPR

You have the right to access, rectification, erasure, and data portability. Given the nature of blockchain technology, certain transaction data may be immutable, but your personal identification data is fully covered by GDPR rights.

Contact for privacy requests: [email protected].

Effective date: March 31, 2026.