Log In
Register

OrangeX Privacy Notice

Last updated: September 29, 2024

1. Introduction

OrangeX Fintech s.r.o. (hereafter also referred to as "the Company", "we", "us", or "our") is authorized as a virtual currency exchange operator. The Company is incorporated under the laws of Czech, with legal entity code 19892853 and registered address at Sokola Tůmy 743/16, Mariánské Hory, 709 00 Ostrava. The Company owns and operates the domain https://www.orangex.com (hereafter the "Website).
OrangeX is the brand name for our onramp service, operated by OrangeX Fintech s.r.o.. Throughout this privacy policy, any reference to "OrangeX" or "we" refers to OrangeX Fintech s.r.o., the legal entity responsible for operating the OrangeX service.
OrangeX Fintech s.r.o. operates a comprehensive cryptocurrency exchange platform, providing services such as spot trading, perpetual contracts, and copy trading. OrangeX collects and processes personal data, including KYC (Know Your Customer) and transaction information, in compliance with applicable regulations. As a traditional cryptocurrency exchange, it ensures the security and privacy of users while offering a seamless trading experience across multiple cryptocurrencies.
The Company is the controller of your personal data collected via the means described herein and any process of your personal data is performed in accordance with this Privacy Policy (hereafter "the Policy") and the requirements of theRegulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereafter "GDPR"), Law on the Legal Protection of Personal Data of the Czech Republic and other applicable legal acts.
Data Subject (hereinafter "you" or "your") stands for an identified or identifiable natural person, whose personal data the Company processes in course of conducting business, regardless the personal data were obtained from this person directly or from third parties. At the Company, we treat all former, existing, or prospective clients, individual visitors that enter our Website, all private individuals that represent our corporate clients (i.e. authorized representatives, proxies, etc.), and all our private individual clients as Data Subjects in the sense of the GDPR.
Personal data means any information relating to an identifiable natural person (i.e. using information and data in order to directly or indirectly identify a specific person).
Processing means any operation(s) which is performed on personal data (or on sets of personal data) whether or not by automated means such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction.

2. Scope and Applicability

As part of the Company’s daily operations, it is necessary for us to collect personal data from you to be able to provide you with our products and services. This Policy describes how the Company processes your personal data.
Any personal data the Company collects about you will only be used for the purposes we have collected it for, or as allowed under the applicable legislation, and to perform our contractual obligations concerning the products and services offered. This Policy covers the Company’s Website https://www.orangex.com all its related sub-domains that are registered and operated by the Company, as well as the payment gateways and any other software solutions used by the Company.
This Policy applies to the processing of personal data regardless of the form/environment in which the personal data is provided (e.g. on paper, electronically, by phone or otherwise) and whether or not the Company process it by automated means or manually.
The Company strives to protect the privacy, confidentiality and security of all personal data obtained from you during the course of your business relationship and dealings with the Company, including information obtained during your visits to our Website.

3. Our Commitment to You

The Company fully understands the importance of maintaining the confidentiality and privacy of your personal data. We respect your privacy, and to this end, we are committed to taking all reasonable steps to protect and safeguard the privacy, confidentiality, security, and integrity of your personal data.

4. How do we collect your Personal Data?

We use different methods to collect information from and about you, including through:
Direct interactions. You may provide us with your Identity Data, Social Identity Data, Contact Data, Financial Data, Profile Data and Marketing and Communications Data by directly interacting with us, including by filling in forms, providing a visual image of yourself via the Service, by email or otherwise. This includes personal data you provide when you:
  • Visit our Site or App;
  • Apply for our Services;
  • Create an account;
  • Make use of any of our Services;
  • Request marketing to be sent to you, for example by subscribing to our newsletters;
  • Enter a competition, promotion or survey, including through social media channels; or
  • Give us feedback or contact us.
Automated technologies or interactions. As you interact with us via our Site or App, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other online identifiers. We will also collect Transactional Data and Usage Data. We may also receive Technical Data and Marketing and Communications Data about you if you visit other websites employing our cookies. You may find more information about how we use cookies through the Cookie Preferences.
Social media widgets and similar links. Our Site may contain links, social media plug-ins, "widgets", "tweet", "share" and "like" buttons linked to social media platforms such as Facebook, X (Twitter), Instagram, Threads, Discord, LinkedIn, Reddit and Telegram.

5.What Personal Data do we collect?

Personal data
Personal data, or personal information means any information that relates to an identified or identifiable living individual. This includes information you provide to us, information which is collected about you automatically, and information we obtain from third parties.
Category of personal dataExamples of specific pieces of personal data
Identity Data
  • full name
  • maiden name
  • username or similar identifier
  • date of birth
  • biometric information, including a visual image of your face
  • national identity card, passport, driving licence or other form of an identification document.
Contact Data
  • country of residence
  • email address or telephone numbers
  • proof of address documentation (if applicable))
Financial Data
  • bank account
  • payment card details
  • virtual currency accounts
  • stored value accounts
Transactional Data
  • details about transaction to and from you
  • other details of any transactions you enter into using the Services, Site or App.
Technical Data
  • internet connectivity data
  • internet protocol (IP) address
  • operator and carrier data
  • login data
  • browser type and version
  • device type, category and model
  • time zone setting and location data
  • language data
  • application version and SDK version
  • browser plug-in types and versions
  • operating system and platform
  • diagnostics data such as crash logs and any other data we collect for the purposes of measuring technical diagnostics, and
  • other information stored on or available regarding the devices you allow us access to when you visit the Site, or use the Services or the App.
Profile Data
  • username and password
  • identification number as our user
  • information on whether you have Orangex App account and the email associated with your accounts
  • requests by you for products or services
  • your interests, preferences and feedback
  • other information generated by you when you communicate with us, for example when you address a request to our customer support.
Usage Data
  • information about how you use the Site, the Services, mobile applications and other offerings made available by us, including:
  • device download time
  • install time
  • interaction type and time
  • event time, name and source.
Marketing and Communications Data
  • your preferences in receiving marketing from us or third parties
  • your communication preferences
  • your survey responses.

6. How do we process your Personal Data?

Lawful basis
We will only use your personal data when the applicable legislation allows us to. In other words, we must ensure that we have a lawful basis for such use. Most commonly, we will use your personal data in the following circumstances:
performance of a contract: means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract; we use this basis for provision of our Services;
legitimate interests: means our interests (or those of a third party), where we make sure we use this basis as far as your interests and individual rights do not override those interests;
compliance with a legal obligation: means processing your personal data where we need to comply with a legal obligation we are subject to;
consent: means freely given, specific, informed and unambiguous indication of your wishes by which you, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to you; under specific circumstances this consent should be explicit – if this is the case, we will ask for it properly.
Purposes for which we use your personal data
We have set out below, in table format, a description of the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are, where appropriate.
Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground, we are relying on to process your personal data where more than one ground has been set out in the table below.
Purpose and/or activityCategories of personal dataLegal basis for processing
To register you as a new customer
  • Identity Data
  • Contact Data
  • Financial Data
  • Performance of a contract
To carry out and comply with anti-money laundering requirements
  • Identity Data
  • Contact Data
  • Financial Data
  • Transactional Data
  • Technical Data
  • Profile Data
  • Compliance with a legal obligation
To process and deliver the Services (including products offered by third-party service providers with whom we work) and any App features to you, including to execute, manage and process any instructions or orders you make through the Services
  • Identity Data
  • Contact Data
  • Financial Data
  • Transactional Data
  • Technical Data
  • Performance of a contract
  • Consent, if required
To prevent abuse of our Services and promotions
  • Identity Data
  • Contact Data
  • Financial Data
  • Transactional Data
  • Technical Data
  • Marketing and Communications Data
  • Legitimate interests: safeguarding the security and integrity of our Services by detecting and preventing fraud and unauthorized activities, thereby protecting both our business and our customers
To manage our relationship with you which will include asking you to leave a review, take a survey or keeping you informed of our company's business and product development
  • Identity Data
  • Contact Data
  • Profile Data
  • Transactional Data
  • Marketing and Communications Data
  • Performance of a contract
  • Consent, if required
To keep our recordsupdated and to studyhow customers use ourproducts/services
  • Identity Data
  • Contact Data
  • Profile Data
  • Transactional Data
  • Technical Data
  • Marketing and Communications Data
  • Legitimate interests: to maintain accurate customer data for effective service and informed business decisions, and to enhance our offerings by understanding customer interactions
  • Consent, if required
To manage, process, collect and transfer payments, fees and charges
  • Identity Data
  • Contact Data
  • Financial Data
  • Transactional Data
  • Performance of a contract
To obey applicable legislation and handle complaints, including:
  • manage risk and crime prevention involving performance of anti-money laundering, counter terrorism, sanction screening, fraud and other background checks
  • detect, investigate, report and prevent financial crime in a broad sense and
  • ensure your account's security, in order to honor requests regarding information and/or changes to your account
  • Identity Data
  • Contact Data
  • Financial Data
  • Transactional Data
  • Technical Data
  • Profile Data
  • Usage Data
  • Sensitive Data (a.k.a. Special Categories Data*) data that you give us directly or that we receive from third parties and/or publicly available sources:
    - data which might be revealed by KYC or other background checks (for example, because it has been reported in the press or is available in public registers);
    - data collected via facial scan as part of identity verification processes;
    - data that is incidentally revealed by photographic ID although we do not intentionally process this personal data.
  • Compliance with a legal obligation
  • Performance of a contract
  • Legitimate interests: ensuring that we are not involved in dealing with the proceeds of criminal activities and do not assist in any other unlawful or fraudulent activities, as well as to develop and improve our internal systems for dealing with financial crime and to ensure effective dealing with complaints* Special Categories Data: where we process such data we rely on reasons of substantial public interest under the Seychelles AML CFT Act, the EU AML Directives, the UK AML framework and so forth.
To enable you to partake in a prize draw, competition or complete a survey
  • Identity Data
  • Contact Data
  • Profile Data
  • Usage Data
  • Marketing and Communications Data
  • Performance of a contract
  • Consent, if required
To gather market data for studying customers' behavior including their preference, interest and how they use our products/services, determining our marketing campaigns and growing our business
  • Identity Data
  • Contact Data
  • Profile Data
  • Usage Data
  • Marketing and Communications Data
  • Legitimate interests: understanding our customers and improving our products and services
To administer and protect our business, our Site, App(s) and social media channels including bans, troubleshooting, data analysis, testing, system maintenance, support, reporting, hosting of data
  • Identity Data
  • Contact Data
  • Financial Data
  • Technical Data
  • Transactional Data
  • Usage Data
  • Legitimate interests: to run our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganization or group restructuring exercise
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you
  • Identity Data
  • Contact Data
  • Profile Data
  • Usage Data
  • Technical Data
  • Marketing and Communications Data
  • Legitimate interests: to study how customers use our products/services, to develop them, to grow our business and to form our marketing strategy
  • Consent, if required
To use data analytics to improve our website, products/services, marketing, customer/user relationships and experiences
  • Technical Data
  • Usage Data
  • Marketing and Communications Data
  • Legitimate interests: to study how customers use our products/services, to develop them, to grow our business and to form our marketing strategy
  • Consent, if required
To make suggestions and recommendations to you about goods or services that may be of interest to you
  • Identity Data
  • Contact Dat
  • Technical Data
  • Usage Data
  • Profile Data
  • Marketing and Communications Data
  • Legitimate interests: to develop our products/services and grow our business
  • Consent, if required
To use the services of social media platforms or advertising platforms some of which will use the personal data they receive for their own purposes, including marketing purposes
  • Technical Data
  • Usage Data
  • Consent
To use the services of and enter into partnerships with, financial institutions, third-party partners whose products form a part of the Services offered, crime and fraud prevention companies, risk measuring companies, which will use the personal data they receive for their own purposes in their capacity of independent controllers
  • Identity Data
  • Contact Dat
  • Financial Dat
  • Transactional Data
  • Technical Data
  • Usage Data
  • Legitimate interests: to conduct our business activities and provide the Services to you, and to participate actively in the prevention of crime and fraud

Automated Decision Making

What is an automated decision?
Automated decision is usually a decision that may impact you and is made automatically based on software algorithms, without human intervention. As an illustrative example, we use automated decisions to complete the onboarding process of a new customer or to perform anti-fraud monitoring.
Why is an automated decision important to you?
Depending on the particular case, using your personal data may lead to automated decisions being taken (including profiling) that legally affect you or similarly significantly affect you.
How do we protect your interests regarding automated decisions?
The rights and interests of individuals whose personal data undergoes automated decision-making is safeguarded through appropriate measures. When an automated decision is made about you, you have the right to oppose the decision.. If you need more detailed information or wish to exercise this right, please contact us.

Marketing

We may use your Identity Data, Contact Data, Technical Data, Transactional Data, Usage Data and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.
You will receive marketing communications from us if you have requested information from us and consented to receive marketing communications, or if you have purchased from us and you have not opted out of receiving such communications. We will use your Marketing and Communications Data for our respective activities.

Third-party marketing

We will obtain your opt-in consent before we share your personal data with any third party for marketing purposes.

Opting out

Youmay opt out of marketing communications at any time by following the opt-out links on any marketing message sent to you.
Further, you can login and cancel the marketing messages in Notifications.
Where you opt out of receiving marketing messages, this will not apply to service messages which are directly related to the use of our Services (e.g. maintenance, change in the terms and conditions and so forth).
Our Use of Cookies and Other Tracking Mechanisms
We and our third-party service providers use cookies and other tracking mechanisms to track information about your use of our Platform. We may combine this information with other personal information we collect from you (and our third-party service providers may do so on our behalf).
Cookies.

Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Platform, while others are used to enable a faster log-in process or to allow us to track your activities at our Platform. There are two types of cookies: session and persistent cookies.

Session cookies exist only during an online session. They disappear from your computer when you close your browser or turn off your computer. We use session cookies to allow our systems to uniquely identify you during a session or while you are logged into the Platform. This allows us to process your online transactions and requests and verify your identity, after you have logged in, as you move through our Platform.

Persistent cookies remain on your computer after you have closed your browser or turned off your computer. We use persistent cookies to track aggregate and statistical information about user activity.

Please note that our systems do not currently respond to do-not-track signals.

Disabling Cookies. Most web browsers automatically accept cookies, but if you prefer, you can edit your browser options to block them in the future. The general settings on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Users of our Platform who disable cookies will not be able to browse certain areas of the Platform.
Third Party Analytics. We use automated devices and applications, such as Google Analytics, to evaluate usage of our Platform. We also may use other analytic means to evaluate our Platform. We use these tools to help us improve our Platform, performance and user experiences. These entities may use cookies and other tracking technologies to perform their services. We do not share your Personal Information with these third parties.
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Sale or transfer of business
We may also need to process your data in connection with or during the negotiation of any merger, financing, acquisition, bankruptcy, dissolution, transaction or proceeding involving all or a part of our shares, business or assets. This will be based on our legitimate interests in carrying out such transactions, or to meet our legal obligations.

7. Contacting You

The Company or its affiliates, business partners, associates or other agents may, from time to time, contact you by telephone, email, or otherwise, for the purposes of offering you further information about the Company’s products and services, or to inform you of promotional offerings, or for marketing purposes, or to conduct market research, with your prior consent.
In case you do not agree to receive these marketing messages or calls, this will not have any impact on the provision of our services to you.
If you wish to opt-out of any further contact at any time and for whatever reason, you are entitled to do so by contacting the Company’s back-office department via email dpo@orangex.com and requesting in writing that you wish no further contact in relation to the above reasons.

8. Disclosure and Transfer of your Personal Data

We may share your personal data with our third-party service providers, agents, subcontractors and other associated organizations, our group companies, and affiliates (as described below) in order to complete tasks and provide the Services and use of the App to you on our behalf. When using third party service providers, they are required to respect the security of your personal data and to treat it in accordance with the law.
We pass your personal data to the following entities:
  • Companies and organizations that assist us in processing, verifying or refunding transactions/orders you make and in providing any of the Services that you have requested;
  • Third-party service providers with whom we work and whose products, services or applications are hosted/integrated on our Site and App;
  • Identity verification agencies to undertake required verification checks;
  • Fraud or crime prevention agencies to help fight against crimes including fraud, money-laundering and terrorist financing;
  • Anyone to whom we lawfully transfer or may transfer our rights and duties under the relevant terms and conditions governing the use of any of the Services;
  • Any third party because of any restructure, sale or acquisition of our group or any affiliates, provided that any recipient uses your information for the same purposes as it was originally supplied to us and/or used by us; and
  • Regulatory and law enforcement authorities, whether they are outside or inside the Republic of Seychelles, where the law allows or requires us to do so.
Specifics regarding the use of blockchain
The blockchain technology used in the provision of certain Services operates on a decentralized network, where transactions are recorded in an immutable and transparent manner. This characteristic ensures the integrity and security of the data stored on the blockchain. However, it also means that once data is added to the blockchain, it becomes virtually impossible to remove or delete it.

Transfer of Information

Please note, we may store your Personal Information on servers located in the countries where our main offices are located. If such jurisdiction is outside your jurisdiction of residence, you consent to the transfer of your Personal Information to such jurisdiction for purposes of providing the Platform to you, even if such other jurisdiction has less protection for Personal Information than your jurisdiction of residence. We will ensure that security provisions are in place consistent with our obligations to maintain the security of your Personal Information under the laws of your jurisdiction of residence.

9. Safeguard Measures

While there is an inherent risk in any data being shared over the internet, we have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, damaged, or accessed in an unauthorised or unlawful way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a legitimate business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
Depending on the nature of the risks presented by the proposed processing of your personal data, we will have in place the following appropriate security measures:
  • Organisational measures (including but not limited to staff training and policy development);
  • Technical measures (including but not limited to physical protection of data, pseudonymization and encryption); and
  • Securing ongoing availability, integrity, and accessibility (including but not limited to ensuring appropriate back-ups of personal data are held).
We have put in place procedures to deal with any suspected personal data breach and will notify you and any relevant regulator of a breach where we are legally required to do so.

10. Our identification tools

To perform your identity verification, OrangeX Fintech s.r.o. uses an in-house solution to collect and process the necessary identification data. This process includes capturing photo images or video recordings of your face and ID document using a secure web or mobile interface. The data collected is used to meet our legal obligations, such as those under the Law on Prevention of Money Laundering and Terrorist Financing of the Czech Republic, as well as for fraud and crime prevention and risk management purposes.
The face comparison results (match or mismatch) are retained only for as long as necessary to complete the verification and to comply with anti-money laundering regulations. We ensure that your facial data is used solely for one-time verification and is not stored as a facial template, nor is it possible to regenerate the raw data from the retained information.
By using this in-house solution, we verify that the individual in the ID document matches the person captured in the photo or video, facilitating a precise and efficient identity verification process. Should you prefer an alternative identification method, you may contact us at dpo@orangex.com.

11. Automated decision making

In some instances, the Company may implement automated decision-making processes, which involve decisions made purely through automated data processing, without human intervention. This could involve the use of software algorithms for tasks such as verifying user identities, detecting fraudulent activities, or assessing trading risks.
Automated decision-making helps us efficiently manage certain aspects of our services. If you feel that an automated decision has been inaccurate or unfair, you have the right to request a manual review of the decision.
For more information about your rights regarding your personal data, please refer to the section titled Your Rights Regarding Your Personal Data.

12. Storage and Retention Period of your Personal Data

Retention periods will be determined taking into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable time. When personal data is no longer necessary for the purpose for which it was collected, we will securely destroy the records. This means that we store your data for as long as it is necessary for provision of our services and as required by the retention requirements in laws and regulations. If the legislation of the Czech Republic does not provide any applicable data retention period, it shall be determined by us, taking into account the legitimate purpose of the data retention, the legal basis and the principles of lawful processing of personal data.
The terms of data retention of the personal data for the purposes of the processing of the personal data as specified in this Policy are as follows:
  • as long as your consent remains in force, if there are no other legal requirements which shall be fulfilled with regard to the personal data processing. We reserve the right to retain records of any consent given and withdrawn for a period of time necessary to protect our rights;
  • in case of the conclusion and execution of contracts – until the contract concluded between you and us remains in force and up to 10 years after the relationship between you and us has ended;
  • the personal data collected for the implementation of the obligations under the Law on the Prevention of Money Laundering and Terrorist Financing shall be stored up to 10 (ten) years as provided in the Act No. 253/2008 Coll. on Certain Measures against Money Laundering and Terrorist Financing of the Czech Republic. The retention period may be extended for a period not exceeding 2 (two) years, provided there is a reasoned request from a competent authority;
  • the personal data submitted by you through our website or via e-mail is kept for an extent necessary for the fulfilment of your request and to maintain further cooperation, but no longer than 6 months after the last day of the communication, if there are no legal requirements to keep them longer.
In the cases when the terms of data keeping are indicated in the legislative regulations, the legislative regulations are applied.
We may retain your personal data for a longer period when:
  • it is necessary in order for us to defend ourselves against existing or threatened claims, or to exercise our rights, or for the proper resolution of dispute, complaint or claim;
  • there is a reasonable suspicion of illegal activity;
  • it is required by applicable laws.
Upon expiration of the retention period, we will delete and/or reliably and irrevocably depersonalize your data as soon as possible, within a reasonable time required to perform such action.

13. Transfer of Personal Data outside the EEA

European Union (EU) data protection rules apply to the European Economic Area (EEA) which includes all the EU countries and non-EU countries: Iceland, Liechtenstein and Norway. If necessary, the Company may transfer your personal data to a country outside the EEA, for storage and/or for processing by staff operating outside the EEA who work for the Company and/or to our suppliers, business partners, associates, affiliates, agents, business introducers or service providers who are engaged on our behalf to fulfil our contractual obligations under the Client Agreement. Moreover, personal data we collect from you may be stored or processed in a jurisdiction that is different to the country in which the specific entity of the group you are dealing with is registered and established. Therefore, by entering into the Client Agreement with the Company and submitting your personal data, you agree to the transmittal, storing and processing of your personal data outside the EEA.
Nonetheless, when your personal data is transferred outside the EEA, the Company will take all steps reasonably necessary to ensure that the transfer is lawful, that the organization to whom your data are send provides data protection at an adequate level, or provided that receiving Company undertakes sufficient guarantees in accordance with the provisions of the GDPR to ensure that your personal data are treated securely.
Where it is not possible to avoid disclosing your personal data, and we are legally required to do so (e.g., by law or court order), we will comply with the applicable legal and regulatory obligations under Czech and European Union (EU) law. OrangeX will only transfer personal data outside the EU/EEA to a country that has not been recognized by the European Commission as having an adequate level of data protection, and which does not provide corresponding guarantees, if:
  • You have provided explicit consent to the proposed transfer after being informed by OrangeX of the potential risks associated with such a transfer;
  • The transfer is necessary to fulfill a contract between you (the client) and OrangeX, or to implement measures required by you before entering into a contract;
  • The transfer is necessary for the conclusion or execution of a contract between OrangeX and another individual or legal entity in your interest;
  • The transfer is required for important public interest reasons;
  • The transfer is necessary for the establishment, exercise, or defense of legal claims; or
  • The transfer is necessary to protect your vital interests when you are physically or legally incapable of giving consent.

14. Cookies and Links

The Company utilizes cookies to enhance user interaction on its Website. These small data files are sent from our Website and stored in your browser, allowing us to gather information about how you use our services. By collecting this data, we aim to tailor our offerings and provide a more personalized experience according to your preferences. Cookies contain a unique identifier but do not grant us access to your computer or any sensitive information beyond what you voluntarily share.
While cookies are employed across our Website, none of the data stored in them is linked to personal information you provide. You have the ability to manage cookie acceptance via your browser’s settings. Please note, however, that disabling cookies may limit your access to certain parts of the Website or affect the functionality of your customer account. We recommend reviewing our Cookies Policy to better understand how we use these files and other web tracking technologies.
Additionally, some of the Company’s partners, associates, and affiliates may also utilize cookies on the Website. As we do not have control over these third-party cookies, we cannot be held responsible for any loss or misuse of personal data that may occur as a result. If you visit external sites linked through our Website, this Policy does not cover them, so we advise reviewing their respective privacy policies to understand how your data is handled.

15. Your Rights regarding your Personal Data

In accordance with the GDPR and Czech regulatory requirements, you are entitled to the following rights concerning your personal data:
  • Access to your Personal Data: You have the right to request access to the personal data we collect and process during your business relationship with OrangeX. This includes reviewing, updating, and checking the accuracy of all data related to you.
  • Rectification: Should the personal data we hold be inaccurate or incomplete, you have the right to request corrections or updates. We may ask for supporting documentation to verify the changes.
  • Changes: You may notify us of any changes to your personal data by emailing dpo@orangex.com, and we will update your data accordingly. Please note that we may require evidence for these updates.
  • Deletion: You can request the deletion of your personal data when it is no longer necessary for us to process it. However, this does not apply if we are required to retain it for legal or regulatory purposes (e.g., anti-money laundering requirements). Deleting your personal data will result in the closure of your account.
  • Information on Use and Processing: You have the right to know how your data is being used, why we process it, and request a copy of the personal data we hold about you.
  • Processing Restrictions: You may request that we limit or stop processing your personal data for specific reasons, such as:
    • Disputing the accuracy of the data (restriction applies while we verify the data).
    • If the data processing is unlawful, but you prefer restriction over deletion.
    • If we no longer require the data, but you need it to establish, exercise, or defend legal claims.
    • If you object to processing based on our legitimate interests (while we assess whose interests prevail).
  • Portability: You have the right to request that we transfer your personal data to you or another data controller in a structured, commonly used, and machine-readable format. After the transfer, OrangeX is no longer responsible for the data’s use by the third party.
  • Withdrawal of Consent: You may withdraw your consent to data processing at any time by contacting our DPO. While the withdrawal halts future processing, any processing performed before the withdrawal remains lawful.
  • Right to File a Complaint: If you believe your rights are being violated or your data is being mishandled, you may file a complaint with the Czech Data Protection Authority. The process for filing complaints can be found at https://www.uoou.cz/en/.
To exercise any of these rights, please contact our Data Protection Officer (DPO) via dpo@orangex.com. Requests will be processed within 30 days. If needed, the period may be extended to two months based on the complexity or number of requests. Additional copies of personal data may incur a reasonable fee based on administrative costs. Requests may be refused if they are excessive or unjustified, particularly if repetitive.

16. Legal Disclaimer

The Company is not responsible for the use, misuse, or loss of personal data that may occur on external websites linked from the Company's Website. Additionally, the Company has no control over or access to the information provided to or collected by such third-party sites. When you choose to access co-branded or linked websites, any personal data you provide may be governed by the third party’s Privacy Policy.
You are solely responsible for keeping your login credentials secure and confidential. If any unauthorized person gains access to your account or personal data, the Company will not be liable for any resulting damages or unauthorized use of your account. Any misuse or loss of your login credentials, whether due to negligence or unauthorized actions by yourself or those authorized by you, will be your responsibility. The Company is not responsible for unauthorized access due to actions or omissions by you or individuals you authorize.

17. Consent

The collection, use, and storage of your personal data are carried out based on your explicit consent. By entering into an agreement with the Company, creating a customer account, and using the Website, trading platforms, or payment gateways, you acknowledge and agree to the collection, use, and storage of the personal data you provide, as outlined in this Policy. Additionally, by downloading the Company’s platforms or accepting cookie settings in your web browser, you further consent to this Policy. Please note that you may withdraw your consent at any time; however, any data processed prior to your withdrawal will remain lawfully processed and unaffected.

18. Data Protection Officer (DPO)

If you have any questions regarding this Policy, wish to make a complaint or exercise any of your rights in relation to your personal data you may contact our DPO as follows:
Via email at: dpo@orangex.com
With registered post at: Sokola Tůmy 743/16, Mariánské Hory, 709 00 Ostrava

19. Amendments to this Policy

The Company will review this Policy at least once a year or whenever there are significant changes in legal requirements, internal procedures, or as deemed necessary for any other reason. You will be notified of any updates by the posting of an updated Policy on the Company’s Website. In the event of substantial changes, we will notify you promptly through additional means of communication.
By continuing to use the Website after an updated Policy is posted, you acknowledge and accept that such posting serves as official notice from the Company. We encourage you to periodically check this Policy to stay informed about the data we collect, how it is used, and to whom it may be disclosed, in accordance with the latest version of this Policy.
About
About Us
Announcements
Terms of Service
Privacy Terms
Products
Spot
Perpetual
Copy Trading
Service
Referral Program
Affiliate Program
Proof of Reserves
Listing Application
Support
FAQ
Fees
API Documentation
Help Center
Perpetual Details
OrangeX Verify
Community
© 2024 OrangeX. All Rights Reserved.
About UsAnnouncementsTerms of ServicePrivacy Terms
SpotPerpetualCopy Trading
Referral ProgramAffiliate ProgramProof of ReservesListing Application
FAQFeesAPI DocumentationHelp CenterPerpetual DetailsOrangeX Verify

Community

© 2024 OrangeX. All Rights Reserved.