GE

PDPL Explicit Consent

CONSENT ON THE PROCESSING OF THE PERSONAL DATA

Please be informed, that for the purposes of this consent "Data Subject"/Customer" means you and "The Data Controller" means "WhiteBIT" that refers to the "WhiteBIT Georgia" LLC, Virtual Asset Service Provider, incorporated under the Laws of Georgia with the Taxpayer Id: 405520217. Subsequently, the Company is authorized to provide services and carry out duties in accordance with Georgian Legislation

"WhiteBIT" as the Virtual Asset Service Provider has a legal basis for using your data, which implies the existence of business-related and/or commercial purpose. We will use your information to manage your account(s), give you statements and provide our services, for assessment and analysis (including behaviour scoring, market and product analysis), and to develop and improve our services to you, for example by informing you about products and services (including those of others) which may be of interest to you.

We, hereby promise: to keep your data safe and private, not to use your data unlawfully and to provide you with complete information with respect to the processing of your personal information.

  1. Consent to Personal Data Processing
  2. By sending this form and clicking the option "I AGREE", I as the Data Subject hereby acknowledge and express my voluntary, unequivocal and informed consent that my personal data, including special and/or sensitive data which I am providing or have provided to  the "Data Controller", shall be processed, kept and disposed by the Data Controller in order to verify/identify me as a customer and to carry out customer due diligence procedures in accordance with internal policies of the Data Controller and statutory requirements of Georgian Legislation and/or relevant legislature.
  3. I hereby also confirm that I have legal capacity to provide the consent and such consent has been expressed and/or given personally by me.
  4. I acknowledge and agree, that that data processing includes but is not limited to: any operation performed in relation to the data by automated, semi-automatic or non-automatic means, in particular collection, recording, photographing, audio recording, video recording, organisation, storage, alteration, restoration, request for access to, use or disclosure by way of data transmission, dissemination or otherwise making them available, grouping or combination, locking, deletion, or destruction; The Data controller is entitled to process the above personal data for a maximum period of admissible by the law, starting from the date of giving my consent.
  5. Data Transfer
  6. I hereby acknowledge and agree, that Besides the Data Controller, my personal data shall be transferred:
  7. The Controller shall be entitled to transfer my personal data to the data processors if it is necessary for the processing and/or service provisions purposes, that includes but is not limited to the following recipients and categories of recipients to: The state authorities/Statutory supervisors, The Controller's suppliers, the Controller's employees, service providers, financial institutions, including Banks, Payment Service Providers, Brokers, VASPs and/or other financial institutions, successors within the scope of fulfilling the statutory obligations prescribed by relevant legal regulations and other parties in other contractual relationships with the Controller.
  8. The Data Controller shall be entitled to provide my personal data to entities affiliated/associated with the Data Controller, also to relevant recipients/categories of recipients with domiciles inside and outside Georgia. The Data Controller guarantees that such entities, as well as other data processors to which it discloses/transfers personal data implement appropriate technical and organisational measures to ensure the safety of the personal data. For the avoidance of doubt, the data controller ensures, that the services provider or agent agrees to apply the same levels of protection as the Data Controller is required to apply to information held in Georgia and to use your information only for the purpose of providing the services.
  9. The Data Controller is entitled to verify information to the third parties, both positive as well as negative information stored in the databases, including but not limited: to Credit Info Bureau, also to LEPL State Service Development Agency and/or its successors and assigns.
  10. Any orders, directions or instructions for processing, designation of the purposes of service provision, processing, determination of personal data subject to processing and other similar matters are the responsibility of the Data Controller.
  11. Data processing methods
  12. I hereby acknowledge and agree that my personal data shall be processed by means of automated text extraction, verification of authenticity/validity and other methods of automated processing of photos and scanned copies of documents.
  13. The consent expressed hereby covers the following processing activities: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission to the Data Controller and data processors, dissemination or otherwise making available for the performance of a task carried out in the public interest or in the exercise of official authority, transfer (including cross-border transfer, where necessary), alignment or combination, restriction, erasure and destruction.
  14. The personal data may be checked in multiple databases, including International Politically Exposed Persons (PEPs), Sanctions, Country-Specific Sanctions Lists, Criminal Lists, and Financial Lists. It may also be reviewed in media information sources.
  15. Types of personal data subject to processing
  16. The consent for the processing expressed hereby includes the following personal data:
  17. general personal data: full name, sex, personal identification code or number, date of birth, legal capacity, nationality and citizenship, location (street, city, country, postcode);
  18. identity document data: document type, issuing country, number, expiry date, MRZ, information embedded into document barcodes (may vary depending on the document), security features;
  19. facial image data; photos of a face (including selfie images) and photo or scan of a face on the identification document, videos, sound recordings;
  20. biometrical data: facial features;
  21. socio-demographic: details on your job or profession, education, social or incoming group, targeted or expected turnovers, details on your family members;
  22. banking details: card holder name, expiry date, first 6 and last 4 digits of the card number, data extracted from documents provided as proof of source of funds/wealth;
  23. transactional data and behavioural data: details on payments to and from your account; details how you use the products and services;
  24. contact details: address, e-mail address, phone number, IP address;
  25. technical data: information regarding the date, time and activity in the Services; IP address and domain name; software and hardware attributes (camera name and type); general geographic location (e.g., city, country) from Data Subject's device;
  26. unique identifier (Applicant ID) created only for association Data Subject's and its personal data inside the Informational System;
  27. relevant publicly available data: information regarding a person being a Politically Exposed Person (PEP) or included in sanctions lists;
  28. personal information that the Data Processor has received from the Controller, such as contact details;
  29. personal information additionally provided by Data Subjects, such as data obtained during their communications with the Data Processor (e.g., requests, reports).
  30. special types of data: Information on racial or ethnic origin, Political beliefs, Religious or philosophical beliefs, Trade Union membership, Health data, Information on conviction, administrative detention, preventive measure, plea-bargaining, diversion, recognition as aggrieved or victim of crime and any other data that shall be possessed on the basis of processed only under the written consent or in case it serves the purpose strictly defined by the law.
  31. Any other information that can be necessary to comply with the identification-verification process envisaged under the law and/or is required for the provision of services, fulfilment of contractual obligations and/or other obligations pursuant to the law.
  32. I hereby acknowledge and agree that facial images of myself are processed to confirm the liveliness of my face, and/or to confirm that a given identity document is presented by me, as its legitimate owner.
  33. Data subject rights
  34. I hereby confirm, that I have been informed about my rights to:
  35. withdraw my consent and to request that the data processing be stopped at any time and without explanation;
  36. demand from the Data Controller, the access, the correction,
    update, add of any data.
  37. request that my personal data to be deleted, blocked. However, the data Controller reserves the right to reject the request of the Data Subject, if there are other grounds to process/to keep the data and/or data processing is admissible in accordance with the law.

all of aforementioned may be exercised by contacting the Data Controller with a respective notice at: e-mail address: ; website: https://whitebit.ge/

I hereby represent that I have carefully read all of the above provisions and do voluntarily and unequivocally agree with them.

In the case of providing incorrect, inaccurate and incomplete information on my part, I bear full, direct and immediate responsibility for any damages, losses, expenses caused by such incorrect, inaccurate and incomplete information, including the reputational damage caused to the Data Controller.