Privacy Policy

1. General Provisions

Description of Sanidei Cis, the company providing the investment platform, its legal status, and contact information.
The purpose of this Privacy Policy is to explain how the platform processes users’ personal data.
Notification that use of the platform means acceptance of the terms of this Privacy Policy.
Importance of reviewing the Privacy Policy before using the platform.

Types of data that may be collected:

Personal data: name, email address, date of birth, phone number.
Financial data: transaction history, information about income and expenses within the company.
Authentication data: login, password, phone number.
Behavior analysis data: IP address, browser information, traffic and visit data.
Messages and notifications – for example, through chat with a manager or by email.

Methods of data collection:

Direct collection – through the registration form and account settings.
Indirect collection – through cookies, analytics services, and server logs.
Description of the use of cookies and similar technologies to improve service quality.

Purposes for which the data may be used:

Processing transactions and payments.
Providing personalized offers and recommendations.
Ensuring account security.
Conducting marketing research and trend analysis.
Notifications about new investment opportunities.
Messages about platform updates.
Notification that the information may be used to improve the functionality of the platform.

Principles of data processing: legality, fairness, and transparency.
Description of data protection methods: encryption and anonymization.
Notification that data is processed only in cases where it is necessary to fulfill obligations to the user or where the user has given consent.
The ability of the user to update and change their data through the company’s technical support.

Cases in which data may be transferred to third parties:

Payment systems and banks for transaction processing.
Government authorities and law enforcement agencies, if required by law.
Notification that third parties are obliged to maintain the confidentiality of data and that data transfer takes place only on legal grounds.

Data retention period: in accordance with legislation or for as long as necessary to provide services.
Data protection measures: data encryption, two-factor authentication, regular vulnerability checks.
Application of measures to protect data from leaks and unauthorized access.
Description of actions taken in the event of a data breach – for example, notifying users.

Right of access to personal data: users may request information about what data is stored about them.
Right to correction of data: users may update their data through the company’s technical support.
Right to deletion of data: users may request deletion of their data when closing their account.
Right to restriction of data processing: users may request restriction of data processing in certain cases.
Right to data portability: users may request to receive their data in a structured format.
Right to withdraw consent: users may withdraw consent to data processing, provided this does not contradict the platform’s obligations.

Information that the platform may use analytics tools – for example, Google Analytics – to improve user experience.
Description of how information may be used for targeted advertising.
Notification that users may configure their advertising and analytics preferences in their account.

Description of the procedure for making changes to the Privacy Policy.
Notification that changes will be published on the platform’s website and that users should regularly check the current version of the document.
Notification that continued use of the platform after changes to the Privacy Policy means acceptance of the new version.

Ways to contact the platform regarding data protection questions and requests:

Indication that the Privacy Policy is governed by the law of the jurisdiction in which the company is located.
It is important to note that users are obliged to comply with local data protection laws depending on their location.
The Privacy Policy is implemented in accordance with Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC, hereinafter referred to as the “GDPR”. For clients and partners from EU countries.
The Privacy Policy is implemented in accordance with Federal Law of the Russian Federation dated 27.07.2006 No. 152-FZ “On Personal Data”, hereinafter referred to as the Law, and other regulatory legal acts of the Russian Federation in the field of personal data. For clients and partners from Russia.

Inclusion of text confirming the user’s consent to the terms of the Privacy Policy during registration or when making changes in the personal account.