Privacy policy

Updated May 25, 2025

Privacy Policy

This Privacy Policy ("Policy") describes how ARTokens GmbH (registration number FN 650563 K) an Austrian corporation from Simmeringer Hauptstrasse 24, 1110 Viena, Austria, and its directly or indirectly controlled affiliates, ("ARTokens," "we," "us" or "our") may collect, use and disclose information, and your choices regarding this information. Please read this Policy carefully and contact us with questions at contact@artokens.fi

Applicability of This Policy

This Policy applies to our Services, which include our websites and mobile applications featuring this Policy (collectively, the "Sites"), the services and tools we provide on or make available via our platform, any interaction with ARTokens’s APIs or other user interfaces relating to issuances of our tokenized assets, bridging or conversion tools made available for your use, insights, or subscribing in or managing blockchain-based smart contracts or any other features or content we own or operate or third party applications or smart contracts relying on such ARTokens interfaces or smart contracts, and related services, including but not limited to blockchain-based tokens that are generated or transferred by or otherwise interact with any such smart contracts (collectively, the "Services and Tools"). If you do not agree with the terms of this Policy, do not access or use the Services and Tools, Sites, or otherwise interact with our business.
This Policy does not address our privacy practices relating to ARTokens job applicants, employees and other personnel. This Policy is also not a contract and does not create any legal rights or obligations. We may also choose or be required by law to provide different or additional disclosures relating to the processing of your information, which should not be interpreted as limiting the terms of this Policy.

How Does ARTokens Collect My Personal Information?

We collect your personal information when you register for an account through the Services and Tools before you deposit Digital Assets in the Services and Tools, make transactions using the Services and Tools, withdraw Digital Assets from the Services and Tools, or otherwise interact with us or the Services and Tools. We may also collect your personal information automatically through your use of the Services and Tools or from other companies.

How Does ARTokens Protect My Personal Information?

ARTokens is committed to safeguarding your personal information and implements a range of security measures designed to prevent unauthorized access, disclosure, use, or modification of your data. These measures are aligned with applicable data protection laws and industry best practices.
Our approach includes:
Technical Safeguards: We use a variety of technologies and protocols to secure data, including encryption (both in transit and at rest), firewalls, intrusion detection systems, and secure software development practices. Access to sensitive data is restricted using multi-factor authentication and role-based access controls.
Administrative Safeguards: We maintain internal policies and procedures that govern the handling of personal information, including regular training for employees on data privacy and security obligations. We also perform background checks for employees in roles with access to sensitive information.
Physical Safeguards: Our facilities and data centers are secured through access controls such as keycard entry, security cameras, and 24/7 monitoring. Physical access to systems that store personal information is restricted to authorized personnel only.
Vendor and Third-Party Oversight: We ensure that any service providers or partners who process personal data on our behalf are contractually required to implement appropriate security controls and comply with relevant privacy and data protection standards.
Despite these efforts, no system or method of electronic transmission is entirely secure. As such, while we strive to protect your information, we cannot guarantee its absolute security. We encourage you to take precautions to protect your own data, including maintaining the confidentiality of your blockchain wallet credentials and monitoring your accounts for unauthorized activity.

What We Collect

The categories of information we collect depend on how you interact with us and our Services and Tools. ARTokens collects information that individuals provide directly to us, information we collect automatically when individuals interact with us, and information we collect from third-party sources and other organizations.

Information You Provide

We may collect the following information you provide directly to us in connection with our Services and Tools:
Contact Information, such as your name, email address, physical address, and communication preferences.
Financial Information, such as your blockchain addresses, blockchain wallet information, asset holdings, transaction history, and associated fees paid.
Transaction Information such as information about the transactions you make on or using our Services and Tools, such as the type of transaction, transaction amount, and timestamp.
Background Information for KYC and other regulatory customer diligence requirements, which may include collection of your passport, photos, bank account statements, assets, utility bills, proof of income, incorporation documents, and tax ID and verification information.
Interaction Information, such as the information you submit through your interactions with us, including feedback, communications, inquiries, questionnaires and other survey responses, your use of the Services and Tools, and information you provide to our first- and third-party support teams, including via our help chat.

Information We Collect Automatically

As is true of many digital platforms, we and our third-party providers may also collect certain information from an individual’s device, browsing actions, and site usage patterns automatically when visiting or interacting with our Services and Tools, which may include:
Online Identifiers, such as geo location/tracking details, browser fingerprint, mobile carrier, MAC address, user settings, mobile ad identifiers, Internet service provider, operating system, browser name and version, personal IP addresses, the URL entered and the referring page/campaign, date/time of visit, the time spent on our services, and any errors that may occur during the visit to our services.
Usage Data, such as the electronic path taken to our services, through our services, and when exiting our services, as well as information pertaining to usage and activity on our services (including pages visited, links clicked, content interacted with, and duration and frequency of the activities).
Location Information, such as IP-derived location, used at the city level for fraud detection, customer support and product improvement purposes.
Cookies and Other Tracking Technologies. We, and third parties we authorize, collect information through (i) cookies or small data files that are stored on an individual’s device or browser and (ii) other, similar technologies, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, “Cookies”). We use Cookies to automatically collect and use or disclose information for the purposes described in this Privacy Policy, including to analyze and track data, determine the popularity of certain content, and better understand each user’s online activity. We may combine this Cookie information with other information we collect about you. You may choose to set your web browser to refuse Cookies, or to alert you when Cookies are being sent. If you do so, please note that some parts of our Services and Tools may not function properly.

Information from Third Parties and Other Sources

We also obtain personal information from third-party sources, which we often combine with personal information we collect either automatically or directly from an individual.
We may receive the same categories of personal information as described above from the following third parties:
Affiliates. We may receive information from other companies owned or controlled by ARTokens, and other companies owning or under common ownership with ARTokens, particularly when we collaborate in providing the Services and Tools.
Social Media. If an individual chooses to interact with us on social media, we may collect personal information about them from their social media account that they make public. We use personal information collected in connection with their social media accounts to communicate with them, better understand their interests and preferences, and better understand our user base in the aggregate.
Identity Verification Providers. In certain circumstances, we may engage third-party identity verification providers to help us verify the identity of a specific individual with whom we are interacting. This information is used primarily for purposes of preventing fraud.
Data Analytics Providers. We rely on third-party providers to help us collect analytics relating to our services and user base. These data analytics providers often collect personal information directly from individuals or public blockchains and share some or all of this information with us in connection with their analytics services.
Other Service Providers. Other service providers that perform services solely on our behalf, such as website hosting and marketing providers, collect personal information and often share some or all of this information with us in connection with their services.
Information Providers. We may from time to time obtain information from third-party information providers to correct or supplement personal information we collect. For example, we may obtain background check information from credit bureaus or updated contact information from third-party information providers to connect with an individual who may be interested in our services.
Publicly Available Sources. We collect personal information about individuals that we do not otherwise have, such as information publicly available on various blockchains (see below), public contact information or an individual’s interest in our services from publicly available sources. We may combine this information with the information we collect from an individual directly.

Our Collection of Blockchain Information

Blockchain is a decentralized, tamper-resistant ledger used to log asset transactions. As part of providing our services, we may gather both current and historical blockchain-related information, either directly from individuals, from the third-party sources listed above, or from publicly accessible blockchains:
Account Address: The distinct blockchain address or domain involved in sending or receiving assets.
Wallet Information: Details about the wallet provider and the wallet linked to a specific account address.
Account Balance & Assets: The balance linked to the blockchain address, along with any assets associated with that account.
Transaction Details: Information such as the transaction ID, its position on the blockchain, timestamp, transaction type, the amount transferred, fees incurred, sender and recipient account addresses, and the transaction's data size.
In some instances, we may combine this blockchain information with other data described above—such as when a blockchain wallet (for example, Coinbase Wallet or Trust Wallet) must be connected to the Service for the purposes of account address creation and wallet integration.

How We Use Information

We use your information and blockchain information in accordance with your instructions, including any applicable terms in the Terms of Use, to provide data processing as described in the policies and agreements of our affiliates, and as required by applicable law. We may also use the information we collect for:

Providing Services and Tools and Features

We may use the information we collect to provide, personalize, maintain, and improve our products and Services and Tools, including as we described in the Terms of Use. This includes using information to:
operate, maintain, customize, test, measure, and improve our Services and Tools, and manage our organization and business;
facilitate and process transactions;
send information, including confirmations, notices, updates, technical alerts, security alerts, surveys, and support and administrative messages;
communicate with you about the Services and Tools and events offered by ARTokens and others and provide news and information that we think will interest you;
personalize and improve your experience on our Services and Tools;
monitor and analyze trends, usage, and activities in connection with our Services and Tools;
to create de-identified or aggregated data.

User Support

We may use information we collect to provide support, including to:
direct questions to the appropriate support person;
respond to your comments and questions and provide customer service
investigate, troubleshoot, address and resolve user concerns and problems using the Services and Tools; and
monitor and improve our customer support responses and processes.

Safety and Security

We may use your information to support the safety, security, and integrity of both you and our Services and Tools, including for the following purposes:
Preventing, investigating, and responding to fraudulent, unauthorized, or unlawful activity;
Monitoring and verifying identity or access to services, as well as mitigating risks related to spam, malware, or other security threats;
Conducting internal processes required to operate our Services and Tools, including testing, diagnosing, and resolving software bugs and technical or operational issues;
Preserving the security, safety, and integrity of our infrastructure, technology systems, Services and Tools, and overall business operations;
Enforcing our agreements with third parties and addressing violations of our Terms of Use or other service agreements;
Identifying, preventing, investigating, or issuing alerts regarding security breaches or other harmful, misleading, fraudulent, or unlawful actions, and safeguarding the rights and assets of ARTokens and others; and
Meeting obligations under relevant security-related laws and regulations.

Research and Development

We may use the information we collect for testing, research, analysis, and product development to improve your experience. This helps us to improve and enhance the safety and security of our Services and Tools, improve our ability to prevent the use of our Services and Tools for illegal or improper purposes and develop new features and products relating to our Services and Tools.

Legal and Regulatory Compliance

We may verify your identity and fulfill Know Your Customer (KYC) and other due diligence obligations by cross-referencing the personal information you provide with third-party databases and public records, or by conducting background checks.
We may use the information we collect to investigate or resolve claims or disputes related to your use of our Services and Tools, in accordance with applicable law, or in response to requests from regulators, government authorities, or official investigations.
We may also process this information to support business transactions or corporate reorganizations that affect the structure of our company, and to meet our broader legal, regulatory, and financial compliance responsibilities.

Direct Marketing

We may use the information we collect to market our Services and Tools to you. This may include sending you communications about our Services and Tools, features, promotions, surveys, news, updates, and events, and managing your participation in these promotions and events. If you do not want us to send you marketing communications, please opt out by selecting "unsubscribe" to any marketing email sent by us or by contacting us at contact@artokens.fi

Sharing information

We may share your personal and blockchain-related information in the following situations:
With Affiliates: We share information with entities that are owned or controlled by ARTokens, as well as with companies that own or are under common ownership or control with ARTokens, particularly when we collaborate to deliver our Services and Tools.
At Your Direction: We may share your information with third parties you choose to interact with through our Services and Tools, or as necessary to complete a specific request or transaction. For example, you may authorize us to share your personal data with others for their own marketing purposes, in which case their use of the information will be governed by their respective privacy policies.
To Meet Legal Requirements: We may disclose your information when necessary to: (A) cooperate with regulatory or governmental investigations; (B) respond to subpoenas, court orders, or similar legal obligations; (C) act in good faith to prevent harm to individuals; (D) report suspected unlawful behavior; or (E) investigate breaches of our User Agreement or related policies.
With Service Providers: We may provide your information to trusted service providers who assist in business operations or compliance functions, including marketing and technology services. These providers are contractually obligated to use your information only for the services they provide on our behalf.
With KYC & AML Service Providers: When using third-party identity verification services, we may share the necessary personal data to allow those providers to verify an individual’s identity as part of our compliance or onboarding processes.
With Public Blockchains: In the course of executing blockchain transactions, we may publish relevant transaction information to public blockchains when such disclosure is standard practice. Please note that this data may be permanently visible and accessible by the public.
In the Event of Business Changes: If ARTokens undergoes a merger, acquisition, bankruptcy, dissolution, reorganization, financing, public offering, asset sale, or similar transaction—or begins preparing for such events—some or all of your information may be transferred or disclosed under customary confidentiality agreements.
For Legal Rights and Obligations: We may disclose information to third parties such as legal counsel, professional advisors, or law enforcement agencies:
When necessary to obtain legal or professional advice or manage our business interests;
In connection with the initiation, exercise, or defense of legal claims;
To comply with laws or lawful requests, including those related to national security or law enforcement;
To protect our legal rights, property, or the rights and property of others, including enforcing our terms and policies;
To detect, prevent, or respond to fraud;
To protect health and safety;
As otherwise required by applicable law.
Aggregated or De-identified Data: We may share data that has been aggregated or anonymized in a manner that does not identify you personally, for use by others for their own purposes.

Legal Bases for Using Your Information

Where the law requires the identification of the legal basis on which rely to process your information, the legal bases for using your information as set out in this Privacy Policy are as follows:
Where we need to perform the contract we are about to enter into or have entered into with you for the Services and Tools.
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Where we need to comply with a legal or regulatory obligation in the relevant jurisdiction.
Where we have your consent to process your information in a certain way.

Your Rights and Choices

If you would like further information in relation to your legal rights under the EU applicable law or would like to exercise any of them, please contact us  (see section below) at any time. Your local laws may permit you to request that we:
provide access to and/or a copy of certain information we hold about you.
update information which is out of date or incorrect.
delete certain information that we are holding about you.
restrict the way that we process and disclose certain of your information.
permit you to revoke your consent for the processing of your information.
We will consider all requests and provide our response within the time period stated by applicable law and as otherwise required by applicable law. Please note, however, that certain information may be exempt from such requests in some circumstances, which may include if we need to keep processing your information for our legitimate interests or to comply with a legal obligation. We may request you provide us with information necessary to confirm your identity before responding to your request.

Data Retention

To view or update your information, contact us at contact@artokens.fi  We store your information throughout the life of your use of any Sites or Services and Tools and retain your information for a minimum of five (5) years to comply with our legal obligations or to resolve disputes. If you cease using any Sites or Services and Tools, we may still process and share your information with third parties, such as may be necessary to prevent fraud and assist law enforcement, as required by law, or as otherwise to protect our legal rights, or those of others, such as in the case of litigation, or otherwise in accordance with this Policy.

Security

We implement administrative, technical, and physical safeguards intended to protect the personal information we hold from unauthorized access, use, or disclosure. However, no security system is infallible. While we take reasonable measures to safeguard your information, we cannot guarantee that your data, communications, or interactions will remain completely secure at all times.
You are solely responsible for any activity associated with your blockchain network addresses and/or blockchain-based wallets.

Age Limitations

To the extent prohibited by applicable law, we do not allow use of our Services and Tools or Sites by anyone younger than the legal age in the jurisdiction in which the user resides. If you learn that anyone younger than the legal age has unlawfully provided us with personal data, please contact us at contact@artokens.fi  and we will take steps to delete such information, close any such accounts, and, to the extent possible, prevent the user from continuing to use our Services and Tools.

Changes to This Policy

If we make any changes, we will change the Last Updated date above. We encourage you to review this Policy to stay informed. If we make material changes, we will provide additional notice, such as via the email specified in your account or through the Services and Tools or Sites.

Online Tracking Opt-out Guide

We use services provided by a few companies that use Cookies. These services rely on Cookies to collect directly from your device information about your browsing activities, your interactions with websites, and the device you are using to connect to the Internet. There are a number of ways to opt out of having your online activity and device data collected through these services, which we have summarized below:
Blocking cookies in your browser. Most browsers let you remove or reject cookies, including cookies used for interest-based advertising. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit internetcookies.com
Blocking advertising ID use in your mobile settings. Your mobile device settings may provide functionality to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes. Using privacy plug-ins or browsers. You can block our websites from setting cookies used for interest-based ads by using a browser with privacy features.
Additional Disclosure for Our Consumers and Customers
This Additional Disclosure governs our collection, use and sharing of personal information that users provide to us to initiate or complete the process of interacting with our Services and Tools. To the extent there are conflicting provisions between this Additional Disclosure and other sections of the Privacy Policy, the Additional Disclosure will govern.
The types of personal information we collect and share can include:
Contact details
Transaction history
Cryptocurrency balances and wallets
When you are no longer our customer, we continue to share your information as described in this Policy.
When We May Share Your Personal Information
We need to share users' personal information to operate certain aspects of our Sites, Services and Tools and business. The below includes information on whether we share your personal information, the reasons we share your personal information and whether you can limit this sharing.
We share users' personal information for our everyday business purposes, including to operate, maintain and upgrade our Services and Tools and to support the use thereof, and to respond to court orders and legal investigations. You cannot limit our sharing of this information.
We share users’ personal information for our marketing purposes, such as to offer our products and services to you. You cannot limit our sharing of this information.
We do not share users’ personal information for joint marketing with partner financial companies.
We do not share users' personal information for nonaffiliates to market to you, subject to the terms of this Policy and any agreement between you and us.
"Affiliates" refer to companies related by common ownership or control; "non affiliates" refer to companies not related by common ownership or control; and "joint marketing" refers to a formal agreement between non affiliated financial companies that together market products or services to you.

Contact Us

Please contact us if you have any questions about this Policy or if you are seeking to exercise any of your statutory rights. Subject to applicable laws, we will respond within a reasonable timeframe. You may contact us at contact@artokens.fi