Operator
RAPID BLOCK DOO is the controller of the personal data described here. This policy explains what we collect, why, on what legal basis, how long we keep it and what rights you have.
1. What we collect
- Account data — e-mail address, credentials in hashed form, account settings.
- Identity data (KYC) — name, date of birth, government-issued identity document and a biometric image used to confirm the document belongs to you.
- Financial data — deposits, product purchases, balances, withdrawals, blockchain addresses and transaction references.
- Referral data — who introduced you and whom you introduced.
- Technical data — access logs, IP address, device and browser information, needed to operate and secure the service.
2. Why we use it, and on what basis
- To provide the service (performance of our contract with you): account operation, deposits, products, withdrawals.
- To meet legal obligations: identity verification, anti-money-laundering checks, record keeping, responding to lawful requests.
- For security and fraud prevention (our legitimate interest): detecting abuse, protecting accounts and funds.
- To communicate: service notices, verification codes and security alerts. Marketing messages, if any, only with your consent, which you may withdraw at any time.
3. Biometric and document data
Identity documents and the biometric check are used solely to verify who you are and to satisfy our legal obligations. They are stored in access-controlled storage, are not used for profiling or advertising, and are not sold or shared for commercial purposes.
4. Sharing
We do not sell personal data. We share it only with: service providers who operate parts of our infrastructure under contract (hosting, storage, e-mail delivery, identity verification); and competent authorities where required by law or to comply with a lawful request. Providers act on our instructions and are bound to protect the data.
5. International transfers
Some providers process data outside the Republic of Serbia. Where that happens we rely on appropriate safeguards required by applicable data protection law.
6. Retention
Account and transaction records are retained for the period required by anti-money-laundering and accounting law after the relationship ends; technical logs are kept for a shorter period appropriate to security needs. When a retention period ends, data is deleted or anonymised.
7. Your rights
Subject to applicable law you may request access to your data, correction of inaccurate data, deletion, restriction of processing, portability, and you may object to processing based on our legitimate interests. Some data cannot be deleted while we are legally required to retain it. You may also lodge a complaint with the data protection authority in the Republic of Serbia.
8. Security
We apply technical and organisational measures including encryption of wallet keys, access control on verification documents, and monitoring. No system can be guaranteed completely secure; keep your credentials confidential and notify us of anything suspicious.
9. Contact
Privacy requests and questions: office@rapid-block.com, or by post to Mirka Bogovića 5, 24000 Subotica, Republic of Serbia.