Last Updated: May 31, 2024
Mina Foundation (“Foundation”, “we”, “us” or “our”) and its affiliates take privacy and security of your personal data seriously. This Privacy & Cookie Policy (“Policy“) explains how we collect, use, disclose, and otherwise process personal data in connection with our website under the domain www.minaprotocol.com (the “Site“) that was created to provide information regarding Mina Protocol and other websites we own and operate that link to this Policy (collectively, the “Sites”), and the related content, services, and other functionality offered on or through our Sites (collectively, the “Services”). We collect, store, and process personal data in accordance with applicable data protection laws, in particular the Swiss Federal Data Protection Act of 1 September 2023 (“FADP“), the European Union General Data Protection Regulation 2016/679 (“GDPR“), and the California Consumer Privacy Act of 2018 (“CCPA“).
We collect personal data in connection with your visits to our Sites and use of our Services. This collection includes personal data that you provide in connection with the Services, personal data from third parties, and personal data that is collected automatically such as through the use of cookies and other technologies.
Personal Data Collected from You
We may collect the following categories of personal data submitted to us by individuals through the Services:
Personal Data Collected from Third Parties
We also obtain personal data about you from third parties. We may receive the same categories of personal data as described above from the following third parties:
Additional Uses of Personal Data
We may use personal data we collect to:
We will only use your personal data if and to the extent that applicable law allows and, where necessary, rely on a variety of legal bases to process your personal data for the above purposes, including if:
We may share, transmit, disclose, grant access to, make available, and provide personal data about you with and to third parties (in compliance with the applicable legal requirements), as follows:
In connection with the disclosures described in Section IV., we may transfer your personal data to the following countries that offer adequate protection pursuant to the FADP and GDPR: Member states of the European Economic Area and the United Kingdom.
Under certain circumstances, we may also transfer your personal data to the following countries, which do not offer adequate protection pursuant to the FADP and/or the GDPR: USA and potentially other countries (if necessary for the respective processing purpose, e.g. for IT services). To the extent such countries do not offer adequate protection, the transfer is secured by appropriate safeguards (such as Standard Contractual Clauses) or based on a statutory exemption (e.g., if you have given your consent to the transfer, if the transfer is directly connected with the conclusion or performance of a contract with you or if the transfer is necessary for the establishment, exercise or enforcement of legal claims before a foreign authority). Within the scope of the GDPR, you may ask us for a copy of the relevant safeguards by contacting us as indicated at the beginning of this Policy.
In relation to the processing of your personal data, you may have the right under applicable data protection law to:
In case you wish to exercise any of these rights, please directly contact us at [email protected]. We will evaluate your request and provide you with an answer and its justification no later than is required by law. Please note that we may refuse or limit these rights in accordance with applicable data protection law.
You will not, in general, have to pay a fee to exercise any of these rights. However, we may charge a fee for access to your personal data if the relevant data protection legislation allows us to do so, in which case we will inform you as required by the law.
If you feel we have not handled your query or concern to your satisfaction, you also have the right to lodge a complaint with or notify your local supervisory authority (see Section X. below).
We have implemented appropriate technical and organizational security measures to protect your personal data from loss, misuse, alteration or destruction. Despite these security measures, we cannot completely eliminate the security risks associated with data processing.
We will usually store the personal data we collect about you for no longer than necessary to fulfill the purposes for which it was collected, and in accordance with our legitimate business interests and applicable laws. However, if necessary, we may retain personal data for longer periods of time, until set retention periods and deadlines expire.
To determine the appropriate duration of the retention of personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting and other applicable obligations.
In general, we will retain your personal data as follows:
Once retention of the personal data is no longer necessary for the purposes outlined above or otherwise required, we will delete or anonymize the personal data.
Our Services are not directed to, and we do not intend to, or knowingly, collect or solicit personal data from children under the age of 16. If an individual is under the age of 16, they should not use our Services or otherwise provide us with any personal data either directly or by other means. If a child under the age of 16 has provided personal data to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal data from our systems. If we learn that any personal data we collect has been provided by a child under the age of 16, we will promptly delete that personal data.
If you are under the age of 18 and you want to remove your name or comments from our Sites or publicly displayed content, please contact us directly at .
If you wish to submit a privacy request on behalf of your minor child in accordance with applicable jurisdictional laws, you must provide sufficient information to allow us to reasonably verify your child is the person about whom we collected personal data and you are authorized to submit the request on your child’s behalf (i.e., you are the child’s legal guardian or authorized representative).
If you believe that our processing of your personal data contradicts the applicable data protection laws, you have the possibility to lodge a complaint with the competent data protection authority.
The data protection authority in Switzerland is the Federal Data Protection and Information Commissioner, Feldeggweg 1, 3003 Berne, Switzerland (https://www.edoeb.admin.ch). Based on your residence, you may have the possibility to lodge a complaint with the appropriate data protection authority of your place of residence.
Our Services may include links to third-party websites, plug-ins and applications. Except where we post, link to or expressly adopt or refer to this Policy, this Policy does not apply to, and we are not responsible for, any personal data practices of third-party websites and online services or the practices of other third parties. To learn about the personal data practices of third parties, please visit their respective privacy notices.
This Policy does not form part of any contract with you, and we may amend it from time to time. The version published on our Sites is the version that currently applies. All changes shall be effective from the date of publication unless otherwise provided.
If you have any questions or requests in connection with this Policy or other privacy-related matters, please send an email to [email protected].
The CCPA affords residents certain rights with respect to their personal information. If you are a California Resident, please refer to this section for additional California-specific privacy information.
We collect personal information from and about users for a variety of purposes. To learn more about the types of personal information we collect, the sources from which we collect or receive personal information, and the purposes for which we use this information, please refer to the Our Collection And Use of Personal Data section of our Policy.
As a California resident, you may be able to exercise the following rights in relation to the personal information that we have collected about you (subject to certain limitations at law). You have the right to (i) request any or all of the following information relating to your personal information we have collected and disclosed in the last 12 months, upon verification of your identity; (ii) request the deletion of personal information we have collected from you, subject to certain exceptions; (iii) request that any inaccuracies in your personal information be corrected, taking into account the nature of the personal information and the purposes of the processing of the user’s personal information. (iv) direct us not to sell or share personal information we have collected about you to third parties now or in the future. (v) not to receive discriminatory treatment for exercising these rights. However, please note that if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you services or engage with you in the same manner. California residents that have an established business relationship with us have the right to know how their information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law (Civ. Code §1798.83).
Please submit a request by emailing us at [email protected] with the subject line, “California Rights Request”;
Before processing your request, we will need to verify your identity and confirm you are a resident of the State of California. In order to verify your identity, we will generally either require the successful authentication of your residence, or the matching of sufficient information you provide us to the information we maintain about you in our systems. This process may require us to request additional personal information from you, including, but not limited to, your email address, phone number, and/or date of last interaction with our Services.
In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.
Authorized Agents
In certain circumstances, you are permitted to use an authorized agent (as that term is defined by the CCPA) to submit requests on your behalf through the designated methods set forth in this CA Notice where we can verify the authorized agent’s authority to act on your behalf.
For requests to know, delete, or correct personal information, we require the following for verification purposes:
For requests to opt out of personal information “sales” or “sharing”, we require a signed permission demonstrating your authorized agent has been authorized by you to act on your behalf.
We may update this Privacy Policy from time to time. When we make changes to this Privacy Policy, we will change the date at the beginning of this Privacy Policy. If we make material changes to this Privacy Policy, we will notify individuals by email to their registered email address, by prominent posting on our Services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.
You may object to Google Analytics collecting the data with effect for the future by installing a deactivation add-on (https://tools.google.com/dlpage/gaoptout?hl=en ) for your browser. Besides the possibility to install the deactivation add-on, there is another alternative to prevent Google Analytics from collecting the data. It is particularly interesting for users of mobile devices. Please click on this link to deactivate Google Analytics. You thereby install a so-called opt-out cookie that prevents the tracking of data on our website. The function remains until the opt-out cookie is deleted. If the opt-out cookie has been deleted, it is sufficient to click on the link again.