General Data Protection Regulation (GDPR) Compliance

1. Introduction

Hoosat Network is committed to complying with the General Data Protection Regulation (GDPR) for users in the European Union. This policy outlines how we handle your personal data, the rights you have over it, and the steps we take to protect it.

2. What is GDPR?

The GDPR is a regulation by the European Union (EU) that protects the privacy and personal data of individuals within the EU. It sets guidelines for the collection, use, and processing of personal data to ensure that individuals have control over their information.

3. Data We Collect

As a decentralized network, Hoosat Network does not collect personally identifiable information (PII) by default. However, some data may be collected during your interaction with the website or services, including:

• Public wallet addresses (used for blockchain transactions).
• Transaction data (such as transaction hashes, timestamps, and amounts).
• Technical data (such as IP addresses and browser information, collected via cookies or other tracking technologies).

4. How We Use Your Data

Hoosat Network uses data primarily to provide and improve the functionality of the decentralized network. We may use your data for the following purposes:

• To process blockchain transactions and record data on the public ledger.
• To enhance the security and performance of the website and network.
• For compliance with legal obligations, such as anti-money laundering (AML) and know-your-customer (KYC) requirements, when applicable.

We do not use your personal data for marketing purposes or to track your behavior outside of the network.

5. Legal Basis for Data Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Consent: If we collect any personal data (such as email addresses) for specific purposes, we will obtain your explicit consent.
• Contractual Necessity: Processing is necessary for the performance of a contract (e.g., to process transactions on the blockchain).
• Legal Obligation: We may need to process data to comply with applicable laws or regulations.

6. Your Rights Under GDPR

You have the following rights under the GDPR concerning your personal data:

• Right to Access: You can request access to the personal data we hold about you.
• Right to Rectification: You can request corrections to any inaccurate or incomplete data we hold about you.
• Right to Erasure: You can request the deletion of your personal data, where applicable, if it is no longer necessary for the purposes it was collected.
• Right to Restriction of Processing: You can request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to the processing of your personal data for specific purposes, including direct marketing.

If you wish to exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

7. Data Retention

Hoosat Network does not retain personal data beyond what is required for the purpose of processing blockchain transactions. Transaction data is permanently recorded on the blockchain and cannot be deleted or modified. Any other data collected (such as technical information) will only be stored for as long as necessary to fulfill the purposes described in this policy.

8. Data Security

We implement technical and organizational measures to protect the security and confidentiality of your personal data. These measures include encryption, secure servers, and access controls. However, as the Hoosat Network is decentralized, users should take responsibility for safeguarding their private keys and wallet information.

9. Sharing Your Data

Hoosat Network does not sell, rent, or trade your personal data. However, we may share your data in the following circumstances:

• With third-party service providers who support the network’s operations (e.g., hosting services, security audits), under strict confidentiality agreements.
• If required by law, regulation, or legal process (e.g., for compliance with AML/KYC requirements).
• If necessary for the protection of our rights, property, or safety, or that of others.

10. International Data Transfers

As a decentralized network, data on the Hoosat Network is stored across various locations worldwide. While we do not control the location of the blockchain data, we ensure that any personal data processed outside of the EU adheres to GDPR standards through appropriate safeguards (e.g., Standard Contractual Clauses).

11. Changes to This Policy

We may update this GDPR policy from time to time to reflect changes in our practices or regulatory requirements. Any changes will be posted on this page, and the revised policy will take effect immediately upon posting.

12. Contact Us

If you have any questions or concerns about how we handle your personal data, or if you wish to exercise your rights under the GDPR, please contact us through our official communication channels:

• Email: toni.lukkaroinen@hoosat.fi