Privacy Policy

The controller of your personal data is Token City European Exchange Agencia de Valores S.A. (hereinafter, "TC AV"), with Tax ID No. A25988981 and registered office at Calle de Henri Dunant, 17, 28036 Madrid, Spain.

We inform you that ownership of the domain of our website https://exchange.token-city.com/ (hereinafter, the "Website") belongs to TC AV.

Access to and/or use of the Website confers the status of User (hereinafter, the "User") and implies acceptance of this Privacy Policy from such access to and/or use.

The User may contact TC AV at the following email address: contact@token-city.com.

TC AV is entitled to process your data in order to provide its services.

TC AV takes the protection of your privacy and personal data very seriously. Therefore, your personal information is stored securely and handled with the utmost care.

This Privacy Policy governs access to and use of the service (hereinafter, the "Service") that TC AV makes available to Users interested in the services and Content hosted on the Website.

• The performance of a contract.
• Users' consent to the processing of their personal data for the purposes specified in each case.
• Legitimate interest.

To that end, the lawful bases used by TC AV for processing Users' data are those listed above.

With regard to the last of these, the User may withdraw consent at any time by sending a message to the following email address: contact@token-city.com, without this affecting the lawfulness of processing based on consent before its withdrawal.

Your personal data collected by TC AV may be used for the following purposes:

• The provision of the services offered by TC AV.
• The sending of commercial communications and/or the TC AV Newsletter regarding its services by letter, telephone, email, SMS/MMS, or other equivalent electronic means of communication.

The User guarantees that the personal data provided is accurate and undertakes to inform TC AV of any changes thereto. In all cases, the User shall be responsible for the accuracy of the data provided, and TC AV reserves the right to exclude from the registered Services any User who has provided false data, without prejudice to any other actions available at law.

TC AV will retain users' personal data only for as long as necessary to fulfill the purposes for which it was collected, provided that the User has not revoked the consents granted. Thereafter, where necessary, TC AV will keep the information blocked for the legally established periods.

The User has the right to:

• To access their personal data.
• To request the rectification of inaccurate data.
• To request erasure.
• To request restriction of the processing of their data.
• To object to the processing of their data.
• To request data portability.
• Not to be subject to automated individual decision-making.

The User may exercise all these rights by emailing contact@token-city.com, stating the reason for the request and providing a copy of their national identity document.

The User may also send the request by ordinary mail to the following address:

Token City European Exchange AV S.A.
Calle de Henri Dunant, 17, 28036 Madrid, Spain.

Without prejudice to any other administrative remedy or judicial action, the User shall have the right to lodge a complaint with a Supervisory Authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement, if they consider that the processing of their personal data does not comply with the applicable regulations, as well as in the event that they are not satisfied with the exercise of their rights. The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint.

The protection of the privacy and personal data of Users is very important to TC AV. Therefore, TC AV does everything within its power to prevent your data from being used improperly, allowing access to it only to authorized personnel.

TC AV maintains the levels of security for the protection of personal data required under the applicable regulations and has established all technical means within its reach to prevent the loss, misuse, alteration, unauthorized access to, and theft of the data that the User provides through the Website, without prejudice to informing you that security measures on the Internet are not impregnable.

TC AV undertakes to comply with its duty of secrecy and confidentiality in relation to personal data in accordance with the applicable legislation.

In those Website services that require registration as a User, a password must be chosen. The User is responsible for maintaining the confidentiality of this password, as well as for all activities that occur in the session started with their username and password.

The User undertakes to notify TC AV as soon as possible of any unauthorized use of their username and/or password or any other security breach. TC AV shall not be liable for any damage or loss that may arise due to the User's failure to comply with this obligation.

TC AV informs the User that their personal data may be disclosed to the partner entities necessary for the proper provision of the services, including, where applicable, other group companies, financial institutions, technology providers, providers of compliance services, audit providers, and any other third parties that are indispensable for contractual performance or compliance with legal obligations.

Likewise, and only when necessary for the proper provision of the services requested by the User, the data may be shared with other entities with which TC AV has collaboration agreements in place. In such cases, TC AV will ensure that those entities act as data processors or joint controllers, as appropriate, entering into the agreements required by data protection regulations.

Under no circumstances will personal data be transferred to third parties without a legal basis legitimizing such transfer, except where required by law or with the User's express consent. No international transfers of data will be made to countries outside the European Economic Area without the appropriate safeguards provided for in the GDPR.

TC AV reserves the right to review its Privacy Policy whenever it deems appropriate. For this reason, we ask that you review this Privacy Policy regularly in order to read its most recent version.

However, any changes made to this Privacy Policy will be communicated to the User.

The Website may contain links to websites of third-party companies and entities.

TC AV cannot be held responsible for the way in which these companies handle the protection of privacy and personal data, and therefore we recommend that you carefully read the Privacy Policy statements of those websites not owned by TC AV in relation to the use, processing, and protection of personal data.

The conditions offered by those websites may not be the same as those offered by TC AV.

If you have any questions about this Privacy Policy or the processing of your data, please contact TC AV by email at the following address: contact@token-city.com.

The User declares that they have been informed of the conditions concerning the protection of personal data, accepting and consenting to the processing thereof by TC AV in the manner and for the purposes indicated in this Privacy Policy.