Privacy Policy

1. Data Controller

TokenReal S.A. (hereinafter "TokenReal", "we" or "the Company") is the data controller for personal data collected through this website and the investment platform.

You may contact us at: [email protected]

2. Data We Collect

We collect the following types of personal data:

• Identification data: full name, identity document, date of birth.
• Contact data: email address, phone number, postal address.
• Financial data: information on net worth, investment experience and risk profile.
• Browsing data: IP address, browser type, pages visited, session duration.
• Communication data: messages sent through contact forms.

3. Purposes of Processing

We process your data for the following purposes:

• Managing the registration and verification process for qualified investors (KYC/AML).
• Providing services on the tokenized asset investment platform.
• Compliance with applicable legal and regulatory obligations.
• Communications related to your account and portfolio assets.
• Improving user experience and aggregate statistical analysis.
• Handling inquiries and information requests.

4. Legal Basis

The processing of your data is based on:

• Performance of a contract: for the provision of platform services.
• Legal obligation: for compliance with AML, KYC and applicable financial regulation.
• Legitimate interest: for platform security and fraud prevention.
• Consent: for sending commercial communications and use of non-essential cookies.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the described purposes and, in any case, for the legally required periods. Investor data is retained for a minimum of 5 years after the end of the contractual relationship, in accordance with applicable financial regulation.

6. Your Rights

As a data subject, you have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Request erasure of your data when no longer necessary.
• Object to processing or request its restriction.
• Request data portability.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, contact us at [email protected]

7. International Transfers

Your data may be transferred to service providers located outside the European Economic Area. In such cases, we ensure that such transfers are carried out with appropriate safeguards.

8. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or accidental disclosure, including SSL/TLS encryption, access controls and periodic security audits.

9. Changes

We may update this policy periodically. We will notify you of any material changes through the platform or by email. The current version will always be available on this page.