Compliance

Overview

We provide crypto-native accounting, bookkeeping, financial statements, and tax compliance services for validators, crypto-based companies, investors, startups and scaleups. To deliver these services we may process personal data of clients, users, suppliers, applicants, and website visitors. This policy explains what we collect, why and how we process it, on which legal bases we rely, and the rights you can exercise. We operate under the GDPR (EU), the Dutch Implementation Act (AVG), the Telecommunications Act, and other relevant laws. The GDPR principles—lawfulness, fairness & transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity & confidentiality; accountability—guide our processing. We act as a data controller for our own operations and, where contracted, as a data processor for clients under a processing agreement.

Data We Process

Depending on the services we provide, we may process:

• Contact: name, role, business email, phone, correspondence
• Account & login: username, encrypted password, user logs
• IT & support: configs, logs, tickets, IP addresses, technical info
• Financial: invoicing data, bank account numbers, VAT, payment history
• Compliance & audit: security settings, audit reports, access logs
• Communication: emails, chat/call records, conversation notes
• Website: cookie IDs, IP, browser info, click behaviour

Categories depend on the specific engagement and lawful purpose.

Use & Sharing

Purposes & legal bases. We process personal data to: perform contracts and deliver services; communicate with you; manage billing/administration; ensure compliance and security (incl. incident handling); conduct marketing and relationship management (only with consent or where permitted within an existing customer relationship); and improve services through analysis/feedback. Depending on the purpose, we rely on GDPR Art. 6 bases such as contract, legal obligation, consent, or legitimate interests. Special categories are processed only when permitted by law with added safeguards.

Sharing. We do not sell your personal data. Where necessary, we share data with trusted IT/hosting suppliers, consultants/subcontractors, government bodies/regulators, and professional advisers—under appropriate agreements and safeguards and only to the extent necessary.

International transfers. Transfers outside the EEA occur only where adequate protection exists or where appropriate safeguards (e.g., Standard Contractual Clauses) are in place. Supplier compliance with GDPR/AVG is assessed in advance.

Security & Retention

Security. We use technical and organisational measures such as encrypted connections, strong authentication, need-to-know access controls, logging/monitoring, staff training, and regular audits. Privacy by design/default is embedded in our processes. Suspected data breaches follow our notification procedure; the Dutch DPA is notified within 72 hours where required.

Retention. We keep data only as long as necessary or legally required. Typical periods: contractual/ticket data up to 10 years after contract end (tax/legal obligations); log/security data as short as possible, usually up to 2 years (longer if needed for incidents or claims); marketing data for as long as you remain subscribed (you can unsubscribe at any time).

Your Rights

You have the following rights under GDPR: to be informed; access; rectification; erasure; restriction; data portability; objection (incl. direct marketing); and human oversight for automated decisions. If processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing. We will respond as soon as possible and within one month. We do not use profiling and we do not make decisions based solely on automated processing that produce legal or similarly significant effects for you. The only automated filtering we apply is basic spam and bot protection on our website forms. If this changes, we will inform you and ensure your right to human intervention. You may also lodge a complaint with the Dutch Data Protection Authority.

Cookies & Contact

Cookies. We use functional cookies (essential), limited analytics (anonymised statistics), and—only with your explicit consent—tracking/marketing cookies. Manage your preferences via our cookie banner or your browser settings. Learn more

Last updated: November 2025

1. Introduction

At FinovaCrypto, we are committed to protecting your privacy and ensuring transparency in how we use cookies and similar technologies. This Cookie Policy explains what cookies are, how we use them, and your choices regarding their use on our website.

2. What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They enable essential site functionality, enhance your browsing experience, and—where permitted—help us analyze site usage to improve our services.

3. How We Use Cookies

• Strictly Necessary Cookies: These cookies are essential for the operation of our website and enable core features such as security, network management, and accessibility. They cannot be switched off in our systems.
• Preferences: These cookies allow our website to remember choices you make, such as language preferences or form data, to provide a more personalized experience. (Currently not in use.)
• Analytics: With your consent, we use analytics cookies to understand how visitors interact with our website, so we can measure and improve performance. These cookies are not enabled by default.
• Third-Party Cookies: Some features on our site, such as embedded Google Maps or Google Fonts, may set cookies from third-party providers. We do not control these cookies, and their use is governed by the respective providers' privacy policies.

4. Legal Compliance

We comply with all applicable data protection laws, including the General Data Protection Regulation (GDPR) in the Netherlands and the Protection of Personal Information Act (POPIA) in South Africa. Essential cookies are processed based on our legitimate interests and do not require your consent. All non-essential cookies (such as analytics or marketing) are only set with your explicit consent.

5. Managing Your Cookie Preferences

You can manage your cookie preferences at any time using our cookie banner. You may also adjust your browser settings to block or delete cookies. Please note that disabling certain cookies may affect the functionality and performance of our website.

6. Contact Us

If you have any questions or concerns about our Cookie Policy or data protection practices, please contact us at info@finovacrypto.com.

Our general terms and conditions apply to all FinovaCrypto offers, engagements and agreements. The data processing agreement is included as part of these terms: Article 11 serves as the data processing agreement within the meaning of Article 28(3) GDPR, and applies whenever we process personal data as a processor on your behalf. You can download the terms below in Dutch or English.

Version 1.1 — 11 September 2026.