Last Updated: January 31, 2025. Czech Republic and EEA
This Privacy Policy ("Privacy Policy") describes how and why Ridm ("we", "our", "us", or “RIDM”) collects and otherwise processes personal data about you as a visitor and user of Ridm.io as defined under the Terms of Service of Ridm.io (hereinafter the“Platform”).
The term "processing" is used to cover all activities involving your personal data, including e.g. collecting, handling, storing, sharing, accessing, using, transferring and disposing of your personal data.
"Applicable Data Protection Laws" means all legislation and regulations, including regulations issued by relevant supervisory authorities, protecting the fundamental rights and freedoms of individuals and, in particular, their right to privacy with respect to the processing of personal data that from time to time apply to this Privacy Policy, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the"GDPR") as well as laws and regulations complementing the GDPR.
"Personal data" is defined as any information relating to an identified or identifiable natural person.
Xypheris s.r.o., a company incorporated in the Czech Republic under the company registration number: 22400737 and with its registered address at Kurzova 2222/16, 155 00, Praha 13 - Stodůlky is the data controller with respect to the processing of your personal data as described in this Privacy Policy.
Personal data is collected from you, as provided when you use the functionalities of our Platform. The Platform is subject to Terms of Use available here: LINK. All of the Terms of Use referred to herein shall be together referred to as the“Agreement” between Ridm and the user for the purpose of this Privacy Policy.
We will process your personal data when you create and use your User Account for the Virtual Asset Services on the Platform as described in our Terms of Use.
| Categories of personal data | Legal basis |
|---|---|
| Contractual necessity. The processing is necessary for the performance of the Agreement between you and Ridm or in order to take steps at the request of you prior to entering into the Agreement. |
| Retention period: Personal data will be retained during our contractual relationship. | |
We will process your personal data as needed to provide customer services, as needed.
| Categories of personal data | Legal basis |
|---|---|
| Legitimate interest. The processing is necessary to fulfil our legitimate interest in improving your experience on the Platform and to provide you with tailored content. |
| Retention period: Personal data will be retained during our contractual relationship. | |
For the purposes of establishing, exercising and defending legal claims, e.g. in connection with a dispute or legal process, we may process your personal data.
| Categories of personal data | Legal basis | ||
|---|---|---|---|
| All data collected that are necessary to fulfil the purpose. | Legitimate interest. The processing is necessary in order to fulfil our legitimate interest to establish, exercise or defend the legal claim, e.g. in connection with a dispute or legal process.
| ||
| Retention period: Personal data will be retained for up to 10 years in order to establish, exercise and defend legal claims. | |||
Ridm will process your personal data for the purposes of fulfilling legal obligations within the area of e.g. book-keeping, accounting and requirements under Applicable Data Protection Laws.
| Categories of personal data | Legal basis |
|---|---|
| All data collected that are necessary to fulfil the purpose. | Legal obligation. The processing is necessary to fulfil Ridm's legal obligations. |
| Retention period: Personal data will be retained as long as necessary to fulfil each legal obligation. | |
In order to manage and protect our services and related IT systems, e.g. upon logging, troubleshooting, backup, change and problem management in systems and in connection with potential IT incidents, we process, to the extent necessary, your personal data.
| Categories of personal data | Legal basis |
|---|---|
| All data collected that are necessary to fulfil the purpose. | Legitimate interest. The processing is necessary to fulfil our legitimate interest in managing and protecting our website, services and related IT systems. |
| Retention period: Personal data will be retained as long as necessary in relation to each purpose stated above. | |
Where necessary, we share your personal data with others. The recipient is the data controller for the processing of your personal data, unless we have stated otherwise.
| Recipient | Purpose | Legal basis |
|---|---|---|
| Public authorities (including courts), arbitration tribunals, external advisers and counterparties | In order to exercise, establish or defend legal claims. | Legitimate interest. To fulfil our legitimate interest in managing and defending legal claims, e.g. in relation to a dispute. |
| Public authorities (including courts) and external auditors | To fulfil legal obligations in the field of taxation and accounting. | Legal obligation. To fulfil our legal obligations. |
| Potential purchasers and vendors, external advisers | Take necessary actions in connection with selling all or part of the business or in connection with a merger. | Legitimate interest. To fulfil our legitimate interest in being able to sell all or part of the business or in connection with a merger. |
| Business partners (Payment Service Providers, AML screening third-parties provider, IT ecosystem providers and affiliation traffic providers) | Ridm will share your personal data with its business partners for the following purposes:
| Regarding no 1, 2, and 3: Contractual necessity. The processing is necessary for the performance of our Agreement with you (i.e.Terms and Conditions) or in order to take steps at the request of you prior to entering into the contract. Regarding no 4: Legitimate interest. The processing is necessary to fulfil our legitimate interest in providing you with the affiliated offers connected to your use of the Platform. |
In order to fulfil the purposes of the processing of your personal data, we transfer personal data to external parties such as service providers that we have engaged as well as other partners. These parties provide services within the areas of inter alia IT (such as data storage, support and management services), finance (e.g. our book-keeping system) and statistics services. These external parties will act as data processors of Ridm and may only process your personal data in accordance with our instructions and not for their own purposes. Ridm is the data controller for the processing of personal data that these external parties carry out on our behalf.
Should Ridm transfer or disclose your personal data to a recipient in a country outside of the EU/EEA (third country), Ridm will ensure that appropriate safeguards have been taken (such as the EU Commission's standard contract clauses, including other safeguards as necessary in each case) to protect the personal data.
You are, if so provided under Applicable Data Protection Laws, upon request entitled to receive a copy of any documentation demonstrating that appropriate safeguards have been taken in order to protect your personal data during a transfer to a third country.
If you would like to know more about the processing of your personal data and whether it is transferred to a third country, please contact us on the contact details as set out below.
A cookie is a text file automatically saved in the browser of any User when visiting the Platform. This text file may contain personal data and/or information relating to the User's navigation.
The only purpose of the cookies used on the Platform is to improve your browsing experience as a User. The cookies used facilitate your navigation by memorising some of your personal data when you access and navigate the Platform. Three types of cookies are used on the Platform, their purpose varying according to their type:
It is possible for the User to manage at any time the Cookies on the browser he/she uses. The User can activate or deactivate them at any time. The means of managing cookies depend on each browser.
Under Applicable Data Protection Laws, you have certain rights in relation to the processing of your personal data. We process your personal data to the extent necessary in order to fulfil your rights. Please submit requests for exercising your rights by contacting us on the contact details set out below.
You have, under certain circumstances, the right to exercise the following rights:
You may request confirmation whether or not personal data is processed and, if that is the case, access your personal data and additional information such as the purposes of the processing. You are also entitled to receive a copy of the personal data undergoing processing. If the request is made by electronic means the information will be provided in a commonly used electronic format if you do not request otherwise.
Object to certain processingYou have the right to object to the processing of your personal data based on a legitimate interest for reasons which concern your particular situation. In such a situation, we will stop using your personal data where the processing is based on a legitimate interest, unless we can show that the interest overrides your privacy interest or that the use of your personal data is necessary in order to manage or defend legal claims. |
|---|
You have at any time the right to have inaccurate personal data rectified, as well as, taking into account the purposes of processing, the right to have incomplete personal data completed which relates to you.
You may have your personal data erased under certain circumstances, such as when your personal data is no longer needed for the purposes for which it was collected. However, we cannot delete your personal data if we e.g. are obligated under law to keep the data.
You may ask us to restrict the processing of your personal data to only comprise storage of your personal data under certain circumstances, such as when the processing is unlawful, but you do not want your personal data erased. If the processing of your personal data has been restricted we may only, besides storing the data, process your personal data with your consent, in order to establish, exercise or defend legal claims or to defend rights of others.
You have the right to at any time withdraw your consent to processing of personal data to the extent the processing is based on your consent.
You may ask to receive a machine-readable copy of the personal data processed on the basis of your consent or on the basis that the processing is necessary in order to perform an agreement with you, and which personal data have been provided to Ridm by you (data portability) and ask for the information to be transferred to another data controller (where possible).
You acknowledge that you always have the right to lodge complaints pertaining to the processing of your personal data to the Personal Data Authority in Czech Republic (Office for Personal Data protection - uoou.gov.cz).
If you have any questions or concerns regarding the processing of your personal data, please contact Ridm on the contact details set forth below.
Xypheris s.r.o.
Company registration number: 22400737
Kurzova 2222/16, 155 00, Prague 13 - Stodůlky
RIDM is a platform providing virtual asset services operated by Xypheris S.r.o.
Xypheris s.r.o. Company number 22400737
Kurzova 2222/16, Stodůlky, 155 00 Prague 5, The Czech Republic
registered with the Financial Analytical Office of Czech Republic (FAÚ)
©Ridm 2025 All rights reserved
