Privacy Policy

STARTMINING SAS is the controller of the personal data collected through the startmining.io website and its associated services.

Registered office: 334 rue du Luxembourg, 83500 La Seyne-sur-Mer, France

Trade register (RCS): 853 111 698 — Toulon

Contact: support@startmining.io

As part of the provision of our services, we collect the following categories of data:

• Identification data: surname, first name, date of birth, address, nationality
• Contact data: email, telephone
• Business data: company name, SIREN/SIRET number, intra-EU VAT number
• Connection data: IP address, session identifier, authentication data
• Financial and transactional data: order history, payment method used
• Copy of identity document (KYC mandatory for AML-CFT compliance)

Your data is processed for the following purposes:

• Performance of the purchase and/or hosting contract (Terms and Conditions)
• Management of your personal account and billing
• KYC / Know Your Customer verification (AML-CFT obligations)
• Transaction monitoring (traceability, prevention of financial fraud)
• Responding to your requests via the contact form
• Sending commercial communications (subject to explicit consent)

In accordance with Article 6 of the GDPR, the legal bases for our processing are:

• Performance of the contract: management of your order, delivery, hosting, billing
• Legal obligation: KYC, accounting record-keeping, anti-money laundering
• Consent: newsletter, marketing communications, non-essential cookies
• Legitimate interest: site security, fraud prevention, service improvement

We retain your data for the following periods:

• Account data: for as long as your account is active + 3 years after last login
• Transactional data: 5 years after the last transaction (accounting obligation)
• KYC data: 5 years after the end of the contractual relationship (AML-CFT obligation)
• Connection logs: 12 months (LCEN obligation)
• Newsletter data: for as long as you remain subscribed + 3 years

Once these periods have elapsed, your data is either deleted or anonymised for statistical purposes.

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

• Right of access: obtain a copy of your data
• Right to rectification: correct inaccurate data
• Right to erasure (right to be forgotten): subject to our legal obligations
• Right to restriction of processing
• Right to portability: retrieve your data in a structured format
• Right to object to processing on legitimate grounds
• Right to withdraw your consent at any time (without retroactive effect)
• Right to determine the fate of your data after your death

To exercise your rights of access, portability and erasure directly: My data and GDPR rights → (login required)

For any other request, contact us at support@startmining.io. A copy of your identity document may be requested to verify your identity.

Your data may be shared with:

• Our technical subcontractors (hosting, payment, emailing) bound by contract to confidentiality obligations compliant with the GDPR
• Judicial, administrative or regulatory authorities where required by law
• Our billing partners (Axonaut, accountant)
• Our electronic signature partners (DocuSign)

No data transfer outside the EU is carried out without appropriate safeguards (standard contractual clauses, European Commission adequacy decision).

Our site uses cookies for the following purposes:

• Strictly necessary cookies: session, authentication, cart (= no consent required)
• Preference cookies: displayed currency, language (= implied consent)
• Analytics cookies: audience measurement (= consent required if deployed)

You can manage your preferences at any time via your browser settings or via the consent banner if present.

We implement appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of your data: HTTPS encryption, restricted access to data by authorisation, encrypted backups, regular audits.

In the event of a data breach posing a risk to your rights and freedoms, you will be informed within 72 hours, in accordance with Article 33 of the GDPR.

If you consider that your rights are not being respected, you may lodge a complaint with the CNIL (the French data protection authority, Commission Nationale de l'Informatique et des Libertés), the competent supervisory authority in France:

www.cnil.fr/fr/plaintes

We may need to amend this privacy policy to reflect changes in our practices or in regulations. The last updated date shown at the top of this page is authoritative. We encourage you to consult this page regularly.

For any question relating to this policy or to your personal data:

📧 Email: support@startmining.io

📮 Mail: Startmining SAS — 334 rue du Luxembourg, 83500 La Seyne-sur-Mer, France