Privacy

1) Who we are

Controller: Besela, UAB, Architektų g. 56-101, LT-04111 Vilnius, Lithuania (“Besela”, “we”, “us”).
Email: legal@c42token.com

2) What data we collect

A) Data you provide to us

• Contact / partner inquiries: name, email, company/role (if provided), message content, and any attachments you submit.
• Program partner discussions: operational contact details and basic due diligence information you choose to share (e.g., corporate identifiers, compliance contact).
• Wallet addresses (if provided): a blockchain wallet address may be personal data when linked to an individual. We treat it as a personal identifier.

B) Data we collect automatically

• Server logs: IP address, timestamps, pages accessed, device/browser details, referrer URL, and error logs (used for security and performance).
• Cookies / similar technologies: used for core site functionality and (if enabled) analytics or embedded content. See Section 6.

C) What we ask you not to submit here

Please do not submit sensitive whistleblower/victim case details on C42Token.com (e.g., evidence packs, ID documents, medical data, detailed victim narratives).
Use the dedicated workflows on Whistle42 / ClaimBack42 for such information.

3) Why we process your data (purposes) and our legal bases

• To respond to your inquiries (including partnership discussions). Legal basis: legitimate interests, and/or steps prior to entering a contract.
• To operate, secure, and improve the website (fraud prevention, abuse detection, debugging). Legal basis: legitimate interests.
• To comply with legal obligations (e.g., handling lawful requests, recordkeeping where required). Legal basis: legal obligation.
• Analytics (if enabled and consent-based where required) to understand usage and improve content. Legal basis: consent (where applicable).

4) Who we share data with

We do not sell personal data. We may share data with trusted service providers who help us run the site and process communications, such as:

• Hosting / infrastructure providers (to host and deliver the website);
• Email and communications providers (to respond to messages);
• Security providers (spam protection, attack mitigation, monitoring);
• Analytics providers (only if enabled; subject to cookie settings and applicable rules).

We may also disclose data where required by law, court order, or to protect rights, safety, and the integrity of the ecosystem.

5) International transfers

Some service providers may process data outside the European Economic Area. Where that happens, we use appropriate safeguards such as
Standard Contractual Clauses and/or other lawful transfer mechanisms.

6) Cookies and similar technologies

We use cookies for core site functions (e.g., security and session stability). If we use optional analytics or marketing cookies, you will be able
to manage preferences via our cookie settings (where implemented).

7) How long we keep data (retention)

• Inquiry data: typically kept as long as needed to respond and manage follow-ups, then archived or deleted based on necessity and legal requirements.
• Security logs: kept for a limited period to protect the website and investigate abuse.
• Contractual/partner records: retained for the term of the relationship and as required for legitimate business and legal reasons.

8) Security

We apply technical and organisational measures to protect personal data (access controls, least-privilege, monitoring, and secure hosting practices).
No online system is risk-free; please avoid sending sensitive data via standard web forms or email.

9) Your rights under GDPR

Depending on your situation, you may have the right to:

• request access to your personal data;
• request correction of inaccurate data;
• request deletion (“right to be forgotten”) where applicable;
• request restriction of processing;
• object to processing based on legitimate interests;
• request data portability (where processing is based on consent or contract and carried out by automated means);
• withdraw consent at any time (where processing is based on consent).

To exercise your rights, email us at legal@c42token.com.
We may ask for reasonable verification to protect against unauthorised requests.

10) Right to lodge a complaint (Lithuania)

If you believe your data has been processed unlawfully, you can lodge a complaint with the Lithuanian supervisory authority:

State Data Protection Inspectorate (VDAI), Vilnius, Lithuania.

11) Changes to this Privacy page

We may update this page to reflect changes to the website, the ecosystem, or legal requirements.
We will publish the updated version here with a new “Last updated” date.

Privacy · v1.0 · Last updated: 14 January 2026