Why should I read this privacy policy?

This privacy policy (the ‘Policy’) tells you how Trading collects, uses, discloses and stores your personal information and the legal rights you have.

We protect your personal information in accordance with the EU General Data Protection Regulation (‘GDPR’) and other applicable laws.

We may unilaterally modify this policy from time to time. Any such modifications will be effective immediately upon issuance, so please visit www.curmark.com regularly to check the most current version of this policy.

Who is responsible for protecting my information?

Our Company: Intuitive Process LLC

Company number:

Address: 6815 Armstrong Ct, Woodridge, Illinois, 60517

Email Address: [email protected]

Why and how do you collect my information?

1. To process orders on Curmark.com, collect payments, and ship purchased goods.

When is this relevant to me?

What information do you collect about me?

What is the legal basis for collecting my information?

Where do we collect information?

Do I need to provide this information?

How long do you store information about me?

When you buy our products.

First name, last name, shipping address, phone number, email address, purchase price and currency information paid, credit card brand, type, BIN number, and country of credit card issuance, IP address, language, device type, and payment history.

Contract (Article 6(1)(b) GDPR).

We collect from you.

This is necessary to enter into a contract. If you do not provide this information, you will not be able to purchase or receive our products.

Store for 10 years.

2. Strengthen and improve the security of Curmark.com.

When is this relevant to me?

What information do you collect about me?

What is the legal basis for collecting my information?

Where do we collect information?

Do I need to provide this information?

How long do you store information about me?

If you use Curmark.com or violate our Terms of Service.

IP address, device information and identity, web browser information, website, information about activities in your country, information about violations of our Terms of Service, and blacklists.

Legitimate interests (security and improvement of our website) (Article 6(1)(f) GDPR)

We collect from you.

No.

1 month from your last use of Curmark.com, information about violations of our Terms of Service and blacklisting 10 years

3. Provide customer support

When is this relevant to me?

What information do you collect about me?

What is the legal basis for collecting my information?

Where do we collect information?

Do I need to provide this information?

How long do you store information about me?

When submitting a question or complaint to our customer support team.

First name, last name, email address, country/region, phone number, inquiry details, inquiry date, inquiry details, inquiry attachments, inquiry response, customer contact information, order ID.

Consent (Article 6(1)(b) GDPR).

We collect from you.

No.

10 years from the date of last inquiry

4. Promote our products or advertise on the Internet

When is this relevant to me?

What information do you collect about me?

What is the legal basis for collecting my information?

Where do we collect information?

Do I need to provide this information?

How long do you store information about me?

To provide you with information, ask your opinion about our products, or show you other information on the Internet.

Name, e-mail, telephone number, IP address, order information, country, return information, website leading to the company’s website, mutual advertising with the Internet

Consent (Article 6 (1) (a) of the GDPR)

Relationship with customers

Legitimate interests (direct marketing and Internet additions) (Article 6 (1) (f) GDPR)

We collect from you.

Social Media Service Providers

Marketing Service Providers

E-Commerce Providers

No.

5 years, unless requested to stop tracking,

5. Communicate with you through social media

When is this relevant to me?

What information do you collect about me?

What is the legal basis for collecting my information?

Where do we collect information?

Do I need to provide this information?

How long do you store information about me?

When you interact with social media profiles (e.g. send a message, follow a profile, share a post, react to a post).

First and last name, email address, gender, country/region, photo, message, time and date of message received, message content, message attachments, replies to messages, response time to messages, information about company ratings, comments on posts, sharing posts, and information about post-reactions.

Consent (Article 6 (1) (a) of the GDPR)

From yourself and your social media service provider.

No.

10 years since last interaction with social media profiles.

6. Conduct the selection of potential employees

When is this relevant to me?

What information do you collect about me?

What is the legal basis for collecting my information?

Where do we collect information?

Do I need to provide this information?

How long do you store information about me?

When submitting a job application, when agreeing to save a resume, or when contacting you based on information publicly disclosed on a professional social media platform.

Name, email, phone number, resume, occupation and other information provided.

Consent (Article 6 (1) (f) of the GDPR)

Agreement (Article 6 (1) (b) of the GDPR)

Legitimate interest (to contact you when we disclose your information) (GDPR Article 6 (1) (f))

We collect from you.

Professional Social Media Service Providers

Human Resource Agents

This is a necessary requirement to enter into a contract of employment only if we wish to enter into a contract of employment with you.

Failure to provide this information will result in us being unable to enter into an employment contract with you.

6 months after the end of the applicable recruitment process.

5 years after you consent to public disclosure of your information by us or on a professional social media platform.

7. Meet statutory accounting requirements

When is this relevant to me?

What information do you collect about me?

What is the legal basis for collecting my information?

Where do we collect information?

Do I need to provide this information?

How long do you store information about me?

When you order our products.

Name, email address, phone number, bank account number, address, signature, invoices, reports, accounting vouchers, payments, disbursements and other information we are legally required to collect.

Consent (Article 6(1)(c) of the GDPR)

We collect from you.

Audit Service Providers

This is a legal requirement.

Failure to provide this information will prevent you from purchasing goods or services from us.

10 years after the transaction.

8. Protecting our rights and interests

When is this relevant to me?

What information do you collect about me?

What is the legal basis for collecting my information?

Where do we collect information?

Do I need to provide this information?

How long do you store information about me?

When we become a party to legal proceedings that apply to you, or when we are required by law to collect information about you.

All of the above information, accounting and legal case files, legal documents and other information that you provide to us and other information that we are required by law to collect and/or provide.

Consent (Article 6(1)(c) of the GDPR)

Legitimate interests (protection of interests) (Article 6(1)(f) of the GDPR)

The above sources, law enforcement agencies, we are bound by legal process, courts.

Yes, in cases where we are required by law to collect personal information.

10 years after the end of the contract or legal process period between you and us, whichever is longer, and 3 years after the effective date of the final authorization decision.

In case of an accident – information about crimes and convictions

Establishment, exercise or defence of legitimate claims (Article 9(2)(f) GDPR)

9.Who should I share my information with?

We will share your information with recipients within and outside the European Economic Area (EEA) as necessary to achieve the above purposes and as permitted by applicable law.

Information recipient or category of information recipient

Purpose of the information

Receiving country

European Commission decision on whether non-EEA countries have an adequate level of data protection

Do I need to provide this information?

Accounting and Audit Service Provider

This is to meet statutory accounting requirements.

Europe

N/A

N/A

Storage Service Provider

Preservation of archives

Europe

N/A

N/A

Electronic Communication Service Provider

Operating electronic communications

Europe

N/A

N/A

Lawyers, notaries, bailiffs, auditors, data protection officers, consultants

Protect our rights and comply with regulations

Europe

N/A

N/A

Email and Cloud Hosting Providers

Operational IT Resources

Worldwide

No

Banks, Payment Processing and other Financial Service Providers

Process your payment

Worldwide

No

Marketing and Telemarketing Service Providers

Promotional Products

Worldwide

No

Transportation Service Providers and Fulfillment Centers

Shipping

Worldwide

No

Customer Support Service Providers

Provide customer support

Worldwide

No

Social Media Service Provider

Manage your social media profiles

Worldwide

No

10. What legal rights do I have to my information?

Subject to the conditions and limitations set forth in applicable law, you have the right to:

(i) obtain confirmation as to whether we have collected information about you and request access to that information;

(ii) to correct inaccurate or misleading information or to supplement incomplete information;

(iii) To remove information about you;

(iv) Restrict the use of your information if you question its accuracy, object to its processing or need it for any legitimate purpose;

(v) request information in a structured, commonly used and machine-readable format

(vi) object to processing .

(vii) withdraw consent given to us for the processing of your information.

(viii) not to be discriminated against in the exercise of your rights (ix) to lodge a complaint with a regulatory body;

The following sections provide more information about your rights and the circumstances in which they apply.

11. What rights do I have to request access to information?

You have the right to request disclosure of certain information about our collection and use of your information.

Upon receipt and confirmation of your request, we will disclose the categories of personal information we collect about you, the categories of sources from which we collect personal information about you, the business or commercial purposes for which we collect such personal information, and the categories of third parties

With whom we share personal information, certain personal information we collect about you, and other information we are required to provide under applicable law.

As described in Point 4 of this Policy, we have disclosed information to third parties for business or commercial purposes.

12. What rectification rights do I have?

You have the right to correct any personal information about you that is inaccurate.

For processing purposes, you have the right to complete incomplete information, including how to provide additional statements.

13. What rights do I have to have my information removed?

You have the right to request that

(i) we delete the information we collect and maintain about you if it is no longer necessary for the purposes for which it was collected or processed;

(ii) You withdraw the consent on which the processing is based and there is no other legal basis for the processing;

(iii) You object to the processing and there are no overriding legitimate grounds for the processing or for objecting to the processing for direct marketing purposes;

(iv) Your information has been processed unlawfully;

(v) We are required to delete the information to comply with a legal obligation;

(vi) the information collected relates to information society services provided directly to children and consent has been obtained; upon receipt and confirmation of your request, we will delete your information from our records (and instruct our service providers to do so), unless applicable law requires deletion in specific circumstances (for example, where we are not required to retain the information).

Will do Complete transactions in which we or our service providers collect personal information, provide goods or services you request, take actions reasonably expected in the context of an ongoing business relationship with you, or otherwise breach our agreements.

(Detect security incidents, prevent malicious, deceptive, fraudulent or illegal activity, prosecute those responsible for such activity, and comply with legal obligations).

14. What rights do I have to restrict data processing?

If you dispute the accuracy of your personal information, you have the right to

(i) to restrict the processing of your information;

(ii) If the processing is unlawful and you object to the deletion of your personal data and instead request a restriction of use;

(iv) object to the processing.

15. What are my rights to information portability?

You are entitled to data migration if you wish to receive the information you provide in a structured, commonly used and machine-readable format, or to transfer it to another controller with consent or contract processing.

It is done by means of automation.

16. What right do I have to object to the processing of my data?

As described in this Section 3, you have the right to object to the collection and use of your information, including analysis, in the exercise of official authority based on public or vested interests or legitimate interests.

If you object to the collection of personal information for policy or direct marketing purposes.

17. What right do I have to withdraw my consent?

As described in Section 3 of this Policy, you have the right to, and will, withdraw the consent you have provided in connection with the processing of consent-based information at any time.

18. What rights do I have to complain to the regulator?

You have the right to file a complaint with a supervisory authority, particularly in your place of residence, place of work or member state where you are suspected of violating the GDPR.

19. What right do I have to not be discriminated against in the exercise of my rights?

You also have the right not to be discriminated against when exercising your rights under applicable law.

For example, you will not be denied goods or services, charged different prices, or provided goods and services of a different quality, etc. because you have exercised your rights under applicable law.

20. How do I submit a request?

To exercise any of the above rights, please submit a request via email at [email protected].

21. Can I use an authorized representative?

If you have given written permission, you may use your authorized representative to submit an opt-out request on your behalf.

In that case, please provide a copy of that authorization as directed in this policy.

We may deny requests from authorized representatives who do not provide evidence that you have authorized them to act on your behalf.

You may also make a request on behalf of your minor child.

22. Are you involved in automated personal decision making, including analytics?

No, our decisions will not be based on any automated processing that has legal consequences for you, including analysis.

23. Does Curmark.com store COOKIE on my device?

Yes, Curmark.com stores the following cookies on your device.

Cookie Name

Cookie Description

Cookie Expiration

Absolutely Necessary and Statistical Cookies

_fbp

Used to distinguish and track unique user.

3 months

_ga

This cookie is used to uniquely distinguish users by assigning a randomly generated number as a client identifier.

It is included in every page request on your website and is used to calculate visitor, session and activity data for website analytics reporting.

2 years

_gat

Google Analytics uses this cookie to rate requests.

1 day

_gid

This cookie stores and updates a unique value for each page visited, and is used to calculate and track page views.

1 day

__cfruid

A cookie associated with a website that uses CloudFlare to identify authoritative network traffic.

During your session only

_fw_crm_v

Used to track visitor/user IDs and chat sessions conducted by users

1 year

_hjid

The Hotjar cookie set when a client first visits a page with a Hotjar script.

It is used by browsers to maintain a unique Hotjar user ID for Curmark.com.

This ensures that subsequent visits to the same site are attributed to the same user ID.

1 year

_uetvid

This is a cookie used by Microsoft Bing Ads, which allows us to interact with users who have previously visited our site.

1 year

XSRF-TOKEN

These cookies are created to help Curmark.com secure against cross-site request forgery attacks.

1 day

enence_session

This is used to store information about your current visit.

These cookies are necessary for the proper functioning of the website.

Only when visiting Curmark.com

C

These cookies are used to detect spam and to improve site security.

We do not store any visitor-specific data.

1 year

soundestID

This cookie is used to determine if the visitor has visited Curmark.com before or is a new visitor to Curmark.com.

Only when visiting Curmark.com

soundtest-views

Assign a specific ID to a visitor.

This allows Curmark.com to determine how many times a specific user has visited for analysis and statistical purposes.

Only when visiting Curmark.com

Marketing Cookies

ads/ga-audiences

Google AdWords uses this cookie to re-engage visitors who may be converted into customers based on their online behavior on the site.

Only when visiting Curmark.com

REST/webTracking/v1/event

This Cookie measures the effectiveness of website marketing.

Cookies are used to measure the conversion rate between website marketing and phone response.

Only when visiting Curmark.com

Target Cookie

_gat_gtag_UA_136786017_1

This cookie is part of Google Analytics and is used to limit requests (request rate limit).

1 minute

24. How do you manage COOKIES?

You can configure your browser to refuse some or all cookies, or to request permission before accepting cookies.

If you delete cookies or disable cookies in the future, you may not be able to access certain areas or features of our site.

You can control the use of feature, targeting, or advertising cookies by adjusting your browser settings.

Visit one of the links below to learn how to manage cookies in your browser.

Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Google Chrome: https://support.google.com/chrome/answer/95647

Opera: https://www.opera.com/help/tutorials/security/privacy

Microsoft Edge: https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy

Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-information-sfri11471/mac

25. How do I contact the Data Protection Officer?

If you have any questions, comments, or complaints about how we collect, use, and store your personal information, our Data Protection Officer is ready to help you.

If you need help, you can always contact them via emailing [email protected].