NSAPDP represents The National Supervisory Authority for Personal Data Processing, the Romanian independent public authority responsible for the compliance with the protection of personal data requirements;
Personal data represents any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Processing represents any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Restriction of processing represents the marking of stored personal data with the aim of limiting their processing in the future;
Controller represents the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by the European Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
Processor represents a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
Recipient represents a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether it is a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with the European Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
Third party a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data;
Data Breach represents a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data. This means that a breach is more than just losing personal data.
Xclusiverse Project refers to the affiliated companies that are developing a technical infrastructure based on the blockchain technology that plans to offer its users a unique metaverse experience by providing access to the Xclusiverse City, Xclusiverse Mall, Xclusiverse Club and many other features.
Xclusiverse Project is an international technology company acting worldwide. However, you need to know that the technical infrastructure and all data processes performed through this presentation website are performed only by our software development company ONE NET DMCC, Dubai, UAE (hereinafter referred to as “Xclusiverse Development”).
Xclusiverse Development observes the confidentiality and security of the personal data constantly ensuring that all personal data are processed only for specific, explicit and legal purposes, according with the principles and provisions of the GDPR.
With respect to any information regarding the personal data we process you can e-mail us at email@example.com.
To easily identify the Personal data we process, we have combined them in several categories according to the purpose of processing.
Xclusiverse Development processes the users’ Personal data, as follows:
Personal data – On website offers users the possibility to register by entering their personal data. The data is entered in the input mask and is transferred to us and stored. The following data is collected as part of the registration process: first name, last name, e-mail address, phone number, country, county and profession used for user registration and for the performance of a contract with the user or to take steps prior to entering into a contract.
The purpose of processing – the personal data is processed for the purpose of enrolling you in the Xclusiverse world and having access to the features displayed within the Website.
The legal Basis – art. 6 para. 1 letter a) of the GDPR Regulation, which allows us to process personal data based on your consent given to us.
The collection method - directly from you if you create your fill out the register form on the Website.
The retention period – the personal data collected will be processed by us for as long as you have an active account on the Website.
Personal data – real – life pictures (optional), orders and payment methods.
The purpose of processing – the personal data is processed for the purpose of allowing you to enjoy and use all the features available within the Website, such as creating a real avatar or a fictive one that can be used on the accepted platforms.
The legal Basis – art. 6 para. 1 letter a) of the GDPR Regulation, which allows us to process personal data based on your consent given to us art. 6 para. 1 letter b) of the GDPR Regulation, which allows us to process personal data, when necessary, for performance of a contract or for the steps prior to its conclusion.
The collection method - directly from you if you decided to add a real – life picture as an avatar or when you are placing an order or when you are adding a new payment method.
The retention period – the personal data collected will be processed by us for as long as you are using the Xclusiverse account.
The purpose of processing – the personal data is processed for the purpose of enrolling you in the Xclusiverse newsletter and allowing you to be the first to know any updates and news related to our project, real estate matters, new technologies and many more.
The legal Basis – art. 6 para. 1 letter a) of the GDPR Regulation, which allows us to process personal data based on your consent given to us and art. 6 para. 1 letter b) of the GDPR Regulation, which allows us to process personal data, when necessary, for performance of a contract or for the steps prior to its conclusion
The collection method - directly from you when you subscribe to the Xclusiverse newsletter.
The retention period – the personal data collected will be processed by us for as long as you are subscribed to the newsletter. Please note that you can unsubscribe at any time should you no longer wish to be up to date with our Project.
Personal data – related to each user, such as: user’s social media accounts; any other information
users decide to provide us with when they contact us on the social media platforms; any other
information users decide to provide us with when they contact us by e-mail; comments and/or posts on
Given that the internet is not a safe space, please do not send us or limit, as much as possible, the personal data communicated through social platforms or e-mail.
The purpose of processing – the personal data mentioned above are processed for customer support purposes;
The legal Basis: Art. 6 para. 1 letter b) of the GDPR Regulation, which allows us to process personal data when necessary, for performance of a contract or for the steps prior to its conclusion;
The collection method – personal data are collected directly from users when they decide to contact us;
The retention period: personal data are stored for the purpose of proving the fulfilment of
contractual obligations between the parties for a period between 30 days and 1 year, depending on
the nature of the request (complaint, request for guarantee, contractual request, general request,
Generally, personal data are kept for a limited period according to the purpose of the processing and the legal provisions applicable to each category of data.
Xclusiverse Development ensures the proper deletion of personal data when such processing is no longer necessary.
Throughout its normal course of business Xclusiverse Development will not disclose or transfer, for direct marketing purposes, your personal data to third parties, regardless if such parties are located in Romania, in EU or outside EU.
Xclusiverse Development`s employees having access to personal data have been trained to observe the security and confidentiality of the personal data they have access to in performing the business activity. Xclusiverse Development’s employees` access to personal data is limited to the information required in performing their specific tasks.
We perform our daily activities at the highest standards thus sometimes we chose to cooperate with other companies in order to facilitate several technical or administrative processes such as: e-mail hosting services, storing data, sever hosting, legal services etc.
In case we decide to contract third parties for the supply of specific services, we will ensure that such third party complies with the provisions of GDPR and we will provide all information required for the proper performance of their services.
Your personal data may be communicated to governmental authorities and/or law enforcement agencies if required by the applicable law.
Xclusiverse Development as data controller, ensures technical and organizational measures to be sure that your rights (as a data subject) are observed:
You have the right to obtain the confirmation as to whether or not personal data concerning you are being processed by us, and, where that is the case, access to your personal data and information on how they are processed.
You have the right to receive some of your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and you have also the right to transmit those data to another controller without hindrance from us, where technically feasible.
You have the right to object to processing of your personal data, when processing is necessary for the performance of a task carried out in the public interest or for the purposes of the legitimate interests pursued by us. You have the right to object at any time if your personal data are being processed for direct marketing purposes.
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. The rectification shall be communicated to each recipient to whom the data was sent unless this proves impossible or involves disproportionate (demonstrable) efforts.
You have the right to obtain from us the erasure of personal data concerning you without undue delay and we have the obligation to erase your personal data without undue delay where one of the following grounds applies: your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraws consent on which the processing is based and there is no other legal ground for the processing; you objects to the processing and there are no overriding legitimate grounds for the processing; your personal data have been unlawfully processed; your personal data have to be erased for compliance with a legal obligation; your personal data have been collected in relation to the offer of information society services.
You have the right to obtain from us restriction of processing where one of the following applies: you contest the accuracy of your personal data, for a period enabling us to verify the accuracy of your personal data; the processing is unlawful and you oppose the erasure of your personal data and request the restriction of their use instead; we no longer need your personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; you has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
You have the right not to be subject to a decision solely based on automated processing, including profiling, which produces legal effects concerning the data subject or similarly affects the data subject in a significant manner. Therefore, we hereby state that Xclusiverse Development does not use applications, algorithms, artificial intelligence or automatic process to make automatic decisions (without human intervention) that produces legal effects.
Xclusiverse Development does not collect any Personal Data from children under the age of 16.
So, if you are under 16, please do not submit to us any Personal Data.
We have assumed the responsibility to implement proper technical and organizational measures regarding the protection of privacy and security of your personal data. We have taken all reasonable measures to protect your Personal Data from damage, loss, misuse, unauthorized access, alteration, destruction, or disclosure, as following:
Please also select carefully what personal data do you choose to submit thinking that the internet or e-mails are not impenetrable spaces, and a technical error can cause an unhappy event anytime with respect to your personal data.
We assure you that the way we collect and process your personal data is in accordance with the provisions of the GDPR Regulation.
If you consider that your rights provided by Regulation no. 679/2016 have been violated, you can address directly to us or to our Data Protection Supervisory Authority: National Authority for the Supervision of the Processing of Personal Data (Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal) ”ANSPDC” by submitting a complaint.
Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, cod postal 010336, Bucuresti, Romania