Privacy Policy

Your data,
your rights.

How TayKON collects, uses, and protects your personal data — clearly explained.

Effective as of 19 May 2026
Contents

This Privacy Policy describes how Xperdat FZ-LLC ("TayKON" or the "Data Controller"), acting as data controller, collects, uses, shares and protects the Personal Data of users of the TayKON mobile application (hereinafter, the "App").

This Privacy Policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter, the "GDPR") and, where applicable, Italian Legislative Decree 196/2003 (Privacy Code), as amended by Legislative Decree 101/2018.

We invite you to read this Privacy Policy carefully before using the App. For any questions, you may contact us at: info@xperdat.net

01

Data Controller

🏢
Xperdat FZ-LLC Office EO108, Building 08-CO Work, Dubai Media City, Dubai, Dubai, UAE
🪪
License Id 101346
📧
02

What data we collect

The App collects the following Personal Data provided directly by the user during registration and/or use of the service:

The App does not collect geolocation data, nor any data related to financial transactions or in-app purchases.

The App may also automatically collect technical data strictly necessary for the operation of the service, such as:

03

Why we use your data

a Service provision and account management

We use your Personal Data to enable you to register, log in and use the features of the App.

b Compliance with legal obligations

We may process your data to comply with legal, tax or regulatory obligations or orders from competent authorities.

c Sharing data with third parties for marketing purposes

The App allows you to decide on a granular basis which of your Personal Data may be shared with commercial partners, advertisers, retail companies, loyalty platforms, and similar business partners.

Specifically, through the App's settings, you may choose for each data item (first name, last name, email, phone number, address, gender, date of birth) whether or not to authorise its disclosure to third parties. No data will be shared without your explicit and specific consent.

d Sending promotional communications from TayKON

With your specific consent, we may send you promotional communications and newsletters about the App's services via email, push notifications or SMS.

e Service improvement and statistical analysis

We may use aggregated and anonymised data for statistical analysis aimed at improving the App.

f Protection of the Data Controller's rights

We may process your data to protect our rights in judicial or extrajudicial proceedings, as well as to prevent fraud or unlawful use of the App.

04

How we process your data

Personal Data is processed using electronic and/or digital tools, with organisational and logical methods strictly related to the purposes described above.

We adopt appropriate technical and organisational security measures to protect data against unauthorised access, loss, destruction or alteration, in accordance with Article 32 of the GDPR.

⚠️ Automated decision-making

No automated decision-making processes or profiling activities that produce legal effects or significantly affect you are carried out, unless otherwise specified and subject to your specific consent.

05

Who we share your data with

Your Personal Data may be disclosed to the following categories of recipients:

Your Personal Data will not be disseminated or made accessible to unidentified parties.

06

Where your data is stored

Your Personal Data is stored within a secure digital wallet integrated into the App and recorded as CNFT (Compressed Non-Fungible Token) on a distributed ledger. This architecture is designed to support integrity and portability and user-controlled portability. The underlying infrastructure, including any servers used to support the wallet and CNFT operations, is located within the European Union.

Should it become necessary to transfer data outside the European Economic Area — including through nodes of the distributed ledger located in third countries — we will ensure that the transfer is carried out in compliance with the safeguards provided by the GDPR (e.g. adequacy decision of the European Commission, Standard Contractual Clauses or other appropriate safeguards).

🔗 Distributed ledger note

Due to the inherent nature of distributed ledger technology, certain data recorded on-chain may be accessible to network participants; however, Personal Data is encrypted and/or hashed prior to being recorded, so that it cannot be read or attributed to you by third parties without your authorisation.

07

How long we retain your data

Your Personal Data will be retained for the time strictly necessary to fulfil the purposes for which it was collected, and in any case in accordance with the following criteria:

Data for service provision
For the entire duration of the contractual relationship and, subsequently, for the period required by applicable law for the protection of the Data Controller's rights (10 years under Article 2946 of the Italian Civil Code).
Data processed on the basis of consent
Until consent is withdrawn by the user, unless legal obligations require further retention.
Data for legal obligations
For the period required by the applicable legislation.
Data for marketing purposes
For a maximum of 24 months from the last contact or interaction, unless otherwise indicated or consent is withdrawn.

Once the retention periods have expired, the data will be deleted or irreversibly anonymised.

08

Your rights

At any time, you may exercise the following rights by writing to ceo@xperdat.net:

Art. 15 GDPR
Right of access
Obtain confirmation of whether your Personal Data is being processed and access such data.
Art. 16 GDPR
Right to rectification
Obtain the correction of inaccurate data or the completion of incomplete data.
Art. 17 GDPR
Right to erasure
Obtain the deletion of your data in the cases provided by law.
Art. 18 GDPR
Right to restriction
Obtain the restriction of processing in certain circumstances.
Art. 20 GDPR
Right to data portability
Receive your data in a structured, commonly used and machine-readable format, and transmit it to another data controller.
Art. 21 GDPR
Right to object
Object to the processing of your data based on the legitimate interest of the Data Controller.
Art. 7 GDPR
Right to withdraw consent
Withdraw consent at any time, without affecting the lawfulness of processing based on consent given prior to its withdrawal.

We will respond to your request within 1 month of receipt, which may be extended by a further 2 months in cases of particular complexity.

You also have the right to lodge a complaint with the competent supervisory authority for the protection of personal data.

09

How to manage your consents in the App

Within the App, under the "Settings" or "Set default choices" section, you may at any time:

Any modification or withdrawal of consent to third-party sharing takes effect from the moment of the change and does not affect the lawfulness of processing carried out prior to such change.

10

Minors

The App is not intended for individuals under the age of 18 (or the different age provided by applicable local legislation). We do not knowingly collect Personal Data from minors. Should we become aware that we have collected data from a minor without the consent of a parent or legal guardian, we will promptly delete such data.

11

Cookies and tracking technologies

The App may use tracking technologies (e.g. analytics SDKs) solely for technical purposes and aggregated statistical analysis. No tracking technology is used for profiling purposes without your explicit consent.

For further details, please refer to the Cookie Policy available within the App or on the TayKON website.

12

Changes to this Privacy Policy

This Privacy Policy is effective as of the date indicated at the beginning of this document. We reserve the right to amend or update it, in whole or in part, including as a result of changes in applicable legislation. In the event of material changes, you will receive a notification within the App.

We recommend that you periodically review this page to check for any updates.

13

Contact information

For any information regarding this Privacy Policy or to exercise your rights, you may contact us at:

🏢
Xperdat FZ-LLC Office EO108, Building 08-CO Work, Dubai Media City, Dubai, Dubai, UAE
🪪
License Id 101346
📧
DEF

Definitions

App
The TayKON mobile application or Chrome extension, available for iOS and Android devices.
Personal Data
Any information relating to an identified or identifiable natural person, within the meaning of Article 4 of the GDPR.
Data Subject
The natural person to whom the Personal Data relates; in the context of this Privacy Policy, the user of the App.
Data Controller
The natural or legal person that determines the purposes and means of the processing of Personal Data; in the context of this Privacy Policy, Xperdat FZ-LLC.
Data Processor
The natural or legal person that processes Personal Data on behalf of the Data Controller.
Third Parties
External parties other than the Data Controller, the Data Processor and authorised personnel, with whom Personal Data may be shared subject to the user's consent.
GDPR
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data.
Consent
Any freely given, specific, informed and unambiguous indication of the data subject's wishes by which they signify agreement to the processing of their Personal Data.