Last updated: March 3, 2023
As of July 16, 2020, we no longer rely on the Privacy Shield as an adequacy mechanism to address European data protection requirements regarding the transfer of personal data to the United States. However, Chainalysis continues to comply with the relevant Privacy Shield Principles for the personal data it previously received from the European Economic Area (EEA), the United Kingdom, and Switzerland in reliance on the Privacy Shield.
As described in our certification to the U.S. Department of Commerce, Chainalysis Inc. (“Chainalysis” or “we”) participates in the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks and adheres to its Principles regarding the collection, use, and disclosure of personal data from the EEA, including European Union member countries, the United Kingdom, and Switzerland. For more information on the Privacy Shield Principles, visit here.
Our privacy policy describes the categories of personal data that we may receive in the United States as well as the purposes for which we collect, use, or disclose that data. As explained further in the privacy policy, we may share personal data with third-party service providers that perform various services on our behalf. Any such third party’s access, use, or disclosure of personal data received under the Privacy Shield will comply with the Privacy Shield’s Onward Transfer Principle. If its onward transfer recipients process personal data in violation of the Privacy Shield Principles, Chainalysis will be liable for such processing under those principles unless Chainalysis can prove that it is not responsible for the events giving rise to the damage.
Chainalysis is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC). We may be required to disclose personal data that we handle under the Privacy Shield in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
If you have any questions or complaints about how we handle personal data, whether under the Privacy Shield or otherwise, please contact us at [email protected]. If we are not able to resolve your complaint to your satisfaction, you may contact the relevant European Data Protection Authority. If neither Chainalysis nor the authority is able to resolve your issue, under certain circumstances, you may pursue binding arbitration. To learn more about how to submit a complaint to the European Data Protection Authorities or invoke arbitration, visit here.