GDPR Compliance

Under the General Data Protection Regulation (GDPR), PriceONN acts as the data controller for your personal data.

We process your personal data for the following purposes:

• Service Delivery: To provide and maintain our financial analysis and trading insight services
• Account Management: To create and manage your user account, authenticate logins, and handle account-related requests
• Communication: To send service updates, security alerts, and respond to your inquiries
• Analytics: To analyze usage patterns and improve our services and user experience
• Legal Compliance: To comply with legal obligations and protect our legal rights
• Marketing: With your consent, to send promotional communications about our services

Legal Basis for Processing

• Contract performance - to fulfill our service agreement with you
• Legitimate interests - to improve and secure our services
• Consent - for marketing communications and non-essential cookies
• Legal obligation - to comply with applicable laws and regulations

Your personal data may be shared with the following categories of recipients:

• Service Providers: Cloud hosting, payment processing, and analytics providers who help us operate our services
• Legal Authorities: Government agencies or law enforcement when required by law
• Professional Advisors: Lawyers, auditors, and consultants who provide professional services to us

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data and information about how it is processed
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your personal data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

We retain your personal data only as long as necessary for the purposes outlined above:

• Account Data: Retained while your account is active and for 2 years after deletion
• Transaction Records: Retained for 7 years to comply with financial regulations
• Analytics Data: Retained for 26 months in aggregated form
• Communication Records: Retained for 2 years after the last interaction
• Marketing Preferences: Retained until you withdraw consent or request deletion

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with all service providers
• Adequacy decisions for transfers to countries with adequate protection
• Binding Corporate Rules where applicable

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Control: Role-based access control and multi-factor authentication for staff
• Monitoring: Continuous security monitoring and incident detection systems
• Audits: Regular security audits and penetration testing
• Training: Regular data protection training for all employees

For any questions about this notice or to exercise your data protection rights: