Privacy policy

Privacy Policy of the Internet Portal tradingguys.eu

Controller:

Company Name: Chalan z burzy L.L.C-FZ

Registered Address: Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, Dubai, UAE

E-mail: chalanzburzy@gmail.com

Web: www.tradingguys.eu

(hereinafter referred to as the “Controller”)

The Controller, as the provider of services via the internet portal available at www.tradingguys.eu, providing services specified in the “General Terms and Conditions” (hereinafter referred to as the “Online Store”), processes personal data of customers and individuals who have granted consent to the processing of personal data (hereinafter referred to as the “Data Subject”).

Since the Online Store offers services to individuals within the European Union, the processing is conducted in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as the “GDPR“) and applicable local regulations.

Consent to Personal Data Processing and Scope of Processing

1. By submitting an order via the Controller’s Online Store, the Data Subject confirms that the provided personal data (name, surname, date of birth, phone number, e-mail address, residential address, billing address) are accurate and true. Processing of this data is necessary for the performance of the contract concluded between the Controller and the Data Subject.
2. By checking the box “I want to receive news” or “Subscribe to newsletter”, the Data Subject agrees to the processing of personal data (e-mail address) for marketing purposes.
3. Upon registration of a user account, by checking the box “I agree to the processing of personal data entered during registration“, the Data Subject agrees to the processing of data provided in the form (name, surname, date of birth, username, e-mail, address, phone number).
4. By granting consent, the Data Subject confirms they are at least 18 years old. Persons under 18 are not permitted to register a user account in the Controller’s Online Store.

Legal Basis for Processing

5. The legal basis for processing personal data by the Controller includes:

• Contract Performance: Processing is necessary for the performance of a contract to which the Data Subject is party (Article 6(1)(b) GDPR);
• Consent: The Data Subject has given consent to the processing for specific purposes (Article 6(1)(a) GDPR);
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which the Controller is subject (e.g., tax and accounting laws applicable to the Controller);
• Legitimate Interest: Processing is necessary for the purposes of the legitimate interests pursued by the Controller (Article 6(1)(f) GDPR), such as the protection of the Controller’s rights and IT security.

Method and Purpose of Processing

6. The processing involves collecting, recording, organizing, structuring, storing, adapting, retrieving, and using data necessary for billing purposes and for fulfilling the rights and obligations arising from the contract (e.g., providing access to the service, handling complaints). For the purpose of executing electronic payments, payment card details may be processed by the payment gateway provider (Stripe). The Data Subject is fully responsible for the accuracy of the provided data. Data processed for contract performance may also be used to send service-related notifications.
7. Based on the consent mentioned in point 2, the Controller may process data exclusively for sending newsletters regarding the Online Store (Direct Marketing).
8. Based on the consent mentioned in point 3, the Controller processes data to maintain the registered user account and track order history.
9. The Data Subject has the right to withdraw consent at any time in writing or via e-mail. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
10. The Controller commits not to use or share personal data beyond what is necessary for the operation of the Online Store and the provision of Services.

Automated Processing and Profiling

11. The Controller does not engage in automated decision-making that would have legal effects on the Data Subject. However, basic segmentation may be used for marketing purposes (e.g., sending relevant course offers).

Pseudonymization

12. Where possible and appropriate, the Controller uses pseudonymization to enhance data security.

Data Transfer to Third Countries

13. The Data Subject acknowledges that the Controller is established in the United Arab Emirates (Dubai). Therefore, personal data is processed in a “third country” from the perspective of the EU. The Controller ensures that appropriate safeguards are in place to protect the privacy and fundamental rights of Data Subjects in accordance with global best practices and applicable laws.

Recipients and Third Parties

14. Personal data may be processed by third parties (Processors) who provide services to the Controller, such as accounting systems, invoicing software, payment gateway providers (Stripe), cloud storage providers, and marketing agencies.
15. The Controller undertakes to take all necessary steps to ensure the security of the Data Subject’s personal data.
16. In accordance with Article 13 of the GDPR, the Controller provides the following information:

• Identity of the Controller (see header);
• Purpose and legal basis (see points 6-11);
• Data retention period: Data is stored in accordance with applicable legal regulations (e.g., for tax purposes), otherwise for 5 years from the last order or consent;
• Rights of the Data Subject: Access, rectification, erasure, restriction, objection, and data portability;
• Right to lodge a complaint: If the Data Subject suspects that their data is being processed unlawfully, they have the right to lodge a complaint with a supervisory authority (e.g., the Data Protection Authority in their country of residence).

Rights of the Data Subject

17. Under GDPR (Articles 15-21), the Data Subject has the following rights:

• Right of Access: To obtain confirmation as to whether or not personal data concerning them are being processed and access to that data.
• Right to Rectification: To obtain the rectification of inaccurate personal data without undue delay.
• Right to Erasure (“Right to be Forgotten”): To obtain the erasure of personal data if:
  • the data are no longer necessary for the purposes for which they were collected;
  • the Data Subject withdraws consent and there is no other legal ground for processing;
  • the Data Subject objects to the processing and there are no overriding legitimate grounds;
  • the personal data have been unlawfully processed.
• Right to Restriction of Processing: To limit how the data is used (e.g., during verification of data accuracy).
• Notification Obligation: The Controller communicates any rectification or erasure of personal data to each recipient to whom the personal data have been disclosed.
• Right to Data Portability: To receive the personal data in a structured, commonly used, and machine-readable format and transmit those data to another controller.
• Right to Object: To object, on grounds relating to their particular situation, to processing based on legitimate interest or public task. The Data Subject also has the absolute right to object to processing for direct marketing purposes.
• Right regarding Automated Decision-Making: Not to be subject to a decision based solely on automated processing.
• Data Breach Notification: In the event of a personal data breach likely to result in a high risk to the rights and freedoms of natural persons, the Controller shall communicate the breach to the Data Subject without undue delay.

Cookies Policy

20. Cookies are small text files stored on the Data Subject’s terminal device. The Online Store uses cookies to remember preferences and settings, making the user experience more efficient.
21. Cookies do not contain malicious code, malware, or spyware.
22. Session Cookies: Temporary files deleted automatically after closing the browser.
23. Persistent Cookies: Stored on the device to:
    • Remember login details and search queries;
    • Analyze website traffic (Google Analytics – data retained for approx. 1 year);
    • Store user preferences (e.g., language, video settings via YouTube).
24. The Online Store uses: Essential cookies, Performance cookies, Functional cookies, and Marketing/Tracking cookies.
25. The Data Subject can refuse or manage cookies via their browser settings. However, refusing essential cookies may limit the functionality of the Online Store.
26. By using the website, the Data Subject consents to the use of cookies unless they have disabled them in their browser.

These Privacy Policy terms are valid and effective from 01.07.2024.

Chalan z burzy L.L.C-FZ