GDPR Compliance

1. Your GDPR Rights

As a data subject under GDPR, you have the following rights:

• Right of Access: Request information about what personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request a copy of your data in a structured format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

2. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: You voluntarily provide your email address when creating an account
• Contractual Necessity: Processing is necessary to provide our services and fulfill our contractual obligations
• Legitimate Interest: Processing is necessary for our legitimate interests in providing and improving our services

3. Personal Data We Process

We process the following categories of personal data:

• Contact Information: Email address (when you create an account)
• Account Data: Account preferences and settings
• Usage Data: Basic analytics data (no personally identifiable information)

We do not process special categories of personal data (sensitive data) as defined by GDPR.

4. Data Processing Purposes

We process your personal data for the following purposes:

• Account creation and management
• Service delivery and communication
• Platform functionality and security
• Legal compliance and dispute resolution

We do not use your data for automated decision-making or profiling.

5. Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA):

• United States: Our servers and service providers are located in the US
• Adequacy Decisions: We ensure appropriate safeguards are in place
• Standard Contractual Clauses: We use EU-approved data transfer mechanisms

All transfers comply with GDPR requirements for international data transfers.

6. Data Retention

We retain your personal data for:

• Account Data: Duration of your account plus 30 days
• Service Data: As long as necessary to provide services
• Legal Requirements: As required by applicable laws

We will delete your data when it is no longer necessary for the purposes for which it was collected.

7. Exercising Your Rights

To exercise your GDPR rights, contact us at:

We will respond to your request within one month and may extend this period by two additional months if necessary.

8. Data Protection Officer

While we are not required to appoint a Data Protection Officer under GDPR, you may contact us directly for any data protection inquiries at digitalfinancialmarket@gmail.com.

9. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours
• Notify affected individuals without undue delay
• Document all breaches and our response

10. Third-Party Processors

We use the following third-party processors who act on our behalf:

• Netlify: Website hosting and CDN services
• Firebase: Analytics and backend services
• Stripe: Payment processing (for traditional payments)

All processors are bound by data processing agreements and appropriate safeguards.

11. Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not addressed your concerns adequately. You can find your local authority at edpb.europa.eu.

12. Contact Information

For GDPR-related inquiries or to exercise your rights: