Privacy Notice v.1.00 (effective as of 01.01.2021)
This notice was prepared in the English language and the English language version shall prevail in the event of any conflict, discrepancy or ambiguity between translations.
- Summary of how we use your data
- What does this notice cover?
- What personal data do we process?
- What personal data do we receive from third parties?
- How do we use this personal data, and what is the legal basis for this use?
- Relying on our legitimate interests
- Withdrawing consent or otherwise objecting to direct marketing
- Who will we share this data with, and where?
- Your rights
- How long does TradingDesk.Cloud retain data?
- Cookies and related technologies
- External links
- Changes to this Notice
- Getting in touch with us
We respect your privacy and are committed to protecting it as described in this notice.
We use your personal data to provide, improve and administer the TradingDesk.Cloud platform, to enter into and perform the terms of service with our users, and to comply with legal and regulatory requirements.
Data is shared with our vendors, and when we have a good faith belief that doing so is necessary to comply with legal and regulatory enquiries or requirements.
Our privacy notice sets out more details of this processing, including details of your data protection rights, and your right to object to certain processing.
This notice describes how TradingDesk.Cloud UG (haftungsbeschränkt) and its affiliates (referred to as “TradingDesk.Cloud”, "TDC", “we” or “us” in this notice) will collect, make use of and share (i.e. “process”) your personal data in connection with the TradingDesk.Cloud website, apps and services (including API services). For the purposes of this notice, the term “affiliate” shall mean any entity, individual, firm, or corporation, directly or indirectly, through one or more intermediaries, controlling, controlled by, or under common control with TradingDesk.Cloud UG (haftungsbeschränkt)
This notice also describes data protection rights you may have (depending on applicable law), such as a right to object to some of the processing which the TradingDesk.Cloud carries out. More information about your rights, and how to exercise them, is set out in the “Your rights” section.
We process personal data about you when you interact with us, our websites, our apps or our services (including API services). This includes:
- your name, email address, username, api-token, password and other login and/or security details (e.g. app passcode, two-factor authentication token seed record, public PGP key), and login records;
- your payment details, including
- your account and portfolio details, such as live and historical orders, trades positions and balances;
- your site and account preferences, including site notification, sounds and confirmation dialogs;
- Browser location and geolocation of the IP address you connect from;
- your marketing and other communication preferences, and a record of any consents you have given us;
- information related to the browser or device you use to access our website or apps, as well as data that tells us which features of the website or app are popular, or suffer from issues we need to fix;
- customer service notes and other records.
We do not collect fingerprints, facial recognition data, other biometrics, photos, videos of yourself.
We receive personal data from partners when they refer you to us (for example, we receive data about the service you used, and that referred you). We will receive confirmation from Yubico Cloud that you have successfully authenticated using a Yubikey registered with that service. Third parties may monitor the Web on our behalf, for example looking for stolen usernames and passwords. We receive records of trades and transactions from other exchanges and trading platforms to help us monitor exchange rates and market performance. Finally, some authorities or other persons seeking access to information about users may provide information about the circumstances of their request, and about the individuals of interest.
We process this personal data for the following purposes:
To fulfil (or take steps linked to) a service agreement with you. This includes:
- creating your account;
- allowing you to make trades, maintaining your account and trading history, and closing, in accordance with our published policies and terms of service;
- communicating with you; and
- providing customer services;
Where you give us consent (so far as that consent is required):
- we will send you direct marketing in relation to our relevant products and services, or other products and services provided by us and carefully selected partners;
- we place cookies, monitor email engagement, and use other similar technologies;
- on other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time.
For purposes which are required by law, in particular:
- in response to requests by relevant courts and public authorities, such as those conducting an investigation.
To the extent required by law, we aim to carry out balancing tests when significant data processing activities are justified on the basis of our “legitimate interests”, as described above.
Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. In some cases, we are able to send or display marketing without your consent. You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message, changing your account settings, or by contacting us using the details set out below.
Personal data may be shared with third party participants in our affiliate programme (or any other successor or parallel programme of a similar nature) who referred you to our site (so they can track successful referrals), and partners for promotions or service integrations. Information on historical trades may also be shared with other trading platforms and exchanges. Personal data may be shared with courts or public authorities if required as described above, mandated by law or regulation, or required for the legal protection of our or third party legitimate interests, in compliance with applicable laws and regulations, and relevant / competent public authorities’ requests.
Personal data will also be accessed by employees or contractors, or shared with third party service providers, who will process it on our behalf for the purposes identified above. In particular, we use third party website and database hosting (primarily Amazon Web Services); web and app analytics (including Segment.com, Sentry.io and Google Analytics); ID verification (primarily Jumio NetVerify and Onfido); and customer services and support (primarily Freshdesk, and providers of local-language customer support assistants).
In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s advisers, and to the new owners of the business.
Further details on selected third parties can be found here.
Depending on applicable law (in particular, whether the laws of the UK or EEA countries apply), you may have the right to ask us for a copy of personal data about you; to correct or delete that personal data; restrict the processing of that personal data; and to obtain a copy of personal data about you that you provided to us (in connection with our agreement with you, or with your consent), in a structured, machine readable format, and to ask us to port this data to (i.e. share that data with) another organisation.
In addition, applicable law may provide the right to object to the processing of personal data about you, in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).
You have the right to appeal the result of significant fully automated decisions. This should be done by emailing us within 3 working days from the date of the decision, which we will then review.
If these rights apply, they may however be limited, for example if fulfilling your request would reveal personal data about another person, would infringe the rights of another person or legal entity (including our rights), or if you ask us to delete or change data which we are required by law to keep (or have other compelling legitimate interests in keeping). We will inform you of relevant exemptions we rely upon when responding to any request you make.
To exercise any of these rights, or to obtain other information, such as a copy of a legitimate interests balancing test, you can get in touch using the details set out below. If you have unresolved concerns, you typically have the right to complain to regulators, depending on applicable law. For example, in the EEA, your complaint can likely be taken to data protection authorities where you live, work or where you believe a breach may have occurred.
Where we process personal data in connection with performing an agreement with you, we keep the data for 6 years from your last interaction with us.
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of that request indefinitely, so that we can continue to respect your request in future.
Where we process personal data for site security purposes, we retain it for 3 years.
Longer retention periods may apply, such as where ongoing access to records continues to be important to our defence of legal claims or where we are required by law or regulation to retain information for specific periods.
Strictly Necessary Cookies
These cookies are essential in order to enable you to move around the website and use its features.
Without these cookies, things you have asked for such as remembering your login details or trade orders cannot be provided.
We also use these cookies to balance traffic over multiple servers, so we can keep it responsive and capable of dealing with high traffic from all users.
These cookies collect information on how people use our website. For example, we use these to help us understand how customers arrive at our site, browse or use our site and highlight areas where we can improve areas such as navigation, trading, customer support and marketing.
These cookies remember choices you make such as the country you visit from, and language and search parameters. These can then be used to provide you with an experience more appropriate to your selections.
Targeting cookies or advertising cookies
These cookies collect information about your browsing habits in order to make advertising more relevant to you and your interests. They are also used to limit the number of times you see an advert as well as help measure the effectiveness of an advertising campaign. These cookies are usually placed by third party advertising networks. They remember the websites you visit, and that information is shared with other parties such as advertisers.
Social Media Cookies
These cookies allow you to share what you’ve been doing on the website on social media such as Facebook and Twitter. Please refer to their respective privacy notices to learn how their cookies work and can be controlled.
Web beacons, tags
Some of our web pages, emails or parts of our apps may contain electronic images, or computer code, that allow us to learn more about how our website and apps are used (just like performance cookies, mentioned above). These “web beacons” and “tags” collect only limited information. In our app, we currently use pieces of code provided by Segment.com and Sentry.io, which also help analyse the data. We may also carry web beacons placed by third party advertisers.
Controlling these technologies
If you want to delete any cookies, please check your browser or device settings (and help pages) for instructions on how to delete them. Your browser or device may also offer tracking controls for things other than cookies, such as beacons and tags.
Please note that by deleting our cookies or disabling future cookies, in particular the “strictly necessary” cookies described above, you may not be able to access certain areas or features of our site.
Although our website and apps only look to include quality, safe and relevant external links, users should always adopt a policy of caution before clicking any links to non-TDC Group websites or apps. We cannot control, guarantee or verify their contents. They will have their own policies and practices, for example with regard to privacy and personal data, and you should acquaint yourselves with those before further engaging with those third party websites or apps.
We may revise this Privacy Notice from time to time. If we make a change to this notice that we consider material, we will take steps to notify users by a notice on the website and/or app. Your continued use of the TradingDesk.Cloud website, apps and services (including API services) will be subject to the updated Privacy Notice.
If you have any questions or concerns about how we process your data, including if you would like to exercise any rights (e.g. to opt out of direct marketing), you can get in touch with our contact point for privacy queries at [email protected].