Article 1Data controller

The controller of your personal data on tradingx30.com (the "Website") is:

Name

Yoann Forlini, sole trader (entrepreneur individual)

Brand

TradingX30

Tax number (NIF)

309477581

Address

Av. Bombeiros Voluntários, 634, 2.º Drt., 2785-742 São Domingo de Rana, Portugal

Email

hello(at)tradingx30.com (replace "(at)" with "@")

This policy explains what data is collected, why, how long it is kept and what rights you have, in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and applicable Portuguese law.

Article 2Data collected, purposes and legal bases

We collect only the data needed for each purpose.

• Customer account: name, email address, password (stored in encrypted form), chosen language, access history to courses. Purpose: giving you access to the videos and PDFs you bought. Legal basis: performance of the contract.
• Orders and payments: identity, email, billing address, product bought, amount, payment status. Payment is handled by Stripe or PayPal: we neither receive nor store your full card number. Purposes: collecting payment, invoicing, handling refunds and subscriptions. Legal bases: performance of the contract and legal accounting and tax obligations.
• Free PDFs and newsletter: email address, first name if provided, source and date of sign-up, proof of your consent, open and click statistics. Purposes: sending you the free PDFs you requested and the newsletter. Legal basis: your consent.
• Service emails: order confirmation, link to access your account, information about a subscription. Legal basis: performance of the contract.
• Contact and support: content of your messages and our replies. Legal basis: performance of the contract or legitimate interest in answering your request.
• Visit statistics: page views, approximate origin, device type, without cookies or individual profiles (see the Cookie Policy). A tool hosted on the Website measures audience, and Google Search Console provides aggregated data on the searches that lead to the Website. Legal basis: legitimate interest in improving content.
• Security: IP address and technical logs kept by the host to protect the Website from abuse. Legal basis: legitimate interest.

The Website does not collect sensitive data and does not run targeted advertising.

Article 3Recipients and service providers

Your data is accessible to the Publisher and to providers who process it on our behalf. Each is bound to protect it and to use it only for the service provided.

• Infomaniak (Switzerland): hosting of the Website and its data.
• Stripe and PayPal: online payment and fraud prevention. They also act on their own account for their legal obligations.
• Kit: sending the newsletter and the free PDFs.
• Google (Search Console): aggregated search data, without tracking visitors on the Website.
• Competent authorities, where the law requires it.

We do not sell or rent your personal data.

Article 4Transfers outside the European Union

Switzerland, where the host is located, benefits from an adequacy decision of the European Commission. Some providers, such as Kit, are established in the United States or may process data there. These transfers rely on a mechanism provided for by the GDPR, such as the EU–US Data Privacy Framework or standard contractual clauses. You may ask us for more information at the contact address.

Article 5Retention periods

• Customer account: for the duration of the contractual relationship, then up to 3 years after last activity.
• Invoices and accounting records: for the statutory period applicable in Portugal.
• Newsletter and free PDFs: until you unsubscribe, then deletion, or archiving limited to proof of your consent.
• Support messages: up to 3 years after the request is closed.
• Technical security logs: limited period, set by the host.
• Visit statistics: aggregated data, with no individual identification.

Article 6Your rights

You have the following rights over your data: access, rectification, erasure, restriction, objection, portability, and withdrawal of your consent at any time (without affecting past processing). To exercise them, write to the contact address below. We reply within one month. We may ask you to prove your identity.

To unsubscribe from the newsletter, use the link at the bottom of each email.

Article 7Security

We apply reasonable measures to protect your data: encrypted connection (HTTPS), encrypted passwords, restricted access and regular updates. No system is completely secure. In the event of a data breach likely to harm you, we will inform you and notify the competent authority as required by law.

Article 8Minors and automated decisions

The Website is intended for adults and does not knowingly collect data about minors. No decision producing legal effects on you is taken solely by automated means.

Article 9Changes to this policy

We may change this policy, in particular if we add a tool or service. The update date appears at the top of the page. For a significant change, we will inform you by appropriate means.

Article 10Contact and complaints

For any question or to exercise your rights: hello(at)tradingx30.com (replace "(at)" with "@"), or by post at the address in Article 1.

You may also lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD, cnpd.pt), the Portuguese data protection authority, or with the authority of your country of residence.