PRIVACY POLICY

As a data controller, the operators of the Forex Coffee application recognizes the content of this legal notice as binding on itself. It undertakes that all data processing related to its activities comply with the requirements set forth in these Rules and in the applicable national legislation and in the legal acts of the European Union. We reserve the right to change this information at any time. Any changes will be available on the same interface. The application's operator is committed to protecting their user data, and it attaches great importance to respecting their right to self-determination. We manages personal information confidentially and takes all security, technical, and organizational measures that guarantee the security of your data.

What data does the application handle and for what purpose?

Data management is based on voluntary consent or legal authorization. In the case of data processing based on voluntary contributions, the party concerned may withdraw the consent at any time. Below is Article 6 (1) of Regulation (EU) 2016/679 of the European Parliament and of the Council. The full text of the decree can be found on this link.

The processing of personal data is only lawful if and only if one of the following is true:

a) the person has given his consent to the processing of his or her personal data for one or more specific purposes;

b) data processing is necessary for the performance of a contract in which the data subject is required by one of the parties or is required to take action at the request of the data subject prior to the conclusion of the contract;

c) data management is necessary to fulfill the legal obligation of the controller;

d) data management is necessary for the protection of the vital interests of the person concerned or another natural person;

e) data processing is necessary for the performance of a task carried out in the public interest or in the exercise of a public authority delegated to the controller;

f) data processing is necessary for the legitimate interests of the data controller or a third party, unless such interests have priority over the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, especially if the child concerned;

Point (f) of the first subparagraph shall not apply to the processing of data by public authorities in the performance of their duties.

- DIAGNOSTIC DATA

Legal basis for data management: (EU) 2016/679 Article 6 (1) (f): Enforcement of the legitimate interests of the controller

Independent measurement and auditing of the analytics of the application is supported by Google Analytics servers as an external service provider. Google Analytics logs user device to operating system, device type, IP address, screen name, and usage time relevant information. You can find more information about the data management on http://www.google.com/intl/en/policies/. The data recorded in this way is stored on Google Analytics servers, which can only be accessed by the application operator who does not provide third party access. Purpose of data management: This data is used solely for the purpose of correcting errors and correcting the application's services. Deadline for deleting data: 60 days from the last user application opening.

- TECHNICAL DATA REQUIRED FOR OPERATION

Legal basis for data management: Article 6 (1) (b) and (f) of Regulation (EU) 2016/679

There is no need for registration to use the application, so unique identifiers are created during the first startup to ensure operation. The identifiers are sent to the private server of the application where they are stored. The purpose of data management: These are used for the basic operation of the application, automatic updating, display of information and notifications. These identifiers cannot be linked to specific individuals, and by their nature, they automatically lose their functionality by deleting the application.

- TECHNICAL DATA RELATING TO ADVERTISEMENTS

Legal basis for data management: (EU) 2016/679 Article 6 (1) (f): Enforcement of the legitimate interests of the controller

The app displays ads to users through Facebook Audience Network and IronSource. In order to meet the technological conditions for ad serving, the app is similar to cookies. records mobile data. These are technological data that are used to avoid advertising abuse. Their storage is done in order to enforce the legitimate interests of our own or advertising partners. With their help, malicious attackers can prevent material damage by unauthorized methods or generate material gain.

- PERSONAL DATA RELATING TO CUSTOMIZED ADVERTISEMENTS

Legal basis for data management: (EU) 2016/679 Article 6 (1) (a): Voluntary consent of the data subject

The app displays ads to users through Facebook Audience Network and IronSource. If you consent, these ads will appear in a customized manner to suit your interests. In this case, the Facebook Audience Network and IronSource service stores personal information about you that allows you to display your ads in a customized way.

Data security

Data is stored and managed in accordance with the most up-to-date security standards. In designing application processes, we tried to reduce the possibility of human error as much as possible.

Share data

Because the application also uses third-party services, some of the data may be transferred to a third-party processor or data controller when using the service. In selecting our service providers, we have endeavored to guarantee the confidentiality and security of the data they process, and that these providers comply with the requirements set forth in applicable national legislation and European Union legislation. The following list contains data processing parties and the range of data transmitted.

- DigitalOcean
The private servers of our application are virtual private servers provided by DigitalOcean. The servers involved in data management run on hardware in their data centers in London. You can find DigitalOcean's data management guide here.
- Google Play Services
You can find the Google Play Service Data Management guide here..
- Google Analytics for Firebase
Anonymous analytical data collected in the application is transmitted. You can find the Google Data Management guide here..
- Firebase Crashlytics
Anonymous analytical data collected in the application is transmitted. You can find the Firebase Crashlytics Data Management guide here..
- Facebook Audience Network
We use Facebook Audience Network services to display ads within the app.. You can find the Facebook Audience Network Data Management guide here..
- IronSource
We use IronSource services to display ads within the app. You can find the IronSource Data Management guide here.

Information about your rights

We would like to inform you that in cases where the legal basis for data processing is Article 6 (1) (a) of Regulation (EU) 2016/679, ie the voluntary contribution of the data subject, the national legislation in force and the legal acts of the European Union. have the following rights:

Right to information

All information referred to in Articles 13 and 14 of Regulation (EU) 2016/679 entitled to act as data subject or in connection with data processing, as well as in Articles 15-22. and any information pursuant to Article 34 and Article 34 shall be provided in a concise, concise, easily understandable and accessible form. The full text of the Regulation can be found here.

Right of access

As a data subject, he or she is entitled to access personal data or other information arising from the data management: purposes of data management; the categories of personal data involved; the categories of recipients or recipients with whom or with whom the personal data were communicated, including in particular third-country recipients or international organizations; planned duration of storage of personal data; the right of rectification, erasure or data management and the right to object; the right to lodge a complaint with the supervisory authority; information about data sources; the fact that automated decision-making, including profiling, as well as the logic used and understandable information about the significance of such data management and the expected consequences for the data subject. The controller shall provide the information within no more than 25 days from the submission of the request.

Right of rectification

You are entitled to request the correction of inaccurate data during the data management and to supplement the incomplete data.

Right to delete

You may also, as a party concerned, have the following reasons to delete your personal data without undue delay on your request:

- personal data are no longer needed for the purpose for which they were collected or otherwise processed;
- you withdraw your consent as the basis for the processing and there is no other legal basis for the processing;
- the data subject objects to the data processing and there is no legal reason for data processing as a priority;
- personal data have been unlawfully treated;
- personal data must be erased in order to fulfill a legal obligation under EU or Member State law applicable to the controller;
- the collection of personal data related to the provision of information society services.

Deletion of data cannot be initiated if data processing is necessary: ​​freedom of expression and exercise of the right to information; the fulfillment of an obligation under EU or Member State law which governs the processing of personal data, or for the performance of a task carried out in the public interest or in the exercise of a public authority conferred on the controller; for public health or archiving, scientific and historical research purposes or for statistical purposes, in the public interest; or legal claims.

Right to restrict data management

We restrict your data management to your request IF:

- the person concerned disputes the accuracy of the personal data, in which case the restriction applies to the period of time that allows the accuracy of the personal data to be verified;
- data processing is unlawful and the person is against the deletion of the data and instead requests a restriction on their use;
- the controller no longer needs personal data for data management purposes, but the data subject requests them for the submission, validation or protection of legal claims;
- the person objected to data management; in this case, the limitation shall apply for the period until it is established whether the legitimate reasons of the controller prevail over the legitimate reasons of the data subject.

If data management is restricted, personal data may be handled only with the consent of the data subject or with the submission, validation or protection of legal claims or the protection of the rights of another natural or legal person, or for the important public interest of the Union or a Member State.

Right to data storage

You also have the right to receive personal information about you that is made available to you by the Data Controller in a structured, widely-used, machine-readable format and to pass this information on to another Data Controller.

Right of protest

You also have the right to object at any time, for reasons related to your own situation, to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority delegated to the controller or for the legitimate interests of the controller or a third party, including profiling based on those provisions too. In the event of a protest, the controller shall not process the personal data unless it is justified by compelling legitimate reasons that take precedence over the interests, rights and freedoms of the data subject or which are related to the submission, validation or defense of legal claims.

Right of Withdrawal

You are also entitled to withdraw your consent at any time.

Right to go to court

As a person concerned, if you feel that your rights have been violated, you can go to court against the data controller. The court acts out of the case.

Right to complain

You can live with a complaint with the National Authority for Data Protection and Freedom of Information:
National Authority for Data Protection and Freedom of Information
Address: Norman Rd, Greenwich SE10 9EH, UK.