Privacy Policy and Cookies

1. Data controller and general presentation of the Policy

Data controller: cTrader Ltd, a limited liability company incorporated in the Republic of Cyprus, with a registered address at 78 Spyrou Kyprianou, Magnum House, 3rd Floor, 3076 Limassol, Cyprus and incorporation number HE 263204, owner of the website store.ctrader.com (hereinafter "cTrader" or "we").

cTrader, through its website, collects and processes certain personal data relating to its users ("you" or the "user").

Personal data are any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more specific elements such as his or her physical, economic, cultural or social identity (the "personal data").

In accordance with the General Regulation of the European Parliament and of the Council on Data Protection No. 2016/679 of 27 April 2016 (the "GDPR"), in its current version, the purpose of this privacy policy (the "Policy") is to inform you about the data we collect about you, the processing we carry out and its purpose, the periods of retention of your data, the recipients of your data as well as the rights you have.

The Policy completes the contractual conditions which govern the Website and which you accept by using the Website (as well as the other conditions which you accept for specific services or according to your status, hereafter jointly the "Terms").

2. Modification of the Policy

The Policy can be modified at any time. The current version is the one available on the Website. In the event of a significant change to the Policy, we will inform you within a reasonable period of time (by email or by banner ("push") on the Website).

cTrader may ask you at any time and by any means that can be recorded to confirm that you have read and understood the Policy.

3. Personal data collected on the Website

We collect your data mainly from you directly, but also from third parties who want you to benefit from our services, advertising partners and social networks depending on the authorisations you provide them directly.

On our Website, the mandatory nature of the data to be provided is indicated to you at the time of collection (e.g. by an asterisk). If you do not fill in the mandatory fields, we will not be able to provide you with all our services.

4. Collection of Data

You will find below a list of all the data that we may collect and process about you depending on your use of the Website and the authorisations you provide.

Information related to your identity and the creation of your account: full name; username; email address; phone number; password; date of birth or confirmation of majority; profile picture; business name and legal representative identity of professional sellers; VAT number of professional sellers; information you choose to provide in your biography.

Information about your device, account and activity: IP address; session information; cookies and trackers; consent and refusal, date and time of consent; user profile; language; preferences; browser used by your device; content and URLs you connect to; date and time of your connections.

Information about your interactions with the Website and other users: name of the user you are communicating with; messages; date and time of messages; photos shared; other data indicated in messages; reviews; rating; date and time of review; response to review; your comments and public messages on the Website; your consumption habits.

Information related to your listed items and/or your items on deposit: description of the item; photographs and pictures of the item; price of the item; photograph of the invoice or receipt.

Payment information: item price; withholding tax rate based on buyer's location; payment method information; bank account number; invoice.

Information about your sales: history of items put on sale, sold, revenue generated on the Website.

Information relating to the management of the messages you write to us, the management of disputes and inappropriate behaviour: messages (requests, complaints) sent to customer service; type of warning received by the user; date of receipt of the warning by the user; complaint from a user (content, reason, date and time).

Sensitive data: We do not collect sensitive data. Any sensitive personal data collected and/or processed by us will be done so only with your explicit consent and never without your knowledge. In any case, we invite you to communicate only strictly necessary information, in particular in the free comment zones.

5. Processing that we carry out to execute pre-contractual measures and our General Conditions

We process your personal data in order to:

allow you to create an account on the Website;
help you manage your account;
enter into contracts with us;
provide you with our services;
display your listings on the Website;
allow you to carry out transactions and payments;
notify you of any event related to your account, from its creation to its deletion by emails and notifications;
notify you when we update (add, modify, delete, etc.) our General Conditions, the Policy, our commission grid and, more generally, our services and features by emails and notifications;
inform you that there are items in the process of being deposited in your account and awaiting your validation;
notify you about the status of your transactions (status of your purchase, status of your sale, status of the payment, etc.) by emails and notifications,
notify you when cTrader and/or its partners need to carry out some additional verifications (identity, proof of residence, etc.) by emails and notifications;
notify you when we have detected a problem that is blocking or may block your use of the Website by emails and notifications;
answer your questions, requests, complaints addressed to the customer support department by emails and notifications.

6. Processing that we carry out on the basis of our legitimate interests

This category of processing is based on our legitimate interests. In order to legally base a processing operation on legitimate interest, three cumulative conditions must be met: (i) the interest pursued must be legitimate (i.e. lawful, clearly and precisely determined, real and present); (ii) the processing carried out must be necessary and; (iii) the processing must not adversely affect the rights and interests of data subjects.

For your complete information, we detail below the processing operations and the corresponding legitimate interests. We have ensured that these processing operations do not infringe your fundamental rights and freedoms.

We process your personal data in order to:

give you advice by emails and notifications on, for example, the way to write a product sheet or the price of your item, to suggest price drops after a certain time and to inform you that a user has contacted you or interacted with one of your articles because we have a legitimate interest in facilitating and increasing the sales between our users to increase user satisfaction on the Website;

remind you by email that items are being deposited to your account because we have a legitimate interest that you validate this deposit in order to enrich the catalogue of products on sale available on the Website;

present you, by emails and notifications, content, products and information that may be of interest to you based on the content you view as we have a legitimate interest in seeking the best possible user experience and improving our Website, services and features, to personalise the experience for everyone, to provide you with special offers, to facilitate and increase sales and satisfaction; if you have items for sale, you will be punctually informed of the sales operations conducted by cTrader so that you can participate in them as this is part of the services that we have a legitimate interest in offering to our sellers;

offer you the opportunity, by emails and notifications, to participate in surveys (e.g. satisfaction, opinion, poll, etc.) because we have a legitimate interest in collecting feedback from our users to improve the Website. You are free to participate or not, without any consequences. Your answers are then processed on the basis of your consent;

allow other users to have access to certain information about you (username, date of registration, country where the item is located, number of products sold, badges earned by a seller, seller's rating, etc.) as we have a legitimate interest in building trust between users and between our users and us, in enabling everyone to make environmentally responsible choices and in facilitating and increasing sales and user satisfaction on the Website;

implement detection measures to fight against fraud and to ask you to perform security checks on your account, particularly during transactions and, in the case of detected anomalies, to give rise to an automatic suspension of your transaction. A review is then carried out by our anti-fraud department, who may contact you to verify your identity. We have a legitimate interest in guaranteeing the security of the Website and of users and to fight against all forms of fraud;

access and moderate content, messages and conversations because we have a legitimate interest in improving the security and quality of this service, ensuring compliance with our Terms and Conditions, detecting illegal, unsolicited content or malware, improving the functionality of the messaging system, resolving disputes between users, processing reports and complaints sent by users, fighting against fraud and counterfeiting and protecting our users;

perform marketing statistics and analysis in order to (i) understand how you use the Website and our services and to (ii) improve our Website and our service because we have a legitimate interest in seeking the best possible user experience and improving our Website, services and features, and in personalising the experience for everyone;

train our customer care team and improve our customer care service by reviewing the conversations you have with our agents so as to ensure customer satisfaction.

7. Processing we carry out only with your consent.

We process your personal data in order to:

subscribe you to our newsletters. You can deactivate them at any time through the link provided in the newsletters or directly from your account;

send you the product alerts you have set up from your account. You can deactivate your alerts directly from your account that you have programmed directly from your account;

customise the ads that appear on third-party sites so that you are not exposed to ads that are not relevant to you. You can disable them by changing your cookie settings (see the "Cookies" section of the Policy).

analyse the answers you agree to share with us when you respond to our surveys (satisfaction, poll, feature testing, etc.);

share your strictly necessary data with our partner brands when you agree to participate in operations. In this case, you will be given information specific to the operations and partner brands;

collect your phone number for the purpose of performing specific activities such as our customer care service, which includes, for example, our call-back feature.

8. Length of time personal data are kept

We retain your personal data for the strict period of time necessary to fulfil the purpose of the processing concerned. Thus:

the data associated with your account is retained as long as you maintain your account and until your account is deleted;
the data relating to the sending of newsletters and alerts are kept as long as you do not withdraw your consent by unsubscribing;
the data collected in the context of the execution of specific contracts are kept for the duration of their execution and are then archived for the strict legal prescription periods applicable;
the data collected in the context of tax reporting obligations are kept until they are sent to the tax authorities once a year and then archived for the strict limitation periods applicable;
the data related to the management of complaints, disputes and litigation are kept for the duration necessary to resolve the dispute and for the duration of any applicable statute of limitations;
the answers to surveys are kept for the time necessary for the survey and are then anonymised if they were not already;
the data related to online applications are kept for two (2) years and then deleted. In some cases, we may retain certain personal data about you even if you delete your account, by legal obligation, or if we have an overriding legitimate interest in retaining some of your data (e.g. there is an issue with the account, the presence of an unresolved claim or dispute, the defence and exercise of our rights, etc.). In this case, the data necessary for the resolution of the case will be kept for as long as the dispute lasts within the limit of the applicable rules on prescription.

9. Recipients to whom your data are transmitted

cTrader is committed to implementing and maintaining appropriate technical and organisational measures for the processing and security of personal data in accordance with Articles 32 to 34 of the GDPR in order to protect your personal data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. We pass on these obligations to our service providers and subcontractors.

10. Cookies

cTrader uses internet cookies to facilitate navigation throughout the website and to enhance the visitor's experience. Your internet browser is likely to accept these cookies by default. However, you can refer to your browser's help guide if you would like to reject or to delete them from your system.

We may use both "analytic" cookies and "social" cookies on the website.

Cookies used by cTrader do not retrieve any personal information or any information from the visitor's computer.

11. Contact

If you have any further questions about how cTrader collects and processes your personal data, please contact us via our Data Protection Officer at dpo@ctrader.com