Privacy Policy

Last Updated [November 27, 2024]

Privacy Policy

This Privacy Policy provides a detailed explanation of the processing of personal data carried out via the Website and the App. Due to their specificities, it is expressly stated that data processing conducted through the Website is performed on behalf of HEYTRADE TECH, S.L., located at C/Serrano 88°, 28006, Madrid (hereinafter, “HEYTRADE”). Data collected through the App pertains to the investment contracting process, where HEYTRADE acts as an agent of BEKA FINANCE, SOCIEDAD DE VALORES, S.A., located at C/ Marqués de Villamagna nº 3, 28001, Madrid (hereinafter, “BEKA”). BEKA is the Data Controller, and HEYTRADE operates as the Data Processor.

 

1. Data Protection Officer (DPO)

The primary role of the Data Protection Officer (DPO) is to advise and oversee compliance with personal data protection laws and act as a liaison between the Data Controller and the Spanish Data Protection Agency.

 

2. Data Processing via the Website

2.1. Who is the Data Controller for your data collected through the Website?

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, or GDPR) and applicable Spanish data protection laws, personal data provided via forms on this Website will be processed by HEYTRADE, as the Data Controller.

2.2. Why and on what legal basis is your data processed through the Website?

  • Responding to information inquiries about HEYTRADE
    Legal basis: Explicit consent granted by ticking the acceptance box on the web form (Art. 6.1(a) GDPR).
  • Managing job applications
    Legal basis: Explicit consent granted by ticking the acceptance box on the web form (Art. 6.1(a) GDPR).
  • Sending newsletters and relevant information
    Legal basis: Explicit consent granted by ticking the acceptance box on the web form (Art. 6.1(a) GDPR).

2.3. Who will your personal data be shared with as a Website user?

  • External technology service providers for IT maintenance, legal services, and consulting services, acting strictly under HEYTRADE’s instructions.
  • Government bodies and institutions if legally required, such as courts, law enforcement, and public administrations.

2.4. How long will your data be retained as a Website user?

  • Data collected via contact or information request forms will be retained only as long as necessary to process your request.
  • Job application data will be kept for one year from the end of the selection process unless the applicant is hired, in which case it will be retained for employment management purposes.
  • Newsletter and communication data will be retained until you opt-out or withdraw consent.

 

3. Data Processing via the App

3.1. Who is the Data Controller for your data collected through the App?

HEYTRADE acts on behalf of BEKA, making BEKA the Data Controller, while HEYTRADE serves as the Data Processor.

3.2. What data is processed as an App user?

HEYTRADE, on behalf of BEKA, processes data such as personal identifiers, socioeconomic information, solvency and risk data, fraud prevention data, and biometric data (if chosen) for identity verification through a video identification system.

3.3. Why and on what legal basis is your data processed via the App?

  • Investment service management
    Legal basis: Contract execution (Art. 6.1(b) GDPR).
  • Legal compliance
    Legal basis: Compliance with laws such as anti-money laundering, MIFID, and tax regulations (Art. 6.1(c) GDPR).
  • Recording communications for service provision or regulatory purposes.
  • Sending commercial communications about similar services based on prior consent, which can be withdrawn at any time.

3.4. Who will your personal data be shared with as an App user?

Data may be shared with:

  • Public authorities (e.g., tax agencies, financial regulators, law enforcement).
  • Third-party service providers for technology or identity verification services, strictly under contractual data protection obligations.

3.5. How long will your data be retained as an App user?

  • Client data will be retained for the duration of the contractual relationship and for 10 years afterward to comply with anti-money laundering laws.
  • If the onboarding process is incomplete, data will be retained for three months unless legally required otherwise.

 

4. Biometric Data Processing

Biometric data is used exclusively for identity verification, helping to prevent fraud and ensuring account security. This process is based on explicit consent (Art. 6.1(a) GDPR).

 

5. Cookies

Cookies are used to facilitate navigation on the Website and App, analyze user interactions, and display ads based on browsing habits. Detailed information is available in the Cookie Policy.

 

6. Your Data Protection Rights

You may exercise rights to access, rectify, delete, object, restrict processing, request data portability, and opt out of automated decision-making by contacting privacy@heytrade.com.

If you believe your rights have been violated, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

 

7. User Commitments

You agree to update HEYTRADE about any changes to the data provided by contacting privacy@heytrade.com.