Data Privacy Notice
Purpose of Notice
This Data Privacy Notice (“Notice”) explains how Markets Legend (“Markets Legend,” “We,” or “Us”), as data controller, processes your personal data. This includes data you provide when visiting our website, https://marketslegend.com/ (“Website”), and data we receive from third parties, to connect you with relevant professionals.
What categories of personal data will be processed?
The personal data we collect and process includes the following categories:
What is the data collection process?
We collect your personal data:
- Directly from you: when you provide identification data on our Website; and/or
- Indirectly: when we receive identification data about you from third parties (including investment education firms, partners, affiliates, marketers, and digital agencies); and/or
- Through cookies or similar technologies when you browse our Website (as detailed in our Cookies Policy).
Providing your personal data is not required, but withholding it will prevent us from connecting you with relevant professionals.
What are our reasons and legal grounds for processing data?
We use your personal data for the following:
Who will my personal data be shared with?
We may share your personal data with:
- Companies within our group;
- Our partners (such as investment education firms, data brokers, and intermediaries) for their own processing purposes, including providing you with information about their services and products you might find interesting (provided you have given us prior consent);
- Third-party service providers who assist us with storage, hosting, analytics, technical support, and diagnostics;
- Our legal counsel, to ensure we comply with legal obligations, particularly regarding accounting, auditing, and internal controls;
- A third party as part of a sale of all or part of our company and its assets, or during a business reorganization or restructuring (including dissolution or liquidation); and
- Governmental authorities, courts, external advisors, and similar third parties, when required or permitted by law.
Cross-border data transfers
Your personal data may be transferred outside the European Economic Area (EEA). Some recipients are located in countries recognized by the European Commission as having equivalent data protection standards to the EU, such as Israel. Transfers to these countries are therefore considered compliant with European data protection law, as per Article 45 of the GDPR.
However, we may also transfer data to countries without such adequacy decisions. To ensure your data remains protected in these instances, we implement robust transfer mechanisms.
This primarily involves using Standard Contractual Clauses (2021/914/EU), as outlined in Article 46(2)(c) of the GDPR, or other approved safeguards. These agreements contractually obligate recipients outside the EEA to provide a level of data protection essentially equivalent to that within the EEA.
These safeguards include implementing appropriate technical and organizational measures to prevent unauthorized access, disclosure, alteration, loss, or destruction of your data, as well as any other unlawful processing. You can request further details about these transfer mechanisms using the contact information provided below. Any onward transfers of your data, including to our affiliates outside the EEA, will also comply with all applicable data transfer regulations.
Retention
We retain collected personal data only for as long as it’s necessary to fulfill the purposes described in this Notice and as permitted by applicable data privacy laws. Once we no longer need your personal data, we will delete or anonymize it, making it impossible to identify you (unless we are required to retain it to comply with legal or regulatory obligations, or for establishing, exercising, or defending legal claims).
Your rights
Under applicable data privacy law, you have the following rights regarding your personal data:
- Right of Access: You can confirm whether we process your personal data and, if so, request access to it. This includes details such as the purposes of processing, the categories of personal data concerned, the recipients or categories of recipients to whom the data has been or will be disclosed, the envisaged period for which the data will be stored, and the existence of automated decision-making, including profiling. You can also request a copy of your data; we may charge a reasonable fee for subsequent copies to cover administrative costs.
- Right to Rectification: You can correct inaccurate or incomplete personal data. This ensures that the information we hold about you is accurate and up-to-date.
- Right to Erasure (Right to be Forgotten): You can request that we delete your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, when you withdraw your consent, or when you object to the processing and there are no overriding legitimate grounds for continuing.
- Right to Restriction of Processing: You can ask us to limit how we use your data, for example, while we verify the accuracy of the data or assess the legitimacy of an objection. In such cases, the data will be marked and only processed for specific purposes, such as storage or with your consent.
- Right to Data Portability: You can receive the personal data you provided to us in a structured, commonly used, and machine-readable format, such as a CSV file, and transfer it to another entity without our interference. This allows you to easily move your data between different service providers.
- Right to Object: You can object to our processing of your personal data based on your specific situation, particularly when processing is based on our legitimate interests. If your objection is valid, we will stop processing your data for the relevant purposes unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. This right may not apply if processing is necessary for entering into or performing a contract.
- Right to Withdraw Consent: If we process your data based on your consent, you can withdraw it at any time. This withdrawal does not affect the lawfulness of processing based on your consent before the withdrawal.
- Right Regarding Post-Mortem Data: You can provide instructions regarding the retention, erasure, and communication of your personal data after your death, allowing you to manage your digital legacy.
These rights may be subject to limitations under applicable local data privacy law.
To exercise any of these rights, please contact us as described in the “Contact Us” section below.
You also have the right to file a complaint with the French data protection authority (CNIL).
Changes of the Privacy Notice
We may update this Privacy Notice. We will notify you of any changes.