Privacy Policy

1. Data Controller

The Forekast project is in pre-launch, operated by its promoters from Spain. For the purposes of Regulation (EU) 2016/679 (the "GDPR") and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (the "LOPDGDD"), the data controller is the Forekast promoter team.

Privacy contact details:

• Email: [email protected]
• Applicable jurisdiction: Spain

This policy will be updated with the full identifying information when the legal entity that will own the service is incorporated. The commitment to protecting your data applies from the very first moment.

2. Personal data we process

We process the following categories of personal data, depending on how you interact with the Service:

• Account and identification data: email address, username and encrypted password.
• Profile data: public name, profile picture, biography and any links you choose to make public.
• Service usage data: forekasters followed, markets viewed, positions you publish voluntarily, activity history within the Service.
• Technical data: IP address, device identifiers, browser and operating-system data, date and time of access.
• Communication data: messages you send to us via the support email or any form available on the Service.
• Newsletter data: if you subscribe, your email address and basic delivery and open metrics.

We do not process special categories of data (article 9 GDPR) nor data relating to criminal convictions or offences (article 10 GDPR).

3. Purposes and legal bases of processing

The data described above is processed for the following purposes and legal bases:

• Provision of the Service (account creation and maintenance, authentication, social and follow-related features). Legal basis: performance of the contract (art. 6.1.b GDPR).
• Handling of inquiries received via email or contact forms. Legal basis: performance of the contract or consent (arts. 6.1.b and 6.1.a GDPR).
• Marketing communications and newsletter. Legal basis: explicit consent of the data subject (art. 6.1.a GDPR), revocable at any time.
• Service improvement and web analytics (aggregated usage measurement, technical debugging, fraud prevention). Legal basis: legitimate interest of the controller (art. 6.1.f GDPR), duly balanced.
• Compliance with legal obligations (responding to requests from competent authorities). Legal basis: compliance with a legal obligation (art. 6.1.c GDPR).

4. Retention periods

Data will be retained for the following periods:

• Account data: while the account remains active. After deletion, data is erased or anonymised within a maximum of thirty (30) days, unless retention is required to meet legal obligations or to defend potential claims.
• Newsletter data: until the data subject withdraws consent through the unsubscribe link in each communication or by emailing the contact address.
• Technical data and logs: only as long as necessary for security and fraud-prevention purposes, with an indicative maximum of twelve (12) months.
• Email communication data: for the time needed to handle the inquiry and, thereafter, in accordance with the applicable statute-of-limitations periods for potential liabilities.

5. Recipients and processors

We do not transfer your data to third parties for commercial purposes. Certain technology providers access the data as data processors, under contracts that meet the requirements of article 28 GDPR. These providers offer services for:

• Hosting and content delivery (cloud hosting provider).
• Web analytics and aggregated usage measurement.
• Transactional email and newsletter delivery.
• Cloud data storage and processing.

Your data will only be shared with public authorities when there is a legal obligation to do so.

6. International transfers

Some technology providers may be established outside the European Economic Area. In those cases, transfers are made under one of the safeguards set out in Chapter V of the GDPR: European Commission adequacy decisions, standard contractual clauses or, where applicable, the explicit consent of the data subject.

7. Rights of the data subject

As the data subject, you are entitled to the following rights under the GDPR:

• Right of access to your personal data.
• Right of rectification of inaccurate or incomplete data.
• Right of erasure ("right to be forgotten").
• Right to restrict processing.
• Right to data portability in a structured, machine-readable format.
• Right to object, including processing based on legitimate interest.
• Right to withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.
• Right not to be subject to automated decisions producing legal effects.

You may exercise these rights by emailing [email protected], indicating which right you wish to exercise and, where applicable, attaching a copy of an identification document.

If you believe that the processing of your data does not comply with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es), C/ Jorge Juan, 6, 28001 Madrid.

8. Automated decisions and profiling

Forekast does not make automated decisions producing legal or similarly significant effects on the user, nor does it carry out profiling with such effects. The rankings and recommendations shown on the Service are based on public usage and performance data and are indicative only.

9. Security

We apply technical and organisational measures that are reasonable and proportionate to the state of the art to ensure the confidentiality, integrity and availability of the personal data we process. Despite this, no system is entirely invulnerable; in the event of a security incident affecting your data, we will notify you within the timeframes and conditions set out in article 34 GDPR.

10. Minors

The Service is intended exclusively for adults (18 years old in Spain). We do not knowingly process data of minors. If we learn that a minor has registered, we will delete the account and the associated data.

11. Cookies

The Site uses strictly necessary cookies for its operation and, where applicable, analytics cookies subject to user consent. Detailed information about the cookies we use, their purpose and how to manage them will be published in the corresponding Cookie Policy.

12. Modifications

Forekast may modify this privacy policy to adapt to legal, technical or operational changes. Material changes will be communicated by a clearly visible notice on the Service or by email, with reasonable advance notice.

13. Contact

For any question about this policy or the processing of your data, please email [email protected].