Colmex Pro Limited

PRIVACY AND COOKIE POLICY



Applicable as of 15 September 2021




Colmex Pro Limited (or "we", "us", "Colmex Pro", “the Company”) is Cyprus Firm which provides investment services to its clients. The Company must possess personal data (including sensitive personal data) so that it can provide these services. The Company is proud in maintaining strong and professional relationships with our clients and other stakeholders (“the data subject” or “you”). Hence, we put emphasis in respecting and supporting each person’s right to privacy.


This Privacy and Cookie Policy ("the Policy") applies to personally identifiable information that we collect and process through our website, www.colmexpro.com, as well as any other related sites and applications (if applicable). This Policy does not apply to websites operated by other organizations and/or other third parties. The Policy also applies to personal information that we collect and process when you use or interact with our services through any correspondence made with us by e-mail, phone or otherwise. The Policy aims to inform you about the type of information we gather, who we share it with, what we use it for, and how we keep it secured.


When using any of our Services, you consent to the collection, transfer, storage, disclosure, and use of your personal information subject to this Privacy Policy.


The protection of privacy and the safeguarding of our Clients’ personal and financial information is

of great importance to us.


Data protection law says that the personal information we hold about you must be:


The Company is responsible for the protection of the privacy and the safeguarding of clients’ personal and financial information. By opening an account or establishing a business relationship with us, you give your consent to such collection, processing, storage and use of personal information by the Company.


The Company respects the privacy of its clients, understands its importance and maintains personal data, trusted and confidential information provided by its clients as one of its highest priorities. The Company is committed to maintain the confidentiality, integrity and security of personal information in relation to current and prospective clients by respecting their right to keep their personal information confidential. In order to prevent unauthorized access and/or disclosure, the Company has in place suitable physical, electronic and/or managerial procedures and controls to ensure and/or safeguard and/or secure the security and confidentiality of the information provided by its clients and protect against unauthorized access and/or use of clients’ records and/or information.


Please view the following Privacy Statement which clearly explains how we collect, process, store

and protect our Clients’ information.


References in this document to “Personal Data” means any information relating to an identifiable

person who can be directly or indirectly identified in particular by reference to an identifier.


An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier




or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.


As a rule, the Company refrains from any type of disclosure of personal and/or non-public information when such disclosure is not directly linked to service its clients. The Company collects the necessary information required to open a client’s account, establish a business relationship and to provide clients with the services they require.


The purpose of this Policy is to explain to you:



When collecting, processing and storing Personal Data provided by you, we are subject to the provisions of the GDPR and the relevant Personal Data protection Laws and Regulations of the EU and the Republic of Cyprus.


DEFINITIONS

‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;


‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;


‘filing system’ means any structured set of personal data which are accessible according to specific criteria, whether centralized, decentralized or dispersed on a functional or geographical basis;


‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;


‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;


‘recipient’ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. 2However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;





‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data;


‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;


‘personal data breach’ means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.


What personal information does Colmex Pro process and why?

When you apply for or maintain a trading account with Colmex Pro, we collect personal information about you for business purposes, such as evaluating your financial needs, processing your requests and transactions, informing you about products and services that may be of interest to you and providing customer service.


It also includes information such as follow:



Retention of personal information

We are legally obligated to keep your Personal Data provided to us, including but not limited to your name, address, email, phone number, your trading and transaction history, deposits and withdrawals history, for at least 5 (five) years after our relationship with you has terminated. We will hold your personal data for the longest of the following periods: (a) the period required for the performance of the relevant activity or services, (b) any retention period required by law, (c) the end of the period of any litigation and/or investigation by a public authority which arises in respect of the relevant activity and/or the services, or (d) where the company has justifiable legitimate interest.


Kindly note that data protection terms will be included in the Terms and Conditions for the establishment of a business relationship between us. Any personal data collected will be retained for carrying out the establishment of the business relationship between us.


The period for which we will retain personal information will vary depending on the purposes that it was collected for, as well as the requirements of any applicable law or regulation. The retention of your personal information will be subject to periodic review. We may keep an anonymized form of your personal information, which will no longer refer to you without time limits, to the extent that we have a legitimate and lawful interest in doing so.


If you have a trading account with Colmex Pro, we will store your personal information for as long as you maintain that account, and after you cease holding an account, for as long as we are required to by applicable laws and regulations. If we hold any personal information in the form of a recorded communication, by telephone, electronic, in person or otherwise, this information will be held in line with local regulatory requirements which will either be five (5) or ten (10) years after our relationship with you has terminated.


Restriction & Limitation of Liability

The Company and/or its employees shall not be held liable for any loss(es) and/or damage(s) including without limitation, indirect and/or consequential loss (es) and/or damage (s) arising from loss (es) of data and/or profit(s) arising out of and/or in connection with, the use of this website. The material and/or information contained on this website is solely for information purposes only. Material and/or information on this website, including, but not limited to, images, texts, policies, forms, agreements is owned and/or otherwise provided by the Company; should not be reproduced, and/or distributed and/or published in whole and/or in part for any purpose without the explicit written consent and/or permission of the Company. The material and/or information within this website should not be interpreted and/or comprehended as an offer and/or a solicitation of an offer, to investment services/activities and/or any financial instruments.


The Company takes no responsibility for, and should not be liable for, the website being temporarily unavailable due to technical issues beyond the Company’s control nor shall accept any liability for loss(es) and/or damage(s) as a result of reliance on the information contained within this website. Further, the Company is not liable for the privacy policies or the content of sites to which links are available and has no control of the use or protection of information provided by the clients or collected by those sites. Whenever a client elects to link to a co-branded web site or to a linked web site, the client may be asked to provide registration or other personal information. Please note that such information is recorded by a third party and will be governed by the privacy policy of that third party.


This website may be accessed worldwide, however the financial products mentioned on the website may not be allowed by law to all investors in all countries. Through this website you may be able to link to other websites which are not under the control of the Company. Such inclusion does not in any way imply any recommendation and/or endorsement from the Company in relation to the views




expressed therein; they are only offered as a convenience to all visitors. The access to this website may be restricted to certain jurisdictions due to domestic legal restrictions. For such visitors and were users of this website subject to such legal restrictions are not allowed to access it, the Company bears no responsibility as well as to visitors or users or towards any individual who may access this website illegally.


This website is not intended to constitute legal, investment, consulting, or other professional advice or services. The Client, before making any decision or taking any action that might affect his/her personal situation and/or business, should consult a qualified professional advisor.


Minors

Our services are not available for users under the age of 18 (a “minor”). We do not knowingly collect personal information from or about minors. If you are a minor, you should not download or attempt to use any of our services nor provide any personal information to us.

If we become aware that a minor has shared any information with us, we will delete such information. If you have any reason to believe that a minor has shared any information with us, please contact us at [email protected] .


Personal Data transfers

Subject to certain conditions, we may transfer your personal information to a third party in countries outside the EEA for further processing, in accordance with the purposes set out in this Privacy Policy. In these circumstances we will, as required by applicable law, ensure that your privacy rights are adequately protected by appropriate technical, organization, contractual or other lawful means.


REGULATORY DISCLOSURE

We reserve the right to disclose Personal Data to third parties where required by law, regulatory, law enforcement or other government authority of a competent jurisdiction in order to protect our rights and / or comply with such legal proceedings. Such disclosure shall occur on a ‘need-to-know’ basis, unless otherwise instructed by a regulatory or other government authority. Under such circumstances, we shall expressly inform the third part regarding the confidential nature of the information.


We, as a regulated firm, is required to comply with certain obligations under the Intergovernmental Agreement with the United States and has taken all reasonable steps to be considered in compliance with the Foreign Account Tax Compliance Act (FATCA) and the Common Reporting Standard (CRS), approved by the Organisation for Economic Co-operation and Development (OECD) for the exchange of information for tax purposes.


Changes to this Privacy Policy

The Policy will be reviewed from time to time, in order to take account of changes to our operations or practices and to make sure it remains appropriate to any changes in law, technology and/or the business environment. Any personal information held, will be governed by our most current Policy. The updated Privacy Policy will be posted in the Company’s operated website, www.colmexpro.com and the client accepts posting the update as official notice to the client.


HOW TO CONTACT US

Questions, comments, complaints and requests regarding your data or this privacy policy are welcomed and should be addressed to us at [email protected].


When using any of our services you consent to the collection, transfer, storage, disclosure, and use of your personal information subject to this Privacy Policy.