CETIN Market / Information

Privacy

What data is used, why, with whom, how long and how to exercise your rights.

Updated
Without account

Public information remains accessible without connection.

Hearing action

Google Analytics only after you agree.

Your rights

contact@cetinmarket.com

Processing Officer and Scope

The controller is the publisher identified in the legal information. CETIN Market is available at contact@cetinmarket.com for any questions relating to personal data. This page covers the site, space counts and associated tracking functions; mobile application-specific treatments must be checked separately before publication.

The RGPDArticles 12 to 14 require accessible information on the purposes, legal bases, recipients, durations, transfers and rights. A public policy must reflect actual treatment, not a list of theoretical possibilities.

Data and purposes

The mere viewing of public pages does not require an account. When connecting, the service processes account ID, e-mail address, the name displayed and the elements necessary for the security of the session. Tracking lists, preferences, alerts, notifications and sending settings are linked to the account when enabled.

Technical logs may contain the IP address, time and query information necessary for operation, diagnosis and control of abuse. A message in support contains the sender's address and the content voluntarily sent. The amounts entered in the calculator are not automatically saved in the account.

Legal basis and optional nature

The processing of the data necessary for the creation of the account, preferences and alerts is based in principle on the provision of the requested service (Article 6 paragraph 1 , point b of RGPD ). The security of the service and the response to requests are of legitimate interest (point (f), subject to balance. Hearing action Google Analytics based on your consent (item (a)); refusal does not block access to public procurement.

The fields required for a function are indicated when it is used. Without a verified account address, emails related to the account cannot be sent. Do not pass on passwords, private keys or health data in support requests.

Account, Google and Firebase

The Google/Firebase Authentication connection is optional. The authentication module is initialized by the web application before the connection; the technical exchanges actually triggered must be verified by a network survey. CETIN Market receives the necessary elements to recognize the account, not the Google password. Google also processes the data according to its own conditions. You can use public pages without an account; Personal functions require identification.

Firebase-specific information, including its roles, regions and transfer guarantees, must be confronted with the actual contract and configuration used: Firebase privacy.

Alerts, notifications and emails

When an alert is created, its parameters (instrument, threshold, horizon, state) are stored to enable its evaluation. The summary preferences, frequency, local time and time zone can be kept in the account. Optional e-mails are sent to the verified address and can be deactivated in the account or by the unsubscribe link when it is present.

Notifications and e-mails are not guaranteed instantaneously. Their history and delivery records must be subject to actually configured and documented storage times. No promotional mailings are automatically generated by registration for functional alerts.

Cookies, local storage and audience measurement

The browser can keep your language, your consent choice, backup market data and authentication session. Not all of these stores are used for advertising. Google Analytics is loaded only after a positive choice; it can store cookies such as _ga and receive navigational and aircraft information.

You can accept, refuse or withdraw your choice from "Managing Cookies" at the footer; the choice is stored six months. Refusal must be as easy as acceptance and no Analytics follow-up must go before agreement. Erase browser data can also delete this choice. Reference: CNIL — cookies and tracers.

Recipients and subcontractors

The data is accessible to those who operate the service according to their needs. OVHcloud hosts infrastructure; Google/Firebase intervenes for authentication and Google Analytics for the agreed audience measure. Sending e-mails goes through the actual configured mail provider. No market data provider shall receive the personal data of the account by simply consulting the prices unless technical operation is contrary to the requirement to verify.

The list of providers, their roles and subcontracts must be kept up to date internally.

Transfers outside the European Economic Area

Some Google services can process data out of the EEE , particularly in the United States. A possible transfer must be based on an applicable legal mechanism and appropriate guarantees, assessed according to the provider and the treatment concerned. The Google/Firebase processing conditions and contracts actually entered into must be verified; the presence of a link does not alone prove the conformity of a transfer.

Shelf life

The account, its preferences and alerts shall remain associated with the account as long as it exists and shall then be deleted in accordance with the closing procedure, subject to legal obligations or disputes. Technical traces, support messages, sending history and backups must each have a defined and effectively applied duration.

Storage information not yet documented: duration of web/API logs, support, backups, account after inactivity and actual delay after deletion. The traces of sending e-mails were announced as kept for up to 30 days; this parameter must be checked in the server. The principle of limitation of storage is recalled by the CNIL — inform people.

Security and incidents

Public pages use HTTPS. Verification of access controls, authorizations, backups and actual durations requires a separate technical audit; this page does not certify their compliance. Backups and logs may be necessary for availability and security. No computer security completely eliminates the risk of incident.

In the event of a breach of personal data, the publisher must assess the risks, document the incident and, when the criteria of the RGPD are completed, notify the competent authority and possibly the persons concerned.

Your rights and their exercise

You can request access, rectification, erasure, limitation and, depending on the legal basis, opposition or portability. When treatment is based on your consent, you can withdraw it without calling into question the previous treatment. Send the request to contact@cetinmarket.com, ideally from the account address ; a proportionate identity check may be requested.

The reply period is normally one month, which can be extended under the conditions of the RGPD . You can file a complaint with the CNIL or the competent authority.

account deletion and backups

The disconnection does not erase the account. An alert can be removed from the personal space. For deletion of account and associated data, contact contact@cetinmarket.com ; the deletion operations and any legal exceptions must be detailed when processing the request.

Backup copies are not always deleted immediately; their rotation time and measures preventing the reintroduction of deleted data must be documented and tested.

Updates to this policy

The date of update is at the top of the page. Any substantial change in purpose, recipient, transfer or tracer must give rise to appropriate information and, where required, to new consent. One question: contact@cetinmarket.com.

A request about your data?

contact@cetinmarket.com

Contact CETIN Market