Privacy Policy

Responsible handling of your personal data is of the utmost importance to Direct Patrimonor. We process information transparently, for defined purposes and in compliance with applicable laws – particularly the GDPR. In this policy we explain which data we collect, why we use it, how long we keep it and how we protect it.

1. Data controller

The data controller of your personal data under the GDPR is the operator of the Direct Patrimonor site and platform. Relevant contact details and additional information can be found in this site's legal notice. For privacy questions you can contact our data protection officer.

2. Data collected

We collect and process only the data necessary to provide our services, meet legal obligations and ensure the secure operation of the platform. These include in particular:

Identity data: first and last name, date of birth (for age verification and identity verification).
Contact details: email address, phone number (optional), country of residence and, where applicable, address.
Account and transaction information: payment details, deposits and withdrawals, transaction history.
Technical and usage data: IP address, browser type, device information, access times, log data.
Verification documents: identity documents, proof of address or other documents for KYC/AML checks (only when legally required).

Special categories of personal data (e.g. health data or religious beliefs) are generally not collected, unless explicitly required by law or with your express consent.

3. Methods of collection

Your data is collected through various secure channels:

Directly from you: for example during registration, maintaining your profile, submitting verification documents or using the contact form.
Automatically: e.g. via cookies, server log files, analytics tools and device information during platform use.
Via third parties: such as payment providers (for deposits and withdrawals), identity verification services (KYC/AML) or – with your consent – social login services.

4. Purposes of processing

We process your personal data only for clear and legitimate purposes:

Setting up, managing and providing your user account and platform features.
Execution and securing of payment processes (deposits and withdrawals).
Personal customer support and handling of your requests.
Fulfilment of legal and regulatory obligations (e.g. KYC, AML and tax requirements).
Ensuring IT security and protection against fraud, abuse and attacks.
Optimising the user experience and further developing the platform.
Marketing and informational purposes – only on the basis of your explicit consent.

5. Legal basis for processing

Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
Compliance with legal obligations (Art. 6(1)(c) GDPR), e.g. in the context of anti-money laundering.
Protection of legitimate interests (Art. 6(1)(f) GDPR), e.g. to ensure platform stability and security.
Your explicit consent (Art. 6(1)(a) GDPR), for example for marketing or optional additional features.

6. Data disclosure

Your data is disclosed only when necessary and solely to carefully selected partners:

Payment service providers and banks for processing deposits and withdrawals.
Specialised providers for conducting KYC/AML checks.
IT and cloud providers with whom we have entered into appropriate data processing agreements.
Analytics and security tools that – where possible – operate with anonymised or pseudonymised data.
External advisors (e.g. lawyers, tax consultants) within the framework of legal obligations.
Authorities or courts, where there is a legal obligation or rights need to be enforced.

Your personal data is not transferred or sold to third parties for commercial purposes.

7. International data transfers

In some cases we use providers (e.g. cloud or analytics services) located outside the European Economic Area. In such cases we adopt adequate safeguards, such as EU standard contractual clauses, Binding Corporate Rules or European Commission adequacy decisions, to ensure an adequate level of data protection.

8. Data security

To protect your data we adopt extensive technical and organisational measures:

Encrypted data transmission using current protocols (e.g. TLS 1.3+).
Strong encryption of sensitive data at rest (e.g. AES-256).
Regular security audits, penetration tests and reviews by independent specialists.
Continuous monitoring of systems for suspicious activity and attack attempts.
Strict access restrictions and role-based permissions within the team.
Safekeeping of customer funds in segregated accounts with regulated partner institutions.

Absolute protection against all risks cannot be technically guaranteed, but we reduce such risks with our measures to a very low level.

9. Retention period

We retain your data only for as long as necessary for the stated purposes or as required by law:

For the duration of the active use of your account and the contractual relationship.
After account closure for the period required by law (e.g. 5–10 years for tax and regulatory purposes).
For consent-based processing (e.g. marketing) until you withdraw your consent.

When data is no longer needed we delete it securely or anonymise it.

10. Your rights as a data subject

In relation to your personal data you have extensive rights. In particular you can:

Request information about which data we hold about you.
Request correction of inaccurate or completion of incomplete data.
Request deletion of your data, provided there are no statutory retention obligations.
Request restriction of processing in certain cases.
Receive your data in a structured, commonly used and machine-readable format (data portability).
Withdraw any consent given at any time with effect for the future.
Lodge a complaint with a competent data protection supervisory authority.

11. Cookies and similar technologies

We use cookies and similar technologies to ensure the platform functions, analyse usage and optimise the experience. Essential cookies are always active, while analytical and marketing ones require your prior consent. More details are in our cookie policy.

12. Changes to this privacy policy

We may update this policy from time to time – for legislative changes, supervisory updates or new features. The updated version is always available on the site. We will notify you of relevant changes via email or directly on the platform.

13. Contact for privacy matters

If you have questions about privacy, this policy or exercising your rights, contact us by email at support.directpatrimonor@gmail.com or via the site's contact form. Our data protection officer will review and respond to your query promptly.

By using Direct Patrimonor you confirm you have read this privacy policy and accept its contents.

Thank you for your trust. Protecting your data and privacy is and remains a central priority for us.