User agreement for personal data processing

General Provisions

• This Policy governs the processing of personal data by the operator finex24.io and outlines data protection measures. The document is publicly available to all users on the Internet.
• Purpose of the Policy: To protect users’ rights and freedoms, including privacy and personal integrity, during the processing of their data.
• All employees of the operator handling personal data must comply with the requirements of this Policy.
• User consent is granted by clicking a confirmation button or checking a checkbox, which constitutes unconditional acceptance of the Policy’s terms.

Key Definitions

• Personal Data: Any information that directly or indirectly identifies an individual (e.g., full name, contact details, financial data, transaction history, passport details, IP address, cookies, etc.).
• Data for Dissemination: Information made publicly available by the data subject for unrestricted access.
• Operator: finex24.io, which determines the purposes and methods of data processing.
• Data Processing: Collection, storage, use, transfer, and other actions involving personal data.
• Mobile Application: Software for devices (smartphones, tablets) providing access to finex24.io services.
• Personal Account: A secured section on the website/app accessible after registration (via login and password).
• Website: The online resource at finex24.io, including texts, graphics, software, and other materials.

Data Processing on finex24.io

Processed Data Includes:

• Email address;
• Phone number;
• Full name;
• Passport details (including scans);
• Transaction history;
• Bank card/account details;
• Correspondence with support;
• Technical data (IP address, cookies).

Processing Purposes:

• Account registration and management;
• Compliance with the User Agreement;
• Account verification;
• Provision of financial services;
• Technical support.

Key Features:

• Biometric data is not processed.
• Cross-border data transfer is not performed.
• Data is stored within the Russian Federation.

Website and Application Identifiers

Data Collection Methods:

1. User-provided data: Via website forms or emails to corporate addresses.
2. Automated collection using:
   • Cookies: Analyze traffic and personalize services.
   • Web tags (pixels): Evaluate advertising and content effectiveness.
   • Server logs: Information about requests and devices.

Browser settings may restrict coоkie usage, which could affect website functionality.

Rights and Obligations

Operator’s Obligations:

• Do not share data with third parties without consent (except as required by law).
• Explain consequences of refusing to provide data.
• Terminate processing upon user request.

User’s Rights:

• Withdraw consent to processing;
• Request data correction, blocking, or deletion;
• Challenge the operator’s actions with authorized bodies.

Prohibited Actions:

• Use data for direct marketing without consent.
• Make decisions based solely on automated processing (without written consent).

Data Updates and Deletion

Users May Request:

• Correction of inaccurate data within 7 business days.
• Deletion of unlawfully obtained data within 7 business days.

The operator will notify users and third parties of any changes made.

Handling Requests

Response Time: 10 business days (may be extended by up to 5 days).

Requests Must inсlude:

• Identity verification documents;
• Proof of interaction with the operator (e.g., contract number, email);
• Digital signature (for electronic requests).

Operator May Deny Requests If:

• It threatens national security;
• It violates third-party rights.

Data Protection

Security Measures:

• Appointing a data processing officer;
• Regular audits and employee training;
• Data encryption;
• Access control;
• Prevention of leaks and cyberattacks.

Final Provisions

1. This Policy takes effect upon publication on finex24.io.
2. Amendments may be made due to:
   • Changes in legislation;
   • Regulatory requirements;
   • Adjustments to the operator’s business processes.

The current version is available at: https://finex24.io/en/privacy.

Last Updated: March 4, 2025