1. Introduction

At Finanboost, we are committed to ensuring your personal information is protected and treated with the utmost care. This policy explains how we collect, use, store, and share your personal data in a transparent way. It also informs you of your rights regarding your data and how you can exercise those rights to maintain control over your information.

We value your privacy and aim to be open about our data practices to build trust with you. This policy may be updated over time to reflect changes in our operations or new legal requirements. We encourage you to review this page periodically to stay up to date.

2. Who We Are

Finanboost is a registered company in Luxembourg, under company number xxxxxxxxxxx. As the data controller, we are responsible for deciding how and why your personal data is processed. This means we have legal obligations to protect your data and use it responsibly.

We refer to ourselves as “Finanboost” or “we,” “us,” and “our” in this document. As the data controller, we make decisions regarding the collection, use, and storage of your data, ensuring compliance with EU data protection laws, such as the General Data Protection Regulation (GDPR).

3. What Personal Information We Collect

3.1 Information You Provide to Us

When you interact with us through various channels (such as signing up, asking questions, or using our platform), you provide us with personal data directly. This information may include details like your name, email address, and payment methods, all of which are necessary to fulfill your requests.

We collect the data you willingly provide when you create an account, request services, or engage with us in training and recruitment activities. The data helps us ensure that you receive the appropriate services and communication tailored to your needs.

Examples of the information collected include personal identification details (name, age, gender), communication preferences (email address, phone number), and information about your educational or employment history. Payment-related information such as credit card details is also collected to process any transactions.

3.2 Simulation Performance Data

If you participate in training simulations, we monitor your performance, engagement, and feedback to provide useful insights. This data helps us evaluate how well you’re progressing and identify areas where you may need improvement or further support.

Engagement data, such as how many sessions you complete, and performance metrics, such as test scores or feedback, are vital for our system to track your progress and enhance the user experience. We collect this information to offer more personalized experiences and accurate reporting for your development.

For instance, if you are working through a training module, we analyze your results to produce a strengths and weaknesses report. This report helps you understand areas where you excel and areas where improvement might be needed.

3.3 Information from Third Parties

We may receive information from trusted third parties such as your educational institution, employer, or recruitment agencies. These sources provide us with necessary details to tailor our platform to your specific training or recruitment needs.

For example, universities may grant access to their students, and employers or agencies may refer candidates for training programs or job placements. These third parties help us validate your credentials and provide a more tailored service experience.

The data collected from third parties can include professional or educational qualifications, past employment records, and other background information, which helps us verify your qualifications and provide services based on your career goals.

3.4 Automatically Collected Data

We use cookies, analytics, and other tracking technologies to automatically collect data from your device when you visit our website. This helps us understand how visitors interact with our website and identify areas for improvement.

Automatically collected data includes information such as your IP address, browser type, operating system, and pages visited. This allows us to analyze trends and improve the functionality of our website to enhance the user experience.

Cookies and similar technologies also help us identify repeated visits and tailor our content to your preferences.

4. How We Use Your Information

4.1 Contractual Obligations

We process your personal data when it is necessary to fulfill the terms of the agreement you have with us, such as providing access to services, processing payments, or handling your job applications.

When you sign up for a subscription, engage in a simulation, or request a specific service, we use your data to ensure we meet our contractual commitments. This includes processing payments and invoices, providing access to training modules, and supporting your recruitment activities.

For example, if you subscribe to one of our paid services, we use your payment details to process the transaction and grant you access to our platform. Without processing this data, we cannot fulfill the service contract with you.

4.2 Consent-Based Processing

In certain cases, we process your data based on your consent. For instance, when you subscribe to marketing communications, opt in to receive newsletters, or allow us to share your performance data with potential employers, we rely on your consent to proceed.

You may provide explicit consent for specific purposes, such as sharing simulation results for job opportunities or using your name and image for case studies. It’s important to note that you can withdraw your consent at any time by contacting us or adjusting your preferences.

By consenting to receive marketing emails or share your data with recruitment partners, you help us deliver relevant offers and opportunities. However, we respect your choice, and you can withdraw your consent at any time without penalty.

4.3 Legal Compliance

We may process your data to comply with legal obligations such as regulatory requirements, fraud prevention laws, or financial reporting. This ensures that we remain compliant with industry standards and legal frameworks.

In certain cases, we are required by law to retain certain records, such as transaction details or corporate gifts. We may also process your data to respond to inquiries from authorities or law enforcement agencies when necessary.

For example, if there is a financial investigation, we may be obligated to share relevant data with law enforcement authorities. We process such data in full compliance with applicable laws to meet these obligations.

4.4 Legitimate Interests

We may use your data for purposes that align with our legitimate interests, such as improving our services, maintaining the security of our platform, and conducting business analytics. These activities help us enhance the experience and safety of all users.

Our legitimate interests include activities like analyzing user engagement to improve training simulations or using performance data to monitor security and prevent fraud. These interests are balanced with your privacy rights, and you can object if you feel your data is being processed inappropriately.

For instance, if we detect unusual activity on your account, we may process your data to prevent fraud or unauthorized access. We take steps to ensure that this processing does not infringe on your privacy.

5. Data Retention Policy

We only retain your personal data for as long as necessary to fulfill the purposes outlined in this policy. Retention periods vary depending on the type of data and the service provided, ensuring we comply with legal and regulatory requirements.

For example, user data related to your account or training simulations may be kept for up to 5 years, while recruitment-related data may only be retained for 12 months. This ensures that we don’t store your data longer than needed.

We also consider legal obligations and regulatory guidelines when determining retention periods. Certain records, like financial transactions, may be kept longer to comply with tax or financial regulations.

6. Sharing and Disclosing Your Data

6.1 Third-Party Service Providers

We work with third-party service providers to help us provide services, including cloud hosting, Payment services,  marketing, and recruitment services. These providers are contractually obligated to protect your data and are only allowed to use it for specific purposes outlined in our agreements.

For instance, IT providers host our platform, marketing agencies send authorized promotional content, and recruitment partners may assist in placing candidates. These partners may need access to certain data to provide their services but are prohibited from using it for other purposes.

These service providers must adhere to strict privacy standards, ensuring that your data remains protected during all interactions.

6.2 Payment Processing

To process payments securely, we use Stripe, a PCI-DSS compliant payment provider. Finanboost does not store or have access to your payment details after a transaction is completed, ensuring your financial data remains secure.

When you make a payment, Stripe processes the transaction on our behalf. We receive confirmation of the payment but do not store your credit card or billing details in our systems.

Stripe is fully responsible for handling your payment details in a secure and compliant manner, ensuring that your financial information is protected according to industry standards.

6.3 Other Disclosures

We may also share your data when required by law or regulatory authorities, when necessary to prevent fraud or cyber threats, or in the event of a business transition (e.g., merger, sale, or acquisition).

In the event of a business transition, your data will be transferred as part of the transaction. We will ensure that your data is handled with the same level of protection during these transitions as it is under this policy.

7. Your Rights Under Data Protection Law

7.1 Access Your Data

You have the right to request access to the personal data we hold about you. This means you can inquire about what data we have collected, how it’s being used, and with whom it has been shared.

Access requests can be made by contacting us directly, and we will provide you with a copy of your data within a reasonable time frame, usually within one month.

7.2 Correct or Update Data

You have the right to update or correct any inaccurate or outdated information we hold. If your details change or if you believe we have incorrect data, you can update it through your Finanboost account or by contacting us.

Ensuring your data is accurate and up to date helps us provide better services and prevents any misunderstandings or errors.

7.3 Withdraw Consent

You can withdraw your consent at any time for processing activities based on consent, including marketing communications or sharing performance data with third parties. Once consent is withdrawn, we will stop processing your data for those purposes.

To withdraw consent, simply contact us via the contact details provided. Keep in mind that withdrawing consent may affect the services we can provide you.

7.4 Object to Data Processing

If we process your data based on legitimate interests, you have the right to object to that processing. This means you can ask us to stop using your data for specific purposes, such as marketing or analytics.

If you object, we will assess your request and balance it against our legitimate interests to determine whether we should stop processing your data.

7.5 Request Data Deletion

You can request that we erase your data, provided we are not required to retain it for legal or regulatory reasons. If you want to delete your data, we will remove it unless there’s a valid legal reason for retaining it.

If you request deletion, we will confirm when the data is fully erased, unless we are legally obligated to keep it for a longer period.

7.6 Data Portability

You can request that we provide your data in a structured, machine-readable format or ask us to transfer your data to another provider. This allows you to move, copy, or transfer your data for your own purposes.

Data portability ensures that you have control over your data and can transfer it to other services if needed.

8. Security, Cookies, and External Links

8.1 Data Security

We employ industry-standard security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. This includes encrypting sensitive data and using secure systems to store and process your information.

Our security measures are designed to provide a high level of protection against potential cyber threats and unauthorized access.

8.2 Cookies

We use cookies to improve your experience on our website and to collect analytical data. Cookies help us remember your preferences, tailor content, and improve functionality.

You can control cookies through your browser settings. If you disable cookies, some features of our website may not work as expected.

8.3 External Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices, so we encourage you to review their privacy policies before submitting any personal information.

9. Marketing Preferences

We will only send marketing communications if you have opted in. You can opt out at any time by following the unsubscribe instructions in marketing emails or by contacting us directly.

We respect your preferences, and once you opt out, you will no longer receive marketing communications from us, though we may still need to communicate with you for non-marketing purposes.

10. Contact Information

For privacy-related inquiries, you can contact us via the provided email : dpo@finanboost.com or postal address. We aim to respond promptly to any privacy-related concerns or requests.

If you are dissatisfied with our response, you have the right to file a complaint with the CNPD, which is the body responsible for data protection enforcement.