WealthBizzTradeFX Group Privacy Notice (Policy)

The current version of this Privacy Policy is: June 2024

1. About this Privacy Policy

Privacy and the security of transactions are core elements of cryptocurrencies, blockchain technology and its whole global movement. WealthBizzTradeFX really appreciates the trust Users (hereinafter referred to as “User/s” or “you”)  have in us when trading cryptocurrencies and other digital assets on our platform.

For this reason, privacy and data security have an enormously high priority for the WealthBizzTradeFX group. It is very important to us that you feel safe during your visit to our website and while using our services as well as over the course of all other business transactions with us. As soon as you make use of products and/or services of WealthBizzTradeFX, you entrust us with the processing of your personal data. WealthBizzTradeFX wants to give you the best possible experience with our platform to ensure that you enjoy the usage of our products and services now and in the future. That’s why we want to understand the User behaviour on our platform in order to continuously improve it.

Therefore, in this Privacy Notice, we want to transparently inform you which personal data we collect from you and why and who might receive it. Furthermore, we would like to inform you which precautions we take to protect your personal data, which rights you have in this context and to whom you can turn for data protection concerns.

Regarding the terms used in this Privacy Notice, such as “Processing” or “Controller”, we refer to the definitions of the GDPR.

This Privacy Notice is drafted in English and German. In case of conflict the English version shall be the binding version.

2. Applicability

To whom does this Privacy Policy apply? 

WealthBizzTradeFX GmbH and its direct and indirect subsidiaries (hereinafter referred to as "WealthBizzTradeFX" or "WealthBizzTradeFX Group" or "we") offer via its websites (e.g.: www.bitpanda.com, exchange.bitpanda.com) and its mobile applications (“Mobile App”) (together hereinafter referred to as "Website" or “Platform”) services and products related to buying and selling cryptocurrencies and other digital assets as well as payment and IT services.

This Privacy Notice applies to all services and products regarding our Platform,our Broker together with associated products, this website and our Helpdesk; and provides an overview in regards to the main actors when providing our Platform.

Users of the WealthBizzTradeFX Card might also want to have a look at the Privacy Policy of Contis, who issues the cards. 

Further descriptions of the provided services and the legal entities providing them can be found in Section 4 of the WealthBizzTradeFX Group General Terms and Conditions. In order to keep this Privacy Policy neat and easy to read, we want to provide a brief overview (the specifics will depend on the User’s location and the used product). Concerning our Platform, the following entities are the “main actors”: 

• WealthBizzTradeFX GmbH: has its business address at Stella-Klein-Löw Weg 17, 1020 Vienna, Austria, registered in the commercial register of the Commercial Court of Vienna under FN 569240 v and is the content provider of the Platform as well as responsible for the offer of cryptocurrencies on it; 
• WealthBizzTradeFX Metals GmbH: has its business address at Stella-Klein-Löw Weg 17, 1020 Vienna, Austria, is registered in the commercial register of the Commercial Court of Vienna under FN 511923 d, and offers trading with precious metals via the Platform;
• WealthBizzTradeFX Payments GmbH: has its business address at Stella-Klein-Löw Weg 17, 1020 Vienna, Austria, is registered in the commercial register of the Commercial Court of Vienna under FN 501412 x, and offers different payment services via the Platform; 
• WealthBizzTradeFX Financial Services GmbH: has its business address at Stella-Klein-Löw Weg 17, 1020 Vienna, Austria, is registered in the commercial register of the Commercial Court of Vienna under FN 551181 k and acts as a service provider for the Platform. WealthBizzTradeFX Financial Services GmbH provides the reception and transmission of orders regarding digital securities in accordance with the Austrian Securities Supervision Act 2018 (Wertpapieraufsichtsgesetz 2018 or “WAG”);
• WealthBizzTradeFX Customer Care GmbH: has its business address at Stella-Klein-Löw Weg 17, 1020 Vienna, Austria, is registered in the commercial register of the Commercial Court of Vienna under FN 523486 h and acts as a service provider in regards to the Helpdesk for the WealthBizzTradeFX Group (except for WealthBizzTradeFX Custody);
• WealthBizzTradeFX Custody Ltd: has its business address at 21 Holborn Viaduct, London, EC1A 2DY, United Kingdom, is registered under registration number 11625148 and acts as a service provider for crypto custody services called WealthBizzTradeFX Custody. 
• Pantos GmbH has its business address at Stella-Klein-Löw Weg 17, 1020 Vienna, Austria, is registered in the commercial register of the Commercial Court of Vienna under FN 481562 f and is building a decentralised protocol that allows transfer of assets between blockchains.

For users from certain countries or depending on the used services, other legal entities in the WealthBizzTradeFX Group might be involved as service or content providers, such as:

• Germany: WealthBizzTradeFX Asset Management GmbH: has its business address at Friedrich-Ebert-Anlage 36, 60325 Frankfurt am Main, Germany, is registered in the commercial register of the Commercial Court of Frankfurt am Main under HRB 121696 and is a service provider for the WealthBizzTradeFX Group.
• Turkey: WealthBizzTradeFX Teknoloji A.Ş.: has its business address at Esentepe Mahallesi Kir Gülü Sk. Metrocity is Merkezi D, Block Apt. No 4/4, Şişli, Istanbul, Turkey, is registered in the Trade Register of Istanbul under 243948-5 and is a service provider in regards to payment processing for the WealthBizzTradeFX Group. 

3. Minors:

Are minors allowed to use WealthBizzTradeFX’s services?

No, the products and services of WealthBizzTradeFX are not directed to people under the age of 18 years. Only persons of legal age are permitted to use the services of WealthBizzTradeFX and register for an account. Therefore, we are not knowingly collecting personal data from minors. So, if you are under the age of 18 years, please do not use WealthBizzTradeFX’s platform and do not provide us with any personal data.

4. Controller: 

Who is responsible for the data processing and who can you contact?

WealthBizzTradeFX is aware that both the protection and the careful handling of your personal data are very important. WealthBizzTradeFX will solely use the Personal Data provided by you in compliance with the applicable data protection laws and this Privacy Notice.

Generally, each company of the WealthBizzTradeFX Group is a Controller pursuant to Art 4 para 7 GDPR and therefore responsible for the processing of personal data in connection with the services provided by the specific company (for the different services see Point 2). In some cases, entities of WealthBizzTradeFX might act as Processor pursuant to Art 4 para 8 GDPR on behalf of each other. 

Due to the high data security standards in the WealthBizzTradeFX Group, WealthBizzTradeFX considers it necessary to implement a group-wide uniform data protection strategy. Thus, WealthBizzTradeFX GmbH acts as a central point of contact for all data protection issues concerning all services offered by the WealthBizzTradeFX Group via the platform or the Mobile App.

If you have any questions in connection with the processing of your personal data and the exercising of your rights under GDPR, you can contact our Data Protection Officer (DPO): privacy@bitpanda.com Please note that for certain requests, we require further identification data from you (e.g. Passport, ID card, etc), in order to ensure that your personal data is only shared with you.

Joint Controllers

If WealthBizzTradeFX Group acts together with other parties as Joint Controller (e.g. processing data for jointly determined purposes within the WealthBizzTradeFX Group), we provide those parties with personal data if applicable and based on at least one of the legal bases listed under Point 7. In case of a joint controllership, we transmit your personal data only based on a sufficient agreement with our partners (Art 26 GDPR). However, no sensitive payment data will be transmitted within the WealthBizzTradeFX Group.

WealthBizzTradeFX will only share your personal data with other third parties if a legal basis applies. This may be due to our contract with you, our legitimate interests, a legal obligation or your prior consent (withdrawable at any time).

5. Payment Initiation Services and Financial Services: 

How is my personal data processed if I use payment initiation and financial services?

This Privacy Notice also sets out the more specific data protection information in regards to WealthBizzTradeFX GmbH’s subsidiaries such as WealthBizzTradeFX Payments GmbH (provides different payment services via the platform) and WealthBizzTradeFX Financial Services GmbH (service provider for the reception and transmission of orders regarding digital securities in accordance with the Austrian Securities Supervision Act 2018 - Wertpapieraufsichtsgesetz 2018 or “WAG”). 

When you use our payment initiation services, we will only process your personal data with your consent or due to a contractual obligation towards you and we will not request any data from you other than those necessary to provide this service. Furthermore, we won’t use, access or store any data for purposes other than for the performance of the payment initiation service as explicitly requested by you. All personal data which is necessary to provide the payment service (especially your security credentials) is not accessible by any other party other than WealthBizzTradeFX Payments and only transmitted by us through safe and efficient channels. After the performance of the service WealthBizzTradeFX Payments will not store your sensitive payment data.WealthBizzTradeFX Payments offers the following services (hereinafter referred to as "payment services"):

• Payment Transfer Services: services for the execution of payment transactions, including the transfer of funds to a payment account with WealthBizzTradeFX Payments or with another payment service provider (e.g. direct debit transactions, payment card transactions, credit transfer transactions).
• Money Remittance Services: services where funds are received from a payer, without any payment accounts being created (in the name of the payer or the payee), for the sole purpose of transferring a corresponding amount to a payee or to another payment service provider acting on behalf of the payee, or where such funds are received on behalf of and made available to the payee.
• Payment Initiation Services: a service to initiate a payment order at the request of the payment service User with respect to a payment account held at another payment service provider.
• E-Money Services: issuance and redemption of electronic money within the meanings of section 1 para 1 of the E-GeldG ("E-Money") including the administration of the related e-money wallets.

When you use our financial services, we will only process your personal data with a valid legal basis (Art 6 GDPR) and we will not request any data from you other than those necessary to provide this service

Financial Services offers the following services (hereinafter referred to as "financial services"):

• Acceptance and Transmission of Orders: When accepting and transmitting orders, Financial Services brings the Users together with the Product Manufacturer or a trading platform insofar as it forwards the Users order for the execution of a certain transaction to the Product Manufacturer or a trading platform.

6. Data categories and sources: 

Which personal data do we process and from which sources does the data originate?

We process the personal data that we receive from you within the scope of the business relationship and your usage of our Website or Mobile App (Platform) and payment services. Furthermore, we might process data we receive within the WealthBizzTradeFX Group and data we have received from credit agencies, debtor directories, business analysis providers (e.g. Credit Information Services, Business and financial information companies, Security companies, etc..), and from publicly accessible sources (e.g.: commercial register, register of associations, land register, media, sanctions lists).

When using WealthBizzTradeFX's services or interacting with WealthBizzTradeFX, the following personal data might be processed:

• Contact and general account creation data: when creating a new User account or communicating with WealthBizzTradeFX, we might process for example: name, address, telephone number, email, date of birth, photo for the account, etc.;
• Verification data: when an account is verified, we might process for example: screenshots/photos of national identity documents (e.g.:passport, driving licence, ID card) and identification data from these documents, utility bill details for residence verification, data about status of politically exposed persons, video data from the video authentication process, biometric data for verification (see point 7), etc.;
• Financial data for facilitation of transactions: e.g.: bank details (IBAN, BIC), payment service provider information, payment details, transaction-ID, and other sensitive payment data. In addition, data relating to the placing of orders for financial instruments (number of units purchased, amount, time of acquisition/termination and similar) will be processed.
• Log data on the website: e.g.: IP-address, transaction data, deposit and withdrawal address, computer or mobile device information, frequency, time, operating system, browser type, device type, unique device identification number, identification cookies (e.g. for the Affiliate and Tell-a-Friend programme), optionally form data, crash reports, performance data, interactive chat (for WealthBizzTradeFX Custody), third-party cookies, etc.;
• Mobile app data: e.g.:IP-address, transaction data, deposit and withdrawal address, mobile device information, frequency, time, operating system, browser type, device type, unique device identification number, optionally form data, crash reports, performance data and only with your explicit consent, data from: camera, microphone, storage, telephone (read SMS confirmation);
• Company details in case of business accounts and you use payment services we might process for example:commercial register reports, data of/or concerning beneficial owners, records or additional information on recent, past or planned business activities, other data necessary to determine/validate the structure, the beneficial ownership or any power of attorney of the company.
• Business onboarding data: e.g.:  KYC company data, ultimate beneficial ownership (UBO), legal entity type, PEP status of UBOs, Country of Incorporation, VAT and registration Number, Financial Statement Data, Shareholder data, Authorised individual data (which might include personal data of an individual such as name, ID number, ID type, issuing authority, email address, phone number).
• Details to and proof of funds, if necessary: e.g.: banking statements or any other details provided by banks or financial institutions, contracts of sales or contracts in general, or any other suitable data to prove or determine the origin of funds, if exceeding the daily/monthly or general limits on WealthBizzTradeFX or upgrading to WealthBizzTradeFX Plus “High Limit Service or OTC Service” (more info see https://www.bitpanda.com/en/plus). In order to determine User’s purpose for using the above-mentioned services or trading volume additional information on recent, past or planned business or personal activities of business or private Users or other data to determine the User’s intentions, if necessary, can be processed, as requested by WealthBizzTradeFX or provided by the User;
• Personal data provided by you in requests to our Support or other employee; if you contact our support, we might process for example: data provided in your request to the support team.
• Marketing data: if you visit our website or social media sites or during the usage of the Mobile App, we might process statistical and marketing data for example: number of visitors, frequency, clicks, time, places, target groups, data from cookies and similar technologies, consumer’s behaviour, interests and preferences, data about market research and target groups surveys, etc.; for social media see also point 11 and for cookies our Cookie Policy.
• Research data: if you, inter alia, participate in any discussion boards, panels, etc. provided by WealthBizzTradeFX or take part in one of our research initiatives and provide data via forms (which you might receive separate information about if you voluntarily agree to participate);
• Photo, video and audio data from events or fairs or interviews: e.g.: photo, video and audio data.
• Recordings of telephone conversations and electronic communication: Pursuant to section 33 of the Austrian Securities Supervision Act (WAG), Financial Services is required to keep recordings of telephone calls and electronic communications at least in relation to transactions carried out in trading for its own account and the provision of services relating to the acceptance, transmission and execution of User orders. We will inform you of this in advance. It should be noted that orders are only accepted via the platform and not via telephone or email (does not apply to WealthBizzTradeFX Wealth Customers).

  • For WealthBizzTradeFX Wealth Users telephone calls and communications might be recorded with relation to execution of User orders given and accepted via a telephone call.

• Data concerning experience and investing which is derived from Cash Plus appropriateness test. In particular, knowledge and previous experience with investing including information on the nature of service, transactions and financial instruments with which the User is familiar; the nature, size and frequency of transactions using financial instruments carried out by the User, educational background and occupational or previous professional experience. 

• Further User identification information in the sense of the Austrian Financial Market Anti-Money Laundering Act ("FM-GwG") is also obtained during the initial registration process.The following pieces of information might be processed to tailor future conversations to the user:

  • Users financial Goals

  • Users risk tolerance

  • Specific assets or markets of users interest

  • Any particular investment strategy or preferences

  • Other financial or investment information provided by the user 

• Data provided by you in connection with the voluntary use of Coach: AI based Coach uses a Large Language Model, in particular, ChatGPT to formulate and provide dynamic answers. Users shall refrain from sharing any sensitive and personal data while using the provided feature. The data provided might be processed in the United States. The following pieces of information might be processed to tailor future conversations to the user:

  • Users financial Goals

  • Users risk tolerance

  • Specific assets or markets of users interest

  • Any particular investment strategy or preferences

  • Other financial or investment information provided by the user 

For Users of WealthBizzTradeFX Custody only, we want to point out the following specifics:

• The data processed will be stored for a five year period according to the 5th Anti-Money-Laundering Directive (AMLD5). 

• The following specific data categories are collected: 

  • Blockchain data: your private blockchain key that will be managed and used to verify and carry out transactions you make online through the App/site;

  • Background check data: might also include credit checks.

7. Purpose and legal basis for using personal data: 

For which purposes and on what legal basis do we process your personal data?

All processing is performed in accordance with applicable data protection legislation. This includes, inter alia, the EU General Data Protection Regulation (GDPR), the E-Privacy Directive and the national implementing acts (e.g. the Austrian Data Protection Act). Generally, we process your personal data based on one of the legal bases listed below. 

If we ask you to provide any personal data not described in point 7, then such data and the purpose and legal basis for the collection and processing, will be communicated to the User at the point of collecting the personal data. 

If we ask you to provide any personal data not described in point 7, then such data and the purpose and legal basis for the collection and processing, will be communicated to the Client at the point of collecting the personal data.

Additionally we adhere to international standards that help trace and combat illicit activities in the financial sphere, such as those set by the Financial Action Task Force (FATF). We process your personal data 

7.1. For the performance of contractual obligations (Art 6 para 1 lit b GDPR):

Processing of personal data might be necessary for the performance of the contract with you or in order to take steps at your request prior to entering into a contract. The following data processing operations, for example, are covered by such contractual obligations:

• general performance of our services, all tasks necessary for the operation, performance and administration of WealthBizzTradeFX and its platform;
• video authentication process if you register for an account (validation of identity);
• account management (e.g. continuous updating of User data); 
• execution of your orders (e.g. payment processing, chargebacks, proof of purchase and selling);
• data processing and data transmission to precious metals vendors for the transferral of ownership of precious metals to you in accordance with your order; 
• Users service and support request; (e.g. contacting because of complications, Zendesk)
• performance of the Affiliate programme and the Tell-a-Friend programme; 
• application processing and data transmission for the WealthBizzTradeFX Debit Card (see point 9.4.).

• analysis and improvement of the platform's quality and the general User experience (e.g. performance tracking on the platform);

• recording of telephone conversations for execution of user orders for WealthBizzTradeFX Wealth;
  
  

7.2. For compliance with legal obligations (Art 6 para 1 lit c GDPR):

Processing of personal data might also be necessary for complying with various legal obligations (e.g. 5. AMLD, ZaDiG 2018, GewO 1994, FATF Travel Rule etc.). The following data processing operations, for example, are covered by such legal obligations:

• contract management, accounting and invoicing;
• compliance and risk management;
• Know-Your-Customer measures like video authentication process (validation of identity) and proof of funds;
• monitoring for prevention of fraud, misuse (e.g. for illegal purposes), money laundering and terrorist financing;
• providing information to fiscal criminal authorities in the context of fiscal criminal proceedings or to prosecution in accordance with official orders;
• consultation of credit agencies to determine creditworthiness and default risks.
• appropriateness test. 
• transaction information; such as sender’s name, account number, location information, recipient's name and account number in order to prevent money laundering and terrorist financing within the means of complying with FATF Travel Rule
• recordings of telephone conversations and electronic communication.
• appropriateness test. 

7.3. To protect legitimate interests (Art 6 para 1 lit f GDPR):

Where necessary, data processing might take place beyond the performance of the contract in order to maintain the legitimate interests of WealthBizzTradeFX or a third party. The following data processing operations are covered by such a legitimate interest:

• prevention of fraud, misuse (e.g. for illegal purposes), money laundering and terrorist financing;

• processing inquiries from authorities, lawyers, collection agencies in the course of legal prosecution and enforcement of legal claims in the context of legal proceedings;

• risk management and risk minimisation e.g. through enquiries to credit agencies, debtor directories or providers of business analysis;

• data transmission within the WealthBizzTradeFX Group for internal administrative purposes;

• account management and handling general User requests and inquiries;

• testing and optimisation of procedures and models for analysing requirements, business management, product development and direct User engagement;

• process and quality management measures;

• analysis and improvement of the platform's quality and the general User experience (e.g. performance tracking on the platform);

• market research, business management and continuing development of services and products;

• processing statistical data, performance data and market research data via the website, the Mobile App or social media platforms;

• direct marketing and advertising (e.g. performance of marketing strategies, targeting of Users, dispatch of vouchers, advertisement from WealthBizzTradeFX and its partner companies);

• use of audio, video and photo data from public spaces (e.g. public events, fairs, etc.) for marketing and other representation purposes on our social media channels or our website;

• performance tracking of the Affiliate programme and the Tell-a-Friend programme;

• processing User preferences (e.g. language, region) via cookies on our website (see also our Cookie Policy;

• identification and examination of potentially defective or suspicious business cases and accesses to our websites (e.g. website analysis);

• Payment services (e.g. transfers from your WealthBizzTradeFX Account to another WealthBizzTradeFX Account or a third party, initiating payment initiation services at a third party, etc.)

• measures for protecting our Users and Partners, as well as safeguarding network and information security; also measures to protect our employees, Users and property of WealthBizzTradeFX e.g. through video surveillance (erasing cycle 72 h) and from external data centres and service providers;

• data security and IT-security on our website and safeguarding our network (e.g. prevention of identity theft and defective or suspicious accesses to our websites).

• Processing data for appropriateness test (Cash Plus).

• Recording of telephone conversations for execution of user orders for WealthBizzTradeFX Wealth.

• For customer support communications an AI based chatbot might be processing customer requests.

• Usage of AI based Coach Investor memory: the investor memory stores and processes user activity and information shared with it, on the basis of the ChatGPT AI model.

7.4. Based on your consent (Art 6 para 1 lit a GDPR):

If you have given us your consent to process your personal data, processing will only take place in accordance with the defined purposes and to the extent agreed in the declaration of consent. Given consent may be withdrawn at any time without giving reasons and with future effect, if you no longer agree to the processing. For example, with your consent we are processing data for the following purposes:

• for the use of all functions of the Mobile App (e.g. telephone permission to read SMS confirmation, camera to scan barcodes, microphone for commands, etc.);
• direct marketing and advertising (e.g. User satisfaction surveys, newsletters, sweepstakes and other advertising communications);
• website analysis and tracking for advertising purposes (see also our Cookie Policy);
• certain uses of audio, video and photo data (e.g. commercials, interviews, etc.) for marketing and other representational purposes via various channels;
• auto-ident procedures for verifying your account (validation of identity) (see point 8).

Please note that the withdrawal of the consent does not affect the lawfulness of processing based on consent before its withdrawal.

7.5. Processing for other purposes: 

As a general principle of WealthBizzTradeFX, we only process personal data for the purposes for which they were collected. In exceptional cases, however, we might process your personal data which we have collected for one specific purpose for another purpose. In this case, we will inform you before the intended processing about this purpose, the period for which your personal data will be stored, the exercise of data subject rights, the option to withdraw consent, the existence of the right to file a complaint with the data protection authority, whether provision of the data was necessary on legal or contractual grounds and what the consequences would be if it were not provided, and whether automated decision-making or profiling is carried out.

8. Special categories of personal data: 

Does WealthBizzTradeFX process special categories of personal data?

This term stems from Art 9 GDPR and includes data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic and biometric data (Art 9 para 1 GDPR). In general, WealthBizzTradeFX does not process such categories of personal data, with twofold exceptions being for the purposes of identity verification, and fraud prevention as per Art 9 para 2 lit g GDPR and §21 (6) FmGwG the Financial Market Money Laundering Act (FmGwG) respectively. 

During your onboarding you may be asked to complete identity verification via auto-ident procedures in which, in addition to the actual verification data (e.g. screenshots of ID documents and identification data from these, residence, status of politically exposed persons, video data, etc.), biometric data (e.g. personal data resulting from specific technical processing in connection with the physical, physiological or behavioural characteristics of a person and enabling the unique identification of a person, e.g. facial images, dactyloscopic data) is also collected. Such processing of biometric data takes place on the basis of your express consent, which you may revoke at any time, and on the basis of substantial public interest as outlined in Art 9 GDPR. Therefore, we also process and store the provided biometrical data on the grounds of public interest for the purposes of fraud prevention (§21 (6) FmGwG). 

The biometric data will be processed solely by our service providers and will be erased completely within 3 years after performing the identification. WealthBizzTradeFX only receives the positive or negative verification result alongside other verification data and does not process biometric data from Users itself at any time.

9. Recipients of personal data: 

Who receives your personal data?

The protection and confidentiality of your personal data is important to WealthBizzTradeFX Group. Therefore, we transfer your personal data only to the extent described below or within the scope of an instruction at the time the data is collected from you. In addition, personal data that we collect concerning you will neither be sold by us nor otherwise disclosed to third parties and in  general limited to the recipients in the following four groups: 

9.1. Data transfer within the WealthBizzTradeFX Group:

Within the WealthBizzTradeFX Group, your personal data will be shared between companies: if there is a legal basis as described above. This happens for internal administrative purposes to conduct internal administrative activities efficiently. Our employees treat your data with the highest security standards and also only have access on a need-to-know basis. In all these cases only those offices or employees will receive your personal data who need it to fulfil the contractual and legal obligations and legitimate interests. 

If a company acts as a service provider for WealthBizzTradeFX Payments or Financial Services, we contractually oblige this company to ensure the confidentiality and security of your personal data that they process on our behalf.

9.2. Data transfer to Processors 

To a limited extent, we also transmit personal information to Processors. Such include, inter alia, service providers for video authentication services, IT services, User support, improvement of our website, monitoring of defective business cases, application management. Processors may only use or disclose this data to the extent necessary to perform services for us or to comply with legal requirements. We contractually oblige these Processors to ensure the confidentiality and security of your personal data that they process on our behalf.

9.3. Data transfer to public bodies and institutions:

We might also transfer your personal data might be disclosed to public bodies and institutions (i) if we are required to do so by law or in the context of legal proceedings, (ii) if we believe that disclosure is necessary to prevent damages or financial loss, or (iii) in connection with an investigation into suspected or actual fraudulent or illegal activities.

9.4. Data transfer to other third parties:

WealthBizzTradeFX will only share your personal data with other third parties if a legal basis applies. This may be due to our contract with you, our legitimate interests, a legal obligation or your prior consent (withdrawable at any time).

We want to especially highlight othertypes of third parties that we might have to share data with: 

• Card Provider: if you use the WealthBizzTradeFX debit card, we will send your personal data as required to our partner Contis. Your personal data might be processed (this may include verification data, contact data and financial data) to issue the WealthBizzTradeFX debit card; 

  • WealthBizzTradeFX-Technology-Solution Partner: if you are a WealthBizzTradeFX User via one of our WealthBizzTradeFX-Technology-Solution Partners (please see point 18), we might share personal data with them. Please see their respective Privacy Policies as linked below;

  • Payment gateway provider: if you are a WealthBizzTradeFX Custody User, payments made on the website or via the App are made through such entrusted third party. Such partner will not share your payment card details with WealthBizzTradeFX and processing is subject to their own privacy policy and terms and conditions;

• Content managing system: the WealthBizzTradeFX Custody website is hosted in Hubspot who has their own Cookie Policy.  
• Virtual Asset Service Providers (VASPs) involved in any monetary transactions.
• Bank Ident Verification Provider Solaris: We might process your data in connection with bank identity verification processes. For more information please see Solaris Privacy Policy.
• OpenAI: In connection with the use of the Coach feature, the data collected during the usage of the feature will be processed by ChatGPT.
• Other third parties: WealthBizzTradeFX Group might transfer your personal data to any other person with your consent to the disclosure or the purpose of performing a contract or in order to take steps at the request of the data subject prior to entering into a contract, especially for the performance of payment services to credit institutions and other payment service providers as well as in regard of WealthBizzTradeFX GmbH and/or WealthBizzTradeFX Metals GmbH, as far as the disclosure is necessary for the performance of transactions of cryptocurrencies, digital assets or the purchase and sale of precious metals.
  • Financial Services may disclose your personal data to other third parties with your consent to disclosure or for the purpose of fulfilling the contract or at the Customer's request even before the contract is concluded. Any such transfer of data shall take place in particular for the processing of financial services with regard to banks or other payment service providers, as well as with regard to the WealthBizzTradeFX GmbH, provided that said disclosure is necessary for the implementation of orders.

10. International data transfer:

Is data transferred to third countries or international organisations?

WealthBizzTradeFX will process your personal data in general within the European Economic Area. In some circumstances it might be the case that it is processed also outside the European Economic Area. If this is the case, we will rely on appropriate data transfer mechanisms according to Art 44 et seq GDPR. This might be, inter alia: 

• an adequacy decision by the European Commission (Eg.: EU-US Privacy Framework);
• standard contractual clauses as published by the European Commission; 
• binding corporate rules; 

Regardless of where your personal data is processed, it will be processed in accordance with the provisions in the Privacy Notice, including the technical and organisational measures outlined in point 17. 

11. Social Media presence: 

Is your data processed on social media platforms and who is responsible in such cases?

WealthBizzTradeFX maintains social media presence on different platforms (see below) in order to communicate with its active Users, prospective Users and interested social media Users about WealthBizzTradeFX’s services, products and other news. For your own use of such social media platforms, the general terms and conditions, as well as the privacy policies and practises (e.g. processing outside of the European Economic Area) of these operators, apply. We would like to point out that User data may also be processed outside the European Union. This can result in risks for Users due to different legal frameworks (e.g. it could make it more difficult to enforce data subject rights).

Social media platforms might track your behaviour (e.g. what content you clicked on or what websites you opened) when you are logged in to your account. To prevent such associations, you may want to log out of your social media accounts. WealthBizzTradeFX has no control and no responsibility over the general activities of social media platforms and your behaviour and will therefore not assume any liability for damages incurred by them using your personal data. For more information regarding tracking, cookies and similar technologies as well as opt-out possibilities in WealthBizzTradeFX’s own services and associated services, have a look at our Cookie Policy.

Contrary to what was said about the general practices of social media platforms, WealthBizzTradeFX is responsible for the processing of personal data gathered by communicating directly with us via such platforms (e.g. likes, direct messages, comments). At the same time, this personal data will also be processed by the social media platform itself according to their own practices and privacy policy and we have no influence on this. For a detailed explanation of the respective processing and the possibilities of exercising data subject rights and opting out of tracking with providers of social media networks, we refer to the respective privacy notices of the providers. 

Our social media pages and channels and links to their privacy policies: 

Facebook Insights: WealthBizzTradeFX maintains a Facebook Fanpage (“Fanpage”) and uses the associated analytic tool “Facebook Insights”. With this tool, WealthBizzTradeFX receives anonymous statistical evaluations about its Fanpage (e.g. number of visitors, frequency, target groups, etc.). For the processing of personal data in this context WealthBizzTradeFX and Facebook Ireland Limited (“Facebook”) are joint controllers (Art 4 para 7 GDPR) and therefor jointly responsible for the data processing. A corresponding agreement is in place between WealthBizzTradeFX and Facebook in accordance with 26 para 1 GDPR, which can be accessed via this link. However, WealthBizzTradeFX does not store any of this data, the data is solely stored by Facebook and processed via Insights. For all questions and inquiries regarding Facebook Insight, Facebook acts as single point of contact and can be contacted via this link.

12. Newsletter:

What is the legal basis for electronic notifications and how to unsubscribe?

If you would like to receive more information in regards to our existing product, related news or new launches, you might want to read our newsletter. We will only send newsletters and other electronic notifications to you if you are subscribed. This will only be the case: 

• with your express consent after having subscribed for it (double opt-in); where we will validate that the email address you disclosed is actually yours by asking you to confirm your subscription; or
• after voluntarily subscribing during registration for a WealthBizzTradeFX account; or
• subscribing while signed into your account via the Mobile App or the website; or
• in compliance with a different legal basis (e.g. Art. 107 para 3 of the Austrian Telecommunications Act [TKG]). 

Our newsletter might contain trackers for us to better understand our Clients’ interactions with the newsletter. You can find more information on tracking in our Cookie Policy.

If you need a break from our newsletter or do not want to receive it anymore, you may unsubscribe at any time. This, you can either do via your WealthBizzTradeFX account or via an unsubscribe link at the end of a newsletter email.

13. Retention and deletion periods:

For how long is my personal data processed (stored) and when will it be deleted?

We retain and process your personal data only as long as absolutely necessary. This means for the duration of the entire business relationship (from initiation through performance to termination of a contract), and after that for how long applicable legal retention periods stipulate. Beyond this we retain your data only for a longer period, in accordance with statutory retention and documentation obligations or to defend legal claims. When we perform payment initiation services for you, we will not store the sensitive payment data obtained thereby.

Statutory retention periods applicable to WealthBizzTradeFX are, inter alia:

• the Austrian Enterprise Code (UGB) and the Federal Tax Code (BAO) that foresee a retention period of seven years,
• the Financial Market Money Laundering Act (FM-GwG) that foresees a retention period of ten years,
• in certain cases, the limitation period according to the Austrian General Civil Code (ABGB) that foresees a retention between three and thirty years ;e.g. if data is required as evidence for legal disputes or for as long as there are other legitimate interests in retention.
• Financial Action Task Force (FATF) Travel Rule that forsees a retention period of as long as necessary in order to fulfil the obligation of preventing money laundering and terrorist financing, but no longer than 10 years according to 21 FM-GwG.

Therefore, your personal data will only be kept as long as absolutely necessary per the conditions above, after which it will be erased from our systems. 

Unless expressly stated in this Privacy Policy, personal data processed by us shall be erased as soon as they are no longer required for their intended purpose and the erasure does not conflict with any statutory retention obligations.

14. Data subject rights:

What rights do I have under the GDPR?

To exercise one of the above-mentioned rights you can approach us either via our Support or simply send an email to privacy@bitpanda.com or a letter to WealthBizzTradeFX GmbH, Stella-Klein-Löw Weg 17, 1020 Vienna, Austria. Please note that for such requests we require further identification data from you (e.g. copy of Passport, ID card, etc), in order to ensure that your personal data is only shared with you.

15. Automated decision-making:

Does WealthBizzTradeFX use my personal data for automated decision-making including profiling?

WealthBizzTradeFX does not use personal data for automated decision-making including profiling within the meaning of Art 22 GDPR (e.g. decisions producing legal effects concerning data subjects, or otherwise significantly affecting them, based solely on automated processing of personal data, including profiling).

16. Supervisory authority

With which supervisory authority can I file a complaint?

You have the right to file a complaint to the competent supervisory authority, if you think your rights have been violated under the GDPR. In Austria, this is the Data Protection Authority (Datenschutzbehörde).

17. Declaration of consent:

How do I give my consent and how can I withdraw my consent?

You have the right to withdraw your consent at any time to the WealthBizzTradeFX GmbH, WealthBizzTradeFX Payments GmbH and WealthBizzTradeFX Financial Services GmbH, Stella-Klein-Löw Weg 17, 1020 Vienna, Austria, or via email to privacy@bitpanda.com. Please keep in mind that we might not be able to provide all our services to you anymore, if you withdraw your consent. The withdrawal of your consent does not affect the lawfulness of processing your personal data based on consent before your withdrawal.

18. WealthBizzTradeFX Technology Solution (only applicable for customers of WealthBizzTradeFX Technology Solution)

WealthBizzTradeFX offers its own WealthBizzTradeFX Technology Solution (BTS). This allows the offer of WealthBizzTradeFX products to customers of certain partners. For this, the infrastructure of WealthBizzTradeFX is used. Furthermore, to provide the service it is necessary that personal data is transferred between WealthBizzTradeFX and their partners. Point 18 is only applicable to the data processing of customers of BTS partners. 

What categories of personal data will be processed and exchanged?

WealthBizzTradeFX will receive any personal data which is necessary to open a verified account and process them in its role as Controller. Among this data will be name, address, verification data and KYC data (please refer to point 6 and 7). Furthermore, WealthBizzTradeFX is required to share personal data with the concerned BTS partner, when it is necessary for providing the service (please refer to point 7§§).

What’s the purpose of it and what’s the legal basis? 

For the fulfilment of the service, it is necessary to process personal data for the performance of the contract. Furthermore, the processing of, for example, KYC data is necessary due to a legal obligation (please refer to point 7).

What data do we not get?

We won’t receive any data which is not necessary for providing the services of WealthBizzTradeFX. In other words, all data, which is solely necessary for the main service of the partner, won't be transferred to WealthBizzTradeFX.

Current WealthBizzTradeFX Technology Solution Customers

19. Data Security:

How is my personal data protected?

The security of data is very important to WealthBizzTradeFX and we are committed to protecting data we collect. We maintain comprehensive administrative, technical and physical measures designed to protect your personal data against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use. These measures meet the highest international safety standards and are regularly reviewed regarding their effectiveness and suitability for achieving the intended safety objectives.

We have implemented the following technical and organisational measures for example:

• SSL encryption on our websites from which we transfer personal data;
• two-factor authentication (2FA) for our platform; 
• ensuring the confidentiality, integrity, availability and resilience of our systems and services;
• use of encrypted systems;
• pseudonymisation and anonymisation of personal data;
• entry, access and transfer control for our offices and systems;
• measures for rapid recoverability of the availability of personal data in the event of a physical or technical incident;
• measures for privacy by design and default on our platform like e.g. prevention of User enumeration;
• implementation of procedures for regular review, assessment and evaluation of the effectiveness of the technical and organisational measure to ensure the security of the processing like e.g. our bug bounty programme;
• internal IT security guidelines and IT security trainings; 
• incident-response management.
• Obtained ISO/IEC 27001 security certification

Please also make sure that you use the two-factor authentication (2FA) for your WealthBizzTradeFX account, keep your access data confidential and protect your computer against unauthorised access.

20. Updates of this Privacy Policy:

How will I find out about changes to this Privacy Policy?

We, WealthBizzTradeFX, are committed to upholding the principles of data protection up to date. For this reason, we regularly review and update our Privacy Policy. This is to ensure that it is correctly and clearly displayed on our website, contains appropriate information about your rights and our processing activities (also with regard to technical changes or business development) and is implemented in accordance with applicable law, thus complying with data protection requirements. We update this Privacy Policy from time to time when required, in order to take current circumstances into account. If we make significant changes to this Privacy Policy, we will notify you after the login into your account and provide you with the updated version of the Privacy Policy. If it is required by applicable law, WealthBizzTradeFX will obtain your express consent to significant changes.

21. How to contact us?

Thank you for reading our Privacy Policy! 

If you have any further questions about this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer: privacy@bitpanda.com.