Privacy Policy

This policy explains how the operator of Fintech Headlines (the "controller") processes personal data. It is written to meet the Swiss Federal Act on Data Protection (FADP) as revised with effect from 1 September 2023 and, where it applies to people in the EU/EEA, the General Data Protection Regulation (GDPR).

Data we process

• Reading the site: no account is needed. Our hosting provider processes technical data (IP address, browser, requested pages) to deliver the site and protect it from abuse. We count article views anonymously in aggregate.
• Accounts: email address, password (stored hashed by our authentication provider), display name, saved articles, followed topics, companies and cryptocurrencies, and alert preferences. If you sign in with Google, we receive your name and email from Google.
• Contact and press-release forms: the details you provide. To prevent spam we briefly process your IP address for rate limiting.
• Local storage: your cookie choices, reading-mode preference and sign-in session.

Purposes and legal bases

We process data to provide the publication and your account (performance of a contract, GDPR Art. 6(1)(b)), to answer enquiries and keep the service secure (legitimate interests, Art. 6(1)(f)), and to meet legal obligations (Art. 6(1)(c)). Under the FADP we process data in line with its principles of lawfulness, good faith, proportionality and purpose limitation.

Recipients and international transfers

We use service providers for hosting, database and authentication infrastructure. They process data on our behalf under contractual safeguards. Some providers may process data outside Switzerland or the EEA; where that country does not offer adequate protection we rely on recognised safeguards such as the EU Standard Contractual Clauses, as recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC). We do not sell personal data.

Retention

Account data is kept until you delete your account. Contact and press-release messages are kept as long as needed to handle them and then deleted, generally within 24 months. Security logs are kept for a short period.

Your rights

You may request access to, correction or deletion of your data, object to processing, withdraw consent at any time, and request data portability. You can delete your account yourself in My Fintech Headlines. To exercise other rights, use our contact form (subject "Data protection request"). You may lodge a complaint with the FDPIC in Switzerland or with the supervisory authority in your EU/EEA country of residence.

Security

The site is served over HTTPS; access to personal data is restricted by role-based permissions; passwords are never stored in plain text.

Changes

We will update this policy when our processing changes and show the date of the latest revision above.