Private Policy

At Exness, we are committed to protecting the privacy and security of our clients’ personal information. This Private Policy outlines how we collect, use, store, and protect your personal data in compliance with applicable data protection laws and regulations. By using our services, you agree to the terms outlined in this policy.

1. General Provisions

This Private Policy (hereinafter referred to as the “Policy”) is designed to establish the procedure for processing personal data of Exness clients and website visitors. It defines the purposes, legal basis, and methods of processing personal data, as well as the measures taken to ensure the security of personal data at Exness.

The Policy is developed in accordance with the requirements of international data protection regulations, including but not limited to the General Data Protection Regulation (GDPR) and other applicable laws in the jurisdictions where Exness operates.

2. Basic Concepts Used in the Policy

To ensure clarity, we define the following key terms used throughout this Policy:

1. Personal data: Any information relating to an identified or identifiable natural person.
2. Processing: Any operation performed on personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, or erasure.
3. Data subject: The individual to whom the personal data relates.
4. Operator: Exness, as the entity determining the purposes and means of processing personal data.

3. Basic Rights and Obligations of the Operator

As the Operator, Exness has specific rights and obligations regarding the processing of personal data:

Rights:

1. To collect and process personal data with the consent of the data subject or on other legal grounds.
2. To transfer personal data to third parties when necessary for the provision of services, subject to appropriate safeguards.
3. To refuse requests for personal data if such requests are not in compliance with applicable laws.

Obligations:

1. To process personal data lawfully, fairly, and transparently.
2. To implement appropriate technical and organizational measures to ensure the security of personal data.
3. To respond to data subjects’ requests regarding their personal data within the timeframes specified by applicable laws.

The following table outlines the key responsibilities of Exness as the Operator:

4. Basic Rights and Obligations of Personal Data Subjects

Data subjects have specific rights and obligations concerning their personal data:

Rights:

1. To access their personal data and receive information about its processing.
2. To request rectification or erasure of their personal data.
3. To withdraw consent for data processing at any time.

Obligations:

1. To provide accurate and up-to-date personal data.
2. To inform Exness about any changes in their personal data.
3. To comply with the terms and conditions of using Exness services.

5. Principles of Personal Data Processing

Exness adheres to the following principles when processing personal data:

1. Lawfulness, fairness, and transparency
2. Purpose limitation
3. Data minimization
4. Accuracy
5. Storage limitation
6. Integrity and confidentiality
7. Accountability

These principles guide our data processing activities and ensure that we handle your personal information responsibly and ethically.

6. Conditions of Personal Data Processing

Exness processes personal data under the following conditions:

1. With the consent of the data subject
2. To fulfill contractual obligations
3. To comply with legal obligations
4. To protect the vital interests of the data subject
5. For the performance of a task carried out in the public interest
6. For the legitimate interests pursued by Exness or a third party

The specific condition for processing depends on the nature of the data and the purpose of processing.

7. Procedure for Collection, Storage, Transfer and Other Types of Personal Data Processing

Exness collects personal data through various channels, including but not limited to:

1. Account registration forms
2. Website usage and interactions
3. Communication with customer support
4. Third-party service providers

The following table outlines the types of personal data we collect and their purposes:

We store personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Exness implements appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.

Personal data may be transferred to third parties, such as affiliates, service providers, or regulatory authorities, when necessary for the provision of services or to comply with legal obligations. Such transfers are subject to appropriate safeguards to ensure the protection of personal data.

8. Confidentiality of Personal Data

Exness is committed to maintaining the confidentiality of personal data. We have implemented strict access controls and confidentiality agreements to ensure that personal data is only accessible to authorized personnel who require it to perform their duties.

Our employees and third-party service providers are bound by confidentiality obligations and are subject to disciplinary action or contractual penalties in case of breach of these obligations.

H2 9. Final Provisions

This Policy is subject to regular review and may be updated to reflect changes in our data processing practices or applicable laws. Any significant changes will be communicated to data subjects through appropriate channels.

The current version of the Policy is always available on the Exness website. We encourage data subjects to review the Policy periodically to stay informed about how we protect their personal information.