How we handle your data

1. Who we are

This privacy policy applies to Beleggingsinstituut BV, established in Volendam, the Netherlands, registered with the Dutch Chamber of Commerce under number 52690822 (hereafter: “we”, “us” or “MOATEY”).

Questions about this policy or your privacy? Email us at contact@moatey.com.

2. What data do we process?

We only process data that is necessary to run the platform:

• Account data: your email address and, where applicable, a password or login status.
• Usage data: such as saved stocks, watchlists, portfolios, credits and analysis preferences.
• Communication data: email address and preferences for newsletters or notifications.
• Technical data: IP address, browser data, device information and cookies (see also section 7).
• Payment data: where applicable, processed by our payment provider; we never store full card details ourselves.

3. Why do we process your data?

We use your data for the following purposes:

• Providing, managing and securing your MOATEY account.
• Displaying analyses, scores and portfolio information.
• Sending functional emails, such as login codes and account notifications.
• Sending marketing emails, but only if you have explicitly consented.
• Improving the platform based on usage data and error reports.
• Complying with legal obligations, such as accounting and tax rules.

The legal bases are: performance of the agreement, legitimate interest, legal obligation and consent (for marketing).

4. How long do we keep your data?

We do not keep your data longer than necessary. Account data is retained for as long as your account exists. After that it is deleted, unless legal rules (such as tax legislation) require a longer retention period. Financial records are in principle kept for 7 years.

5. Who do we share data with?

We do not sell your data. We only share data with parties that are necessary to deliver our service:

• Our hosting provider and technical infrastructure.
• Email services for newsletters and transactional email (for example MailerLite and MailerSend).
• Analytics and tracking tools, insofar as you have given consent.
• Authorities or regulators, where legally required.

We conclude data processing agreements with these parties to protect your privacy.

6. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. This includes encrypted connections, access restrictions and regular security reviews.

7. Cookies

MOATEY uses cookies and similar technologies. Functional cookies are necessary for the platform to work. Analytics and marketing cookies are only placed after your consent. You can adjust your preferences at any time through your browser settings or our cookie preferences.

8. Your rights

You have the following rights regarding your data:

• The right to access your data.
• The right to rectification or completion.
• The right to erasure (“the right to be forgotten”).
• The right to restriction of processing.
• The right to data portability.
• The right to object, including to marketing.
• The right to withdraw your consent.

Would you like to exercise one of these rights? Send an email to contact@moatey.com. We respond within 30 days.

9. Changes

We may update this privacy policy from time to time. In case of material changes we will actively inform you, for example by email or with a notification in the platform.

10. Complaints

Not satisfied with how we handled your privacy request? You have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).