GDPR Policy

1. Introduction

This GDPR Policy supplements our Privacy Policy and applies to users in the European Economic Area (EEA), United Kingdom, and Switzerland. It explains how MPL.Capital processes personal data in compliance with the General Data Protection Regulation (GDPR) and equivalent national laws.

2. Data Controller

MPL.Capital acts as the data controller for personal data processed through the Service. For GDPR-related inquiries, contact our Data Protection Officer at mpl.capital/contact.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the Service you have subscribed to
• Legitimate interests: Processing for security, fraud prevention, and service improvement
• Consent: Processing for marketing communications and optional features (you may withdraw consent at any time)
• Legal obligation: Processing required to comply with applicable laws

4. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of Access (Article 15): Request a copy of the personal data we hold about you
• Right to Rectification (Article 16): Request correction of inaccurate or incomplete personal data
• Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten")
• Right to Restriction (Article 18): Request restriction of processing in certain circumstances
• Right to Data Portability (Article 20): Receive your personal data in a structured, machine-readable format
• Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making (Article 22): Not be subject to solely automated decisions that significantly affect you

5. How to Exercise Your Rights

To exercise any of the above rights, you can: (a) use the data management tools in your Account Settings; (b) submit a request via our contact form. We will respond to all requests within 30 days. We may need to verify your identity before processing your request.

6. International Data Transfers

MPL.Capital is based in the United States. When we transfer personal data from the EEA to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate data protection.

7. Data Retention

We retain personal data for as long as necessary to provide the Service and comply with legal obligations. Account data is retained while your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.

8. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection authority. In the EU, you can find your national supervisory authority at edpb.europa.eu.

9. Cookies and Consent

We use cookies as described in our Privacy Policy. For users in the EEA, we obtain your consent before placing non-essential cookies. You can manage your cookie preferences at any time through your browser settings or our cookie consent tool.

10. Contact Our DPO

For GDPR-specific inquiries, contact our Data Protection Officer via our contact form, selecting "Data Privacy" as the area of interest.