The retention periods in section 6 are approved by the owner. Policies and actual data retention and deletion procedures should be regularly checked for compliance with each other and applicable Czech law.
1. Personal data controller
Andrii Garkusha, Algo Trade Systems, OSVČ, Czech Republic.
IČO: 21348839
Address: V Honech 688, 250 67 Klecany, Czech Republic
Privacy contact: info@algotradesystems.pro
2. What data is processed
- name, email, subject and content of the appeal;
- order information, license, TXID and public address of the wallet associated with payment or return;
- IP address and technical information of the request in server logs, the composition and terms of which depend on the confirmed hosting provider;
- IP address hash to limit the frequency of sending the form;
- Selected consent categories, policy versions and selection dates in the local browser storage;
- registration and profile data, password hash, email confirmation, active and withdrawn server-side sessions, user agent and IP hash to protect the account;
- License history, encrypted, hashed and masked trading account ID, account change requests and activation history;
- correspondence and attachments of technical support, logs of security events and account notifications;
- Consent history, requests for correction, export and deletion of the account and information about their processing.
Solana transactions, including public addresses, tokens, amounts and TXIDs, are permanently available on the public blockchain. When the TXID or address is linked to the email and order, the operator processes this communication for the performance of the contract, return, accounting and prevention of abuse. The operator cannot delete or modify an entry already published on the blockchain, but applies user rights to data that it stores separately from the blockchain.
The site does not request full bank card details, seed phrase, private key, trading passwords, broker credentials or API keys. Do not send such information through the form.
3. Purpose and legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Response to enquiries and actions before conclusion of the contract | Name, email, topic, message | Actions at the request of the user prior to the contract; legitimate interest to respond to business requests |
| Sale, delivery, return and support of software license | Contact details, order, license, TXID, public wallet address, correspondence | Performance of the contract |
| Accounting and tax accounting | Legally Required Transaction Information | Legal obligation; the exact composition is confirmed by the owner |
| Safety and prevention of abuse | IP/hash IP, request time, server logs | Legitimate interest to protect the site and form |
| Registration and protection of personal account | Email, profile, password hash, sessions, user agent, logins | Execution of the contract and legitimate interest to protect the account |
| Product licensing | License, platform, encrypted, hashed and masked trading account ID, activation history | Execution of the contract, support and protection against misuse of the license |
| Processing of data subject requests | History of consents, requests for correction, export and deletion, results of identity verification and reasons for keeping mandatory records | Legal obligation and confirmation of the request |
| Optional analytics | Only the data of the service actually included | Consent; as of version 1.0, analytics is disabled |
| Newsletter | Email and recording of consent | Separate consent; no newsletter is connected as of version 1.0 date |
4. Recipients
The current contact form transmits the message sent via the Telegram Bot API. Access to the message gets the owner/authorized persons in Telegram. Hosting provider can process technical logs. Hosting, email, accounting and other providers are subject to owner confirmation; unconfirmed services are not named here.
5. Transfer outside the EU
The use of Telegram and future providers may result in data processing outside the EU. The specific processing locations and the transfer mechanism must be confirmed by the owner before the policy is approved. This text does not state the presence of an SCC or the provider’s participation in the EU-US Data Privacy Framework without such verification.
6. Storage periods
- enquiries that did not lead to the conclusion of the contract: 12 months after the last communication;
- Customer correspondence and technical support: during the service period plus 3 years after the last communication;
- orders and contract data: during the term of the contract, plus 3 years, except for data that must be stored longer under tax or accounting legislation;
- Accounting and tax documents: usually 5 years; VAT documents 10 years if applicable
- server logs: 30 days; records related to the investigation of a security incident are kept until the investigation is completed, but not for more than 90 days, unless the law or the protection of legal claims requires a longer period;
- consent record in the browser: before revocation, clearing the browser or changing the version of the policy;
- Analytics data: not collected while the service is disabled; when enabled, the time must be added;
- Marketing consent: the newsletter is not connected; when enabled, the term and proof of consent must be added.
7. User rights
In applicable cases, the user has the right to request access, rectification, deletion, restriction of processing, portability, object to processing on the basis of legitimate interest and withdraw consent without affecting the legality of previous processing. In the personal account there is a history of consents, withdrawal of marketing consent, request for correction, export of own data, request for deletion, viewing active sessions and recall of other sessions.
Exports are stored outside the public directory of the site and issued under a temporary one-time token. When deleting an account, optional profile and marketing data are deleted or anonymized after verification, and orders, payments, invoices, legally relevant consents, necessary license history and audit critical actions are retained within the terms and grounds of Section 6.
You may lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů). You are welcome to contact us first at info@algotradesystems.pro.
8. Obligation of data
Form fields marked as mandatory are required for processing. The user may not submit the form and contact the published email. Failure to provide information necessary for a contract or legal record may make the request impossible to comply with.
9. Automated solutions and changes
The repository does not implement solutions that create legal or similarly significant consequences solely by automatic means. When changing the services, purposes or terms, this policy and its version should be updated.