Last updated: 22 January 2025
Controller: Quant Beckman
Email (privacy): quantbeckman@gmail.com
Supervisory authority: Agencia Española de Protección de Datos (AEPD)

This notice follows GDPR transparency duties (Arts. 13–14), including who we are, what data we collect, purposes, legal bases, retention, rights, and international transfers. European Commission

1) What We Collect

• Identification & contact: name, email, country, billing address (if provided).

• Subscription & billing: plan, payment status, last 4 digits/brand of card (via processor), invoices, VAT data (if applicable).

• Usage & events: email delivery/opens/clicks, login timestamps, downloads, and page views (to operate the Service and handle disputes).

• Support communications: messages you send us.

• Device/technical data: IP address, device type, approximate location (country/region), cookies/identifiers (see Cookies).

2) Sources

Data is collected directly from you (signup, checkout, support) and automatically (service logs, email events, cookies). In limited cases we may receive data from payment processors (e.g., fraud checks) or platform providers (e.g., Substack account linkage).

3) Purposes & Legal Bases (GDPR Art. 6)

• Provide the Service & account management (contract: Art. 6(1)(b)).

• Process payments, invoicing, and tax compliance (legal obligation: Art. 6(1)(c)).

• Prevent abuse, secure accounts, and resolve disputes/chargebacks (legitimate interests: Art. 6(1)(f)).

• Send the newsletter and service communications (contract and/or consent depending on signup path).

• Marketing beyond the core service (consent: Art. 6(1)(a); you can withdraw any time).

• Analytics (low-intrusive, aggregated) to improve content (legitimate interests: Art. 6(1)(f), with controls).

GDPR requires clear identification of purposes, bases, storage, and rights. GDPR

4) International Transfers

Some processors (e.g., email delivery, analytics, Substack/Stripe) may process data outside the EEA. When transfers occur, we rely on Standard Contractual Clauses (SCCs) and complementary measures as appropriate. European Commission

5) Retention

• Account/billing records: duration of your subscription + up to 6 years (tax/accounting).

• Email events & logs: typically 12–24 months for deliverability and dispute handling.

• Support tickets: up to 24 months after closure.
  We will delete or anonymize data when retention isn’t required.

6) Sharing with Third Parties (Processors)

We use vetted service providers under data-processing agreements:

• Publishing & email: [Substack, provider details/quantbeckman.com]

• Payments: [Stripe Payments Europe, Ltd.]

• Analytics/ops: [e.g., Google Analytics (IP-masked), error logging, CDN]

• Support: [e.g., help desk/email provider]
  We do not sell your personal data.

7) Your Rights

You can access, rectify, erase, restrict, object, and port your data, and withdraw consent at any time (does not affect prior processing). You also have the right to lodge a complaint with the AEPD. Contact us at quantbeckman@gmail.com to exercise rights. GDPR

8) Cookies & Similar Technologies

We (and our providers) use cookies/pixels to operate logins, deliver emails, measure basic engagement, and prevent abuse. Where required, we request consent and provide granular controls. See our Cookie Notice for categories, lifetimes, and vendors.

Spanish/EU guidance stresses clear, layered notices and lawful bases for cookies. AEPD

9) Children

The Service is for adults and is not directed to children. Do not sign up if you are under 18.

10) Security

We implement appropriate technical and organizational measures (encryption in transit, access controls, least-privilege, and periodic reviews). No method is 100% secure; we notify users and authorities of breaches where required.

11) Automated Decision-Making / Profiling

We may segment subscribers (e.g., plan type or read frequency) to tailor content offers. We do not make decisions producing legal or similarly significant effects solely by automated means.

12) Communications Preferences

• Transactional emails (receipts, important service notices) are necessary for the Service.

• Marketing emails require your consent; you can unsubscribe at any time via the link in each email or by contacting us.

13) Changes to this Policy

If we make material changes, we will notify you (email or in-app). Continued use after effective date indicates acceptance.

14) Contact

Trading the Breaking — Quant Beckman
Madrid— Spain
privacy: quantbeckman@gmail.com