GDPR & Data Protection

The General Data Protection Regulation (GDPR) applies to every company that processes the personal data of residents and citizens of the European Union, regardless of where that company is located. Fortexa maintains its privacy practices in line with the GDPR.

In applying the GDPR, Fortexa gives its clients who are EU citizens and residents expanded rights to control their personal data, and follows clear rules for data collection and processing that are designed to strengthen data protection and improve the quality of our services.

Under the GDPR, "personal data" means any information relating to an identified or identifiable individual (the data subject) who can be determined, directly or indirectly, by reference to that information. This includes, among other things, a name, location data, and online identifiers, as well as one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual.

The European approach to processing personal data is built on six principles, which Fortexa applies to its processing activities:

1. Lawfulness, fairness, and transparency. Personal data is processed lawfully, fairly, and transparently, and information about the purposes, methods, and scope of processing is presented clearly and simply.
2. Purpose limitation. Data is collected and used only for the purposes stated by the company.
3. Data minimisation. Personal data is collected only to the extent necessary for the processing purposes.
4. Accuracy. Inaccurate personal data is deleted or corrected at the user's request.
5. Storage limitation. Personal data is not stored for longer than necessary for the processing purposes.
6. Integrity and confidentiality. We protect personal data against unauthorised or unlawful processing, destruction, and damage.

Within the framework of the GDPR, Fortexa acts as both a Data Controller and a Data Processor. This means we independently determine the purposes of data collection and process the necessary information accordingly.

If you are an EU citizen or resident, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data in certain circumstances;
• request restriction of, or object to, certain processing;
• receive your data in a portable, machine-readable format;
• withdraw consent where processing is based on consent;
• lodge a complaint with your local supervisory authority.

Some of these rights may be limited where we have a legal or regulatory obligation to retain certain information, such as records required under anti-money-laundering rules.

Measures We Have Taken

As part of our GDPR compliance, Fortexa has reviewed the systems through which personal information is transmitted and stored, and has implemented measures to:

• reduce the time during which each system retains personal information, in line with the storage-limitation principle;
• centralise information storage and management through updated internal communication processes;
• establish internal procedures for handling requests to access, correct, or delete personal data.

To exercise any of your rights under the GDPR, or for any questions about how we process your personal data, please contact our Data Protection Officer:

• Data Protection Officer: support.fortexatrade@gmail.com
• Privacy: support.fortexatrade@gmail.com

For full details of our data practices, please see our Privacy Policy.

Last updated: January 1, 2026