Privacy Policy and Data Protection – Leste Investenza

Version 4.0 – Last updated: April 28, 2026

Article 1: Identification of the data controller

This Privacy Policy defines the strict data processing protocols maintained by Leste Investenza ("the Platform", "we", "us"), headquartered at Koning Albert II-laan 15, 1210 Brussels, Belgium. We act as a data controller in accordance with the General Data Protection Regulation (GDPR) and Belgian legislation. To ensure absolute data integrity, we have appointed a Data Protection Officer (DPO), reachable via: [email protected].

Article 2: Categories of Personal Data Processed

To provide institutional-level analytical and technical services, we collect the following data:

Identity Data: Full name, date of birth, nationality, and official identification required for mandatory KYC (Know Your Customer) and AML (Anti-Money Laundering) verification.

Financial and Technical Telemetry: Information on the origin of funds, transaction history, and risk profiles linked to our analytical interfaces.

Digital Footprint: IP addresses, device specifications, geographical location data, and detailed logs of interaction with our systems.

Article 3: Legal Basis for Processing

The processing of your data is based on the following legal grounds:

Performance of the contract: Necessary to manage your account and provide our technical services.

Legal obligations: Compliance with Belgian legislation, including the Anti-Money Laundering Act and tax reporting requirements.

Legitimate interests: Necessary for proactive cybersecurity, fraud prevention, and continuous technical optimization of the platform.

Consent: For sending specialized market analyses and using non-essential cookies.

Article 4: Data Security and Sovereignty

Leste Investenza employs enterprise-grade security architecture:

Encryption: All sensitive data is stored with AES-256 encryption and transmitted via TLS 1.3.

Hosting: Data is exclusively stored on strictly secured servers within the EEA (European Economic Area), guaranteeing full protection under European data sovereignty rules.

Article 5: Your rights

You have the right to access, rectification, erasure ("right to be forgotten"), restriction of processing, and data portability. Requests can be sent to [email protected]. You also have the right to lodge a complaint with the Belgian Data Protection Authority (GBA).