The protection of our clients' privacy is of fundamental importance to StormWave Technologies. We prioritize confidentiality and individual privacy in all our operations, both online and offline. This privacy policy constitutes a crucial part of our relationship with users and is applicable to all services and the NervaTrade website.
We operate in compliance with EU Regulation 2016/679 ("GDPR"), which establishes the rules regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data. We strictly respect users' rights regarding the processing of their personal data, ensuring transparency, security, and compliance with current regulations.
This policy is an essential element of the relationship between StormWave Technologies (hereinafter referred to as "SW" or "Provider") and the user, regardless of the purchase and use of the services offered. The policy also describes the rights of customers in relation to the processing of their personal data, in accordance with Articles 13 and 14 of the GDPR.
In accordance with Art. 4, paragraph 7 of EU Regulation 2016/679 (GDPR), the data controller for the data collected through this website and related services is STORMWAVE TECHNOLOGIES. The data controller is the natural or legal person, public authority, service, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. The data controller is responsible for ensuring that personal data is processed lawfully, fairly, and transparently, in compliance with current regulations.
In cases where the use of data requires user consent, such consent will be obtained in accordance with Art. 7 of the GDPR. Consent may be provided through the signing of an agreement or through any other adherence model that will be made available. The explicit or implicit consent of the user therefore constitutes the legal basis for the processing of personal data pursuant to Art. 6, paragraph 1, letter a) of the GDPR. The user has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal, by contacting the Provider at the contact details specified in this Privacy Policy.
If StormWave Technologies intends to process personal data for a purpose other than that for which it was collected, we will provide the user with all necessary information regarding the new purpose, in accordance with Art. 13, paragraph 3 of the GDPR. For further information on how processing for the new purpose is compatible with the original purpose, the user can contact us via email at: info@stormwave.co or at privacy@stormwave.co.
Pursuant to Art. 3 of the GDPR, it is specified that the processing of personal data generated by the use of the website and the services offered by the Provider takes place in Canada. However, StormWave Technologies is committed to ensuring an adequate level of protection for personal data transferred outside the European Union, in accordance with the standards established by the GDPR. If personal data is transferred to a third country or an international organization, appropriate measures will be taken to ensure that personal data is processed with an adequate level of protection, in accordance with Arts. 44-50 of the GDPR.
In accordance with Art. 37 of the GDPR, StormWave Technologies has designated a Data Protection Officer (DPO) to monitor compliance with data protection regulations. The DPO can be contacted for any matters relating to the processing of personal data at the following contact details:
Users, as data subjects, have the right to exercise the rights provided for by Arts. 15-22 of the GDPR, including the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing. To exercise these rights, users can contact the Provider at the contact details specified in this Privacy Policy.
In accordance with Art. 12 of the GDPR, StormWave Technologies ensures that all information and communications relating to the processing of personal data are easily accessible, understandable, and provided in clear and simple language. Any changes to this Privacy Policy will be promptly communicated to users, ensuring transparency and respect for the rights of data subjects.
Among the information collected, some is essential for the conclusion and management of the services offered; others, although not essential, help us to offer high product standards and personalize the user experience. The collection of this data takes place in compliance with the principles of minimization and relevance established by Art. 5, paragraph 1, letter c) of the EU Regulation 2016/679 ("GDPR").
By using the Site, we will collect some of the following Personal Data through your voluntary disclosure (hereinafter also referred to as "Personal Data" and/or "Data"). The Personal Data collected may include the following:
By using the Portal and our Services, the customer consents to the collection of their Personal Data, including:
The above information is processed in an automated and aggregated form to verify the correct functioning of the site and for security reasons. This information will be processed according to the legitimate interests of the controller, as provided for by Art. 6, paragraph 1, letter f) of the GDPR.
Additionally, we may also receive personal data from our business partners and other third parties, in compliance with current regulations and respecting the rights of data subjects.
For security reasons (anti-spam filters, firewall, virus detection), automatically recorded data may also include Personal Data such as the IP address, which may be used, in accordance with applicable laws, to block attempts to damage the Site or harm other users, or in case of harmful or criminal activities. Such data is never used for the identification or profiling of the user, but only for the protection of the website and our users, in compliance with Art. 6, paragraph 1, letter f) of the GDPR.
We reserve the right to record any communication, whether electronic, telephonic, in person or otherwise, that we may have with our customers. Such recordings will be the exclusive property of SW and will constitute evidence of the communication. Telephone conversations may be recorded with the use of a warning notice, in compliance with current data protection regulations.
The personal data collected is processed for the following purposes:
Personal data will be retained for the time necessary to satisfy the purposes for which it was collected, in compliance with the principles of storage limitation and data minimization established by Art. 5, paragraph 1, letters e) and c) of the GDPR.
In the context of using Telegram bots developed by StormWave Technologies, data provided by users in private chats with the bot is collected through the Telegram API. The data collected includes:
No geolocation data, IP addresses, phone numbers, or emails are collected. Data collection is strictly limited to public data as specified in point 3.1 of Telegram's privacy policy (https://telegram.org/privacy/eu). This approach complies with the data minimization principles provided for by Art. 5, paragraph 1, letter c) of EU Regulation 2016/679 ("GDPR").
The processing of data collected through Telegram bots is managed exclusively by StormWave Technologies and is not delegated to third parties. The personal data collected is used solely for the proper functioning of the produced bots, to authenticate and identify users, to send messages in the bot chat, and to provide updates on the bot and StormWave products. This processing is based on the legitimate interest of the data controller, in accordance with Art. 6, paragraph 1, letter f) of the GDPR.
To ensure an optimal user experience and in compliance with the purposes of the bot, the bot may require, for its use, membership to a specific Telegram channel. This requirement is implemented to verify the authenticity of users and to provide a personalized and secure service.
Data collected through Telegram bots is retained for the time strictly necessary to satisfy the purposes for which it was collected, in compliance with the principles of storage limitation established by Art. 5, paragraph 1, letter e) of the GDPR. Once the processing purposes have been achieved, the data will be deleted or anonymized, unless its retention is required to fulfill legal obligations.
Users have the right to access their personal data, request its rectification or deletion, object to processing, and exercise the other rights provided for by Arts. 15-22 of the GDPR. Requests can be submitted to the Data Protection Officer (DPO) at the contact details specified in this Privacy Policy.
To improve communication between the provider and the customer, StormWave Technologies reserves the right to move customers within Telegram groups or channels belonging to StormWave using the user's chat ID. This process is aimed at facilitating the dissemination of important information, updates on products and services, as well as providing more efficient and personalized customer support. Users will be informed of such movements and can always choose to leave the groups or channels in which they have been added. This data processing is carried out in compliance with current regulations and based on the legitimate interest of the data controller, as provided for by Art. 6, paragraph 1, letter f) of the GDPR.
In the context of using the Telegram bots developed by StormWave Technologies, we adopt advanced hashing (and salting if deemed necessary) techniques to ensure the protection of users' personal data. These techniques are implemented to maintain an "anonymous memory" of the data, both for security reasons and for fraud prevention, especially for those users who access the chatbot and reject the terms of this document. The adoption of such techniques is crucial to prevent the abuse of technologies and free credits offered. Hashing converts personal data, such as the Telegram user ID, into a unique string of characters using secure cryptographic algorithms. Salting adds an additional level of security, combining the data with a unique value before hashing, ensuring that even identical data generate different hashes. These procedures ensure that anonymous data cannot be easily traced back to users without additional information, thus protecting the privacy and security of users in compliance with current regulations.
In the context of purchasing digital products through Telegram bots developed by StormWave Technologies, personal data such as email may be collected for marketing and communication purposes. This collection is essential for sending product updates, promotional offers, and other relevant communications to users. The collection and processing of such data takes place in compliance with current personal data protection regulations, particularly in accordance with Regulation (EU) 2016/679 ("GDPR"). According to Art. 6, paragraph 1, letter b) of the GDPR, processing is lawful when it is necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures taken at the request of the data subject. By purchasing a digital product through Telegram bots and providing their personal data, the user automatically accepts this Privacy Policy, data processing, and StormWave Technologies' terms and conditions. This implies that the user consents to the use of their data for marketing and communications related to the purchased products. StormWave Technologies considers the legitimate interest of maintaining effective and personalized communication with its customers as the legal basis for processing the collected data, in accordance with Art. 6, paragraph 1, letter f) of the GDPR. Users have the right to withdraw their consent at any time, without prejudice to the lawfulness of processing based on consent before its withdrawal. They can also exercise the other rights provided for by Arts. 15-22 of the GDPR, such as the right of access, rectification, erasure, and objection to data processing, by contacting the Data Protection Officer (DPO) at the contact details specified in this Privacy Policy.
By using the Portal, the Website, and SW Services, the user consents to the use and storage of cookies on their device, in accordance with Art. 6, paragraph 1, letter a) of EU Regulation 2016/679 ("GDPR"). A cookie consists of a reduced set of data transferred to the browser from a web server and can only be read by the server that performed the transfer. However, it is also possible to browse the Portal without cookies, although it is important to know that most browsers accept them automatically.
Within the Portal, cookies can be classified as follows:
You can withdraw your consent to the use of cookies at any time by changing your browser settings to reject cookies or to alert you when a cookie is sent to your device. Please note, however, that if you delete cookies or refuse to accept them, you may not be able to use all the features offered, store your preferences, and some services may not be displayed correctly. This management is in accordance with Art. 7, paragraph 3 of the GDPR, which allows for the withdrawal of consent at any time.
For more information on the cookies used, including third-party cookies, and for a more detailed description of the purposes for which they are used, please refer to our dedicated Cookie Policy. It provides details on how you can manage your cookie preferences through browser settings and other available tools.
In accordance with Art. 12 of the GDPR, StormWave Technologies ensures that all information relating to the use of cookies is easily accessible, understandable, and provided in a simple and clear language. Any changes to our Cookie Policy will be promptly communicated to users, ensuring that they can take note of the new conditions before they become effective.
Users' personal information is processed using automated and manual methods, strictly to the extent and for the time necessary for the specific purposes for which such information was originally collected, in accordance with Art. 5, paragraph 1, letters b) and e) of EU Regulation 2016/679 ("GDPR").
Personal information processed through StormWave Technologies' services and products should be considered provided by the user in a conscious and voluntary manner. Therefore, StormWave is not responsible for any violations of laws or false statements provided by users. It is the user's responsibility to ensure they have the necessary permission to enter personal data of third parties or content protected by national and international laws, including intellectual property rights, in accordance with Art. 6 of the GDPR.
StormWave uses secure physical and digital systems to store users' personal data. It is guaranteed that personal data is protected against unauthorized access, disclosure, or destruction through appropriate technical and organizational measures, in accordance with Art. 32 of the GDPR. Such measures include, but are not limited to, data encryption, user authentication systems, and access management procedures.
Personal data is processed and stored only for the time necessary to achieve the purposes for which it was collected. However, in accordance with European regulations, personal data will be kept for no longer than 6 months after any deletion request by the user, unless there is a need for retention to comply with legal and tax obligations, or for the exercise of legal rights. In particular:
As part of the processing of personal data, StormWave may share data with:
All the above-mentioned parties, in order to cooperate with StormWave, must agree to be bound by the obligations contained in this Policy and comply with the requirements of the GDPR. Third parties must adopt adequate security measures to protect users' personal data and ensure the confidentiality and integrity of the information.
Whenever users' personal data is transferred outside the European Economic Area (EEA), StormWave is committed to ensuring a degree of data security similar to that provided by European regulations, applying the standard contractual clauses adopted by the European Commission, in accordance with Arts. 44-50 of the GDPR. Other appropriate measures are also implemented to ensure that personal data is processed securely and in compliance with current regulations.
Users' personal data is processed for the following purposes, in accordance with Art. 6 of EU Regulation 2016/679 ("GDPR"):
Only with the clear consent of the user, personal data may be processed for marketing purposes, in accordance with Art. 6, paragraph 1, letter a) of the GDPR. Marketing activities may include:
Consent for the processing of personal data for marketing purposes may be withdrawn at any time by the user, without affecting the lawfulness of processing based on consent before its withdrawal, in accordance with Art. 7, paragraph 3 of the GDPR. The user can exercise this right by contacting StormWave at the contact details provided in this Privacy Policy.
In addition to the specifically mentioned purposes, personal data may be processed to pursue StormWave's legitimate interests, provided that such interests do not override the user's fundamental rights and freedoms. These legitimate interests include Platform management and maintenance, information security, fraud prevention, and conducting aggregate statistical analyses (Art. 6, paragraph 1, letter f) of the GDPR).
StormWave may process users' personal data for profiling purposes, in order to analyze or predict aspects relating to personal preferences, interests, or the behavior of users, with the explicit consent of the user. Profiling will be carried out in compliance with legal provisions and will ensure appropriate measures to protect the rights and freedoms of data subjects, as provided for by Art. 22 of the GDPR.
StormWave is committed to providing users with clear and transparent information about the purposes of processing personal data, in accordance with Art. 13 of the GDPR. Any changes to processing purposes will be communicated to users promptly, ensuring that they have the opportunity to evaluate and, if necessary, object to such changes.
In accordance with EU Regulation 2016/679 ("GDPR"), users, as data subjects, have several rights regarding their personal data. These rights include:
In case of a violation of their rights, users have the right to lodge a complaint with the competent supervisory authority. In Canada, the responsible authority for personal data protection is the Privacy Commissioner of Canada. Users may also lodge a complaint with the supervisory authority of their country of residence within the European Union, in accordance with Art. 77 of the GDPR.
To exercise the rights listed above, users can contact StormWave at the following contact details:
StormWave is committed to responding to users' requests regarding their rights within one month of receiving the request, as provided for by Art. 12 of the GDPR. This period may be extended by two months, if necessary, taking into account the complexity and number of requests. In such cases, StormWave will inform the user of the extension and the reasons for the delay within one month of receiving the request.
In case of reasonable doubts concerning the identity of the natural person making a request pursuant to Articles 15 to 21 of the GDPR, StormWave may request additional information necessary to confirm the identity of the data subject, in accordance with Art. 12, paragraph 6 of the GDPR.
StormWave Technologies adopts appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Art. 32 of EU Regulation 2016/679 ("GDPR"). These measures include protection against unauthorized access, loss, disclosure, or destruction of personal data, through the use of physical and digital security systems, data encryption, and access control policies.
In addition to the Provider, access to personal data is limited to those involved in the organization of the Portal, such as administrative, commercial, marketing, legal staff, and system administrators, as well as external parties such as technical service providers, mail carriers, hosting providers, IT companies, and communication agencies. All employees and related parties are bound by confidentiality principles and have accepted strict conduct obligations, in accordance with Art. 29 of the GDPR.
StormWave ensures that its staff is adequately trained on data security policies and privacy protection procedures, in accordance with Arts. 24 and 39 of the GDPR.
In the event of a personal data breach, StormWave is committed to promptly notifying the competent supervisory authority within 72 hours of becoming aware of the breach, as provided for by Art. 33 of the GDPR, and to the data subjects if the breach represents a high risk to their rights and freedoms, in accordance with Art. 34 of the GDPR.
It is essential for users to be aware that, despite all security measures adopted, no system can guarantee 100% security of information transmitted over the network. Therefore, users accept the risks associated with transmitting their data to StormWave and release the latter from any liability arising from unforeseeable events not attributable to the Provider.
Users have the right to revoke their consent to receive informational or marketing communications at any time. To exercise this right, users can send an email to privacy@stormwave.co, explicitly expressing their desire to opt-out of such communications, in accordance with Art. 7, paragraph 3 of the GDPR.
Even after opting out of marketing communications, users may continue to receive information related to the use of the website or their account, such as notifications regarding changes to terms of service, security updates, inspections, or other communications necessary for managing the contractual relationship, in accordance with Art. 6, paragraph 1, letter b) of the GDPR.
StormWave may provide an opt-out link at the bottom of all electronic marketing communications, allowing users to easily revoke their consent to future communications.
In the event of consent revocation, the user's personal data related to marketing communications will be deleted or anonymized, unless retention is necessary for fulfilling legal obligations or managing disputes, as provided for by Art. 17 of the GDPR.
Users have the right to access their personal data, request its rectification, erasure, restriction of processing, and portability, as well as to object to processing for legitimate reasons, by contacting the Provider through the contact details provided in this Privacy Policy, in accordance with Arts. 15-22 of the GDPR.
10.1.1 By providing their personal data and using the Portal and Services of StormWave Technologies, the user expressly and fully accepts this Privacy Policy. This explicit consent complies with Art. 7 of EU Regulation 2016/679 ("GDPR"), which establishes the conditions for consent.
10.1.2 By continuing to use the website, the user acknowledges having had the opportunity to read, review, and consider this Privacy Policy, and accepts it in all its parts. In case of lack of understanding or acceptance of the Privacy Policy, the user is required to immediately cease the use of the site and associated services, in accordance with Art. 6, paragraph 1, letter a) of the GDPR.
10.1.3 The acceptance of this Privacy Policy implies that the user consents to the processing of their personal data as described in the document, including the collection, use, storage, and sharing of the data, in compliance with the applicable legal provisions.
10.2.1 StormWave Technologies reserves the right to modify, revise, or update this Privacy Policy at any time, to reflect legislative changes, technological developments, or changes in business practices, in accordance with Art. 12 of the GDPR, which establishes the obligation to inform data subjects of any changes to data protection policies.
10.2.2 Users will be informed of relevant changes through notices published on the website or through other appropriate means (e.g., email, in-app notifications, social channels), ensuring they have the opportunity to take note of the new conditions before they become effective. This notification process is in accordance with Art. 13, paragraph 3, and Art. 14, paragraph 4 of the GDPR.
10.2.3 Changes to the Privacy Policy will become effective from the moment of their publication on the website, unless otherwise specified. By continuing to use the site and services after the changes come into effect, the user automatically accepts the new conditions of the Privacy Policy.
10.2.4 In the event of substantial changes requiring new consent, StormWave Technologies will request it again from users, in accordance with Art. 7 of the GDPR.
This Privacy Policy is governed by and interpreted in accordance with Canadian law and applicable international data protection regulations, including the GDPR.
For any disputes arising from the interpretation or application of this Privacy Policy, the parties accept the exclusive jurisdiction of the competent courts of Vancouver, British Columbia, Canada, unless otherwise provided by mandatory legal provisions.
This Privacy Policy is governed by and interpreted in accordance with Canadian law and applicable international data protection regulations, including the GDPR.
For any disputes arising from the interpretation or application of this Privacy Policy, the parties accept the exclusive jurisdiction of the competent courts of Vancouver, British Columbia, Canada, unless otherwise provided by mandatory legal provisions.
For any questions, concerns, or requests regarding this Privacy Policy or the processing of personal data, users can contact StormWave Technologies at the following contact details:
This document was updated on 01/01/2025 to comply with relevant regulations, particularly in accordance with EU Regulation 2016/679 (GDPR).
Location and Date
Vancouver, 01/01/2025
StormWave Technologies