Privacy / GDPRQRD / LEGAL FRAMEWORK / 2026

Privacy Policy

How Quant Research Desk handles personal data associated with its website and communications.

Last updated 1 October 202617 sections
01

Purpose of this Privacy Policy

This Privacy Policy explains how personal data relating to visitors and correspondents of quantresearchdesk.com may be processed by Quant Research Desk (QRD), operated by Coccaro Roberto Ignacio and Amin Hydarali. It is intended to provide transparency consistent with Regulation (EU) 2016/679 (GDPR) and applicable Italian data-protection law.

02

Data controller(s)

The final legal controller identity must match QRD's real operating structure. Before permanent publication, confirm whether the Founders act as joint controllers, one Founder acts as sole controller, or a company/legal entity operates QRD.

Pending that confirmation, where Coccaro Roberto Ignacio and Amin Hydarali jointly determine the purposes and means of a QRD processing activity, they should be treated as joint controllers for that activity.

03

Categories of personal data

Depending on configuration, QRD may process identification/contact data voluntarily provided by users; correspondence; technical logs such as IP address, timestamp, browser/device information, requested URL and security events; cookie or similar identifier data; newsletter subscription data if offered; and analytics information if analytics tools are enabled.

QRD should not intentionally request special-category personal data, financial account credentials or trading-account passwords through ordinary website forms.

04

How data are collected

Personal data may be collected directly from the user, automatically through the Website and server logs, through cookies/trackers subject to the Cookie Policy, or from service providers supporting hosting, security, analytics, communications or content delivery.

05

Purposes and legal bases

Website operation and security may rely on legitimate interests and/or performance of a user-requested service. Enquiries may be processed to respond to messages and manage communications. Newsletters or optional marketing communications should be sent on the basis of consent where required. Analytics and non-essential cookies must follow applicable cookie rules and, where required, valid consent. Data may also be processed for legal compliance and claims.

06

Data minimisation

QRD should process only personal data reasonably necessary for the stated purposes and should configure forms and analytics to avoid unnecessary collection.

07

Recipients and processors

Personal data may be disclosed to hosting/cloud providers, website platform providers, security/anti-abuse providers, email/newsletter providers, analytics providers, professional advisers and competent authorities where lawfully required. Service providers acting as processors should be bound by appropriate data-processing obligations.

QRD should maintain an internal inventory of the providers actually used and ensure the final policy accurately describes them.

08

International transfers

Some service providers may process data outside the European Economic Area. Where required, QRD should rely on a lawful transfer mechanism such as an adequacy decision, Standard Contractual Clauses or another mechanism permitted by GDPR, together with supplementary safeguards where appropriate.

09

Retention

Personal data should be kept no longer than necessary for the purposes for which they were collected, subject to legal, security and claims requirements. Exact retention periods should be finalised after reviewing the actual hosting, analytics, email and security systems rather than publishing invented periods.

10

Cookies and tracking

Cookies and similar technologies are addressed in the Cookie Policy. Non-essential trackers should not be activated before consent where consent is required. Users should be given a mechanism to change or withdraw consent as easily as they gave it.

11

Data subject rights

Subject to GDPR conditions and exceptions, individuals may have rights of access, rectification, erasure, restriction, objection, data portability and withdrawal of consent. They may also have rights concerning certain automated decision-making where applicable.

12

Right to complain

Individuals have the right to lodge a complaint with a competent supervisory authority. For processing subject to Italian supervision, this may include the Garante per la protezione dei dati personali.

13

Automated decision-making

QRD research may involve algorithms and quantitative models concerning financial markets, but the ordinary public Website should not use visitors' personal data to make decisions producing legal or similarly significant effects unless expressly disclosed and lawfully implemented.

14

Children

The Website is not intentionally directed to children for the purpose of collecting personal data. If services are later offered specifically to minors, QRD should implement age-appropriate disclosures and any required parental-consent mechanisms.

15

Security

QRD should implement appropriate technical and organisational measures proportionate to risk, which may include access control, secure hosting, TLS, backups, patching, logging, least-privilege access and appropriate vendor controls. No online system can be guaranteed completely secure.

16

Links to third parties

Third-party sites have their own privacy practices. QRD is not responsible for their processing merely because the Website links to them. Users should review the privacy notices of those services.

17

Changes to this Policy

QRD may update this Policy to reflect changes in the Website, providers, legal requirements or processing. The latest version should be published with a revised date and material changes communicated where required.