Data protection · GDPR
Privacy policy
Last updated: 2026-07-30
Data controller
- Name: Álvaro Rodríguez Ilárraz
- Tax ID (NIF): 05458361R
- Registered address: Calle Cerro del Aire, 3 · 28221 Madrid · Spain
- Contact: support@istradeable.com
Data we process
| Category | Data | When |
|---|---|---|
| Email list | Email address | When you submit the form and confirm the address |
| Consent evidence | Form consent, form and confirmation UTC timestamps, notice version and registration source recorded in Brevo | When you submit the form and click the confirmation link |
| Email administration | Delivery, bounce, complaint and unsubscribe events | When an email is sent or you change your preference |
| Technical | IP address, user-agent and security logs | When your browser connects to the service |
We do not create an account, collect a password or process payment information through this form.
Purpose and legal basis
- IsTradeable emails (art. 6.1.a GDPR, consent): to verify your address through double opt-in and, only after confirmation, send occasional emails about trading systems, backtesting and robustness, IsTradeable product updates and related offers. There is no fixed sending schedule.
- Managing delivery and withdrawal (art. 6.1.a and 6.1.c GDPR): to process bounces, complaints and unsubscribe requests and to keep the minimum evidence needed to respect your choice.
- Security and abuse prevention (art. 6.1.f GDPR, legitimate interest): to protect the form and service against spam, fraud and technical abuse.
- Legal obligations (art. 6.1.c GDPR): where information must be retained or disclosed by law.
Consent is optional and refusing it has no adverse consequence. Submitting the form does not complete the subscription: you must click the verification link sent to your address. You can withdraw consent at any time using the unsubscribe link included in every promotional email or by contacting us. Withdrawal does not affect processing already carried out.
Processors and transfers
- Brevo (Sendinblue SAS) — stores the submitted email and consent evidence, sends emails and processes delivery and unsubscribe events.
- Railway Corp. — hosts the website and processes the technical requests needed to operate it.
Where a provider processes data outside the European Economic Area, the transfer must be covered by an adequacy decision, Standard Contractual Clauses or another safeguard recognised by the GDPR.
We do not sell your personal data or use this email list for automated decisions that produce legal or similarly significant effects.
Retention
Before confirmation, the address is used only to send the verification message and is not added to the promotional list. Confirmation links expire after 48 hours. Confirmed addresses are kept while you remain subscribed. We periodically review the active list and remove addresses after 24 months without relevant interaction, unless there is a justified reason to retain them for longer. If you unsubscribe or withdraw consent, your address is removed from active mailings without undue delay. A minimal suppression and consent record may be retained to demonstrate compliance and prevent further messages. Information may be kept longer where required by law or to establish, exercise or defend legal claims.
Your rights
You may exercise your rights of access, rectification, erasure, restriction, portability and objection, or withdraw consent, by writing to support@istradeable.com. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
Security
Traffic is encrypted using HTTPS. Access to the hosting and email providers is restricted using private credentials, and the public form never receives the Brevo API key.