Privacy and cookie policy
This English text is provided for convenience only. The binding version of this policy is the Polish one, available at Polityka prywatności. In case of any discrepancy, the Polish wording prevails.
This document explains what personal data we collect, why, how long we keep it and what you can do about it. We have tried to write it plainly — if anything is unclear, write to mrmprotrading@gmail.com.
1. Who controls your data
| Controller | INSPIRED EVENTS Magdalena Sosnowska |
| Address | ul. Lokalna 24, 04-903 Warszawa, Polska |
| Tax ID (NIP) | 9521951613 |
| Data protection contact | mrmprotrading@gmail.com |
We have not appointed a data protection officer — for all matters concerning the processing of your data, write directly to the address above.
2. What data we collect
When you create an account
Your e-mail address and password. The password is stored only as an irreversible hash — we do not know it and cannot read it.
When you make a payment
The data that reaches us with your bank transfer: name, sender account number, amount, payment reference and the e-mail address given in it. We do not use a payment intermediary — funds go straight to our business account and we receive the data from our bank together with the transfer.
When you use the indicators
The indicators verify the validity of your licence by connecting to our server at start-up and periodically while running. The licence key and the MetaTrader account number the licence is assigned to are transmitted. The server records the date and IP address of the request.
The indicators do not send us your trade history, account balance, open positions or any data about your broker. Licence verification covers only what is needed to check whether access has been paid for.
When we issue an invoice
The data required to issue it: your name or company name, address, and for businesses also the tax identification number.
When you use the trading journal
The journal stores content you enter yourself:
- trade records — instrument, direction, entry and exit levels, result, dates and your notes on the trade,
- screenshots attached to entries,
- voice recordings attached to entries,
- account settings — starting capital and the currency the journal is kept in.
Trade records are linked to your account and therefore indirectly to your e-mail address. We treat them as personal data and protect them the same way as any other information about you. Entries are visible only to you after signing in — we do not analyse them, do not combine them with other users' data and do not use them for any purpose beyond running the journal itself.
Take care when uploading screenshots. A screenshot from a trading platform may contain your account number, balance or your name in the window title. We recommend covering those parts before uploading. Please also do not upload material containing other people's data.
You can delete the contents of the journal yourself at any time from the client area — both the database entries and the files attached to them are removed. Deleting the journal does not delete your account and does not affect access to the indicators.
When you sign up for a course
Before we show you the transfer details, we ask you to confirm your request for immediate access to the materials. We record the fact that this box was ticked together with the date, time, IP address and browser identification. The record contains neither your name nor your e-mail address — it serves solely to demonstrate that the information about losing the right of withdrawal was presented before the contract was concluded, as required by the Polish Consumer Rights Act.
Automatically, on every visit
IP address, browser type and version, operating system, the address of the page you came from, and the date and time of the visit. This data is recorded by the server in its logs and by our own visit counter.
3. Why we process it and on what basis
| Purpose | Legal basis | How long |
|---|---|---|
| Running your account and providing purchased materials | Art. 6(1)(b) GDPR performance of a contract |
Until the account is deleted |
| Order fulfilment and payment handling | Art. 6(1)(b) GDPR performance of a contract |
Until the contract ends |
| Indicator licence verification | Art. 6(1)(b) GDPR performance of a contract |
For the duration of the subscription |
| Running the trading journal — storing entries, screenshots and recordings | Art. 6(1)(b) GDPR performance of a contract |
Until you delete them or the account is closed |
| Issuing invoices and tax settlements | Art. 6(1)(c) GDPR legal obligation |
5 years from the end of the tax year |
| Demonstrating consent to immediate course access | Art. 6(1)(c) GDPR legal obligation |
Until claims become time-barred |
| Handling complaints | Art. 6(1)(c) GDPR legal obligation |
Until claims become time-barred |
| Site security, server logs | Art. 6(1)(f) GDPR legitimate interest |
Up to 12 months |
| Visit statistics and traffic analysis | Art. 6(1)(a) GDPR consent |
Until consent is withdrawn |
| Pursuing or defending against claims | Art. 6(1)(f) GDPR legitimate interest |
Until claims become time-barred |
4. Who we share data with
We do not sell your data and do not pass it to third parties for marketing purposes. Access is limited to those without whom the service could not run:
- Hosting provider — stores the site files and the database on servers located in Poland.
- Google Ireland Limited — for visit statistics (Google Analytics), if you consent to it.
- The bank holding our account — for handling transfers.
- Accounting office — for accounting documents, where we use such services.
- Public authorities — only where required by law.
5. Transfers outside the European Economic Area
Using Google Analytics may involve transferring data to the United States. Google declares participation in the Data Privacy Framework, recognised by the European Commission as ensuring an adequate level of protection. If you do not consent to statistics, no data reaches Google.
All other data is processed solely within the European Economic Area.
6. Your rights
In connection with the processing of your data you have the right to:
- access — you can ask what data we hold about you and receive a copy of it,
- rectification — you can correct inaccurate data or complete incomplete data,
- erasure — you can request deletion, unless a legal obligation stands in the way, e.g. keeping invoices,
- restriction of processing — you can request that we temporarily suspend operations on your data,
- portability — you can receive your data in a machine-readable format or ask us to send it to another controller,
- objection — you can object to processing based on our legitimate interest,
- withdrawal of consent — at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise any of these rights, write to mrmprotrading@gmail.com. We reply within one month of receiving the request.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, if you believe we process your data unlawfully. If you live in another EEA country, you may also contact your local supervisory authority.
7. Is providing data mandatory
Providing data is voluntary but necessary to conclude and perform the contract. Without an e-mail address you cannot create an account or receive access to purchased materials. Without a MetaTrader account number we cannot issue a licence key. Invoice details are provided only if you request an invoice.
8. Automated decisions and profiling
We do not make decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you. We do not profile you for marketing purposes.
9. Cookies
Cookies are small text files saved on your device by your browser. We use them for two purposes.
Necessary cookies
Without them the site will not work. They keep your session after signing in and remember your cookie choice. They do not require consent because they serve solely to deliver the service you asked for.
| Name | Purpose | Lifetime |
|---|---|---|
| PHPSESSID | Keeping the signed-in user's session | Until the browser is closed |
| mrm_cookies | Remembering your consent decision | 12 months |
| mrm_lang | Remembering your language choice | 12 months |
| mrm_geo | Country code used to pick the initial language | 30 days |
Analytics cookies
Saved only after you consent. They come from Google Analytics (identifier G-2NJ5FR0XS4) and let us see how many people visit the site, which pages they read and where they come from. They are not used to identify individuals or for advertising.
| Name | Purpose | Lifetime |
|---|---|---|
| _ga | Distinguishing users in the statistics | 24 months |
| _ga_* | Keeping session state in the statistics | 24 months |
Managing your consent
You make the decision in the banner shown on your first visit and can change it at any time — including by deleting cookies in your browser settings. Refusing analytics cookies does not limit your use of the site in any way.
Privacy settings and cookie deletion are in your browser menu, usually under "Privacy and security".
10. Security
We apply technical and organisational measures appropriate to the risk: encrypted transmission (HTTPS), storing passwords only as hashes, restricted database access, regular backups kept outside the public directory, and server software updates.
Backups
The database is backed up periodically and copies are kept for 7 days in a location not reachable from a browser, after which they are deleted automatically. This means that data you delete from the client area — journal entries, for instance — disappears from the site immediately but may still exist in backups for that period. We do not use backups for any purpose other than restoring the site after a failure.
11. Changes to this policy
We may update this policy when the law, the scope of our services or the tools we use change. The current version is always available at this address and the date it takes effect is shown at the top of the page. We will inform registered users by e-mail about any material changes.