Privacy Notice
Last updated: October 2026
1. Controller
The controller responsible for data processing on this website is the service provider named in the Legal notice. You can reach us at Support1@naga.com.
2. What data we process
- Form details: first name, surname, email address, phone number with country dialling code.
- Technical data: IP address, date and time of access, browser and operating system, the page you visited before (server log files).
- Campaign data: identifiers in the web address through which you reached the website (e.g. ad and campaign identifiers).
3. Purposes and legal bases
- Handling your request and passing it to NAGA, so that NAGA can contact you about opening an account: your consent (Art. 6(1)(a) GDPR) and pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
- Operation and security of the website: our legitimate interest in providing a protected and properly functioning website (Art. 6(1)(f) GDPR).
- Measuring advertising performance: establishing whether a request results from a particular ad. Where cookies or similar technologies are placed on your device for this purpose, this is done only with your consent (Art. 6(1)(a) GDPR and the national rules implementing Article 5(3) of the ePrivacy Directive 2002/58/EC).
4. Recipients
- NAGA Markets Europe Ltd, Agias Zonis 11, 3027 Limassol, Cyprus – as an independent controller for contacting you and any account opening. NAGA’s own privacy policy applies to that processing.
- Technical service providers (hosting, email) acting on our behalf and in accordance with our instructions.
- Advertising partner Taboola (Taboola Europe Ltd / Taboola Inc.) for measuring advertising performance, only with your consent.
Data is transferred to countries outside the European Economic Area only on the basis of an adequacy decision of the European Commission or other appropriate protective mechanisms under Chapter V GDPR, such as the EU standard contractual clauses. We do not sell your data.
5. Retention period
We store form data for no more than 12 months after your request, unless statutory retention obligations apply. Server log files are deleted after 14 days at the latest. NAGA’s own retention periods apply at NAGA.
6. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw your consent at any time with effect for the future (Art. 7(3)), for example by email to Support1@naga.com.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live (Art. 77 GDPR); in Ireland this is the Data Protection Commission, in Malta the Information and Data Protection Commissioner.
7. Voluntary provision of data
Providing your data is voluntary. Without your name, email address and phone number, however, we cannot process your request. No automated decision-making, including profiling, takes place.
8. Changes
We amend this privacy notice when the website or the legal situation changes. The version published at the relevant time applies.