GDPR

Effective date: 3 April 2026

This page explains your rights under the General Data Protection Regulation (EU) 2016/679 and how to exercise them. For a general overview of what data we collect and why, see our Privacy Policy.

Data Controller

Trigger is the data controller responsible for your personal data. For all GDPR-related requests, contact us at . We do not have a formal Data Protection Officer (DPO) as we do not meet the thresholds requiring one under Art. 37 GDPR, but the contact above handles all data protection matters.

Legal Basis for Processing

GDPR requires us to identify the legal basis for each type of personal data we process.

DataLegal basis
Email address and hashed passwordContract
Display nameContract
Subscription tier and daily usage counterContract
Watchlist (saved stock symbols)Contract
Last-seen timestamp per stockLegitimate interest
Hashed IP addressLegitimate interest
Cookie consent preferenceLegal obligation

International Data Transfers

Your personal account data is stored on infrastructure within the European Union. However, when you request stock event analysis, publicly available press release text (containing no personal data) is sent to an AI provider based in the United States. This transfer is covered by Standard Contractual Clauses (SCCs) under Art. 46 GDPR. No personal data is included in these transfers.

Your Rights

All requests are handled within 30 days. We may ask you to verify your identity before actioning a request.

Right of Access (Art. 15)

You can request a full copy of the personal data we hold about you. We will provide it in a readable format within 30 days. To request access, email info@triggrtrackr.com with the subject line "Data Access Request".

Right to Rectification (Art. 16)

If any data we hold about you is inaccurate or incomplete, you can ask us to correct it. You can update your display name directly in Profile > Account. For other corrections, contact us at info@triggrtrackr.com.

Right to Erasure (Art. 17)

You have the right to have your personal data deleted. You can delete your account and all associated data immediately via Profile > Account > Delete account. Alternatively, contact us at info@triggrtrackr.com and we will action the deletion within 7 days.

Right to Data Portability (Art. 20)

You can request a machine-readable export of your personal data (account details and watchlist). Email info@triggrtrackr.com with the subject line "Data Export Request" and we will provide a JSON export within 30 days.

Right to Restriction of Processing (Art. 18)

You can ask us to temporarily stop processing your data — for example, if you contest its accuracy or have objected to processing while we assess your objection. Contact us at info@triggrtrackr.com to make this request.

Right to Object (Art. 21)

You can object to processing based on legitimate interest (specifically: last-seen timestamps and IP-based rate limiting). If you object, we will stop that processing unless we can demonstrate compelling grounds. Contact us at info@triggrtrackr.com.

Right Not to Be Subject to Automated Decision-Making (Art. 22)

We do not make any automated decisions that produce legal or similarly significant effects about you. AI analysis in Trigger is applied to publicly available stock data, not to your personal profile.

Right to Withdraw Consent (Art. 7)

Where processing is based on your consent (currently: cookie consent), you can withdraw it at any time by clearing your browser's site data for this domain or by clicking "Decline" on the cookie banner. Withdrawal does not affect processing that occurred before withdrawal.

Supervisory Authority

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Swedish supervisory authority:

Integritetsskyddsmyndigheten (IMY)

imy.se

Box 8114, 104 20 Stockholm, Sweden

+46 8 657 61 00

You may also contact the supervisory authority in your country of residence within the EU.