Hubnity GDPR Compliance

Last updated: June 22, 2026

The General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") sets out rules for the protection of personal data of individuals in the European Economic Area ("EEA"). The UK GDPR provides equivalent protections in the United Kingdom. Hubnity, operated by FENS Trade FZ-LLC ("Hubnity", "we", "us", or "our"), is committed to processing personal data in line with these laws.

This page summarizes how we support GDPR compliance. It complements our Privacy Policy, Data Processing Agreement, and Sub-processors list, which together describe our data protection practices in detail.

When you use Hubnity to process data about your own staff or contacts, you act as the data controller and Hubnity acts as the data processor, processing that data on your documented instructions. For the limited data we process for our own purposes, such as account administration, billing, and security, we act as a controller. Our processor obligations are set out in our Data Processing Agreement.

Where we act as a controller, we rely on one or more lawful bases under Article 6 of the GDPR, including performance of a contract, compliance with a legal obligation, your consent, and our legitimate interests in operating and improving the Services. Where we rely on consent, you may withdraw it at any time.

Individuals in the EEA and the UK have the following rights regarding their personal data:

• 1.the right of access (Article 15);
• 2.the right to rectification (Article 16);
• 3.the right to erasure (Article 17);
• 4.the right to restrict processing (Article 18);
• 5.the right to data portability (Article 20);
• 6.the right to object (Article 21);
• 7.the right to lodge a complaint with a supervisory authority (Article 77).

If Hubnity processes your data on behalf of a customer (for example, your employer), please direct your request to that customer, who acts as the controller. We will assist them in responding. Otherwise, you can exercise your rights as described in our Privacy Policy or by contacting us at info@hubnity.eu.

Customer Personal Data is hosted on infrastructure located in the European Union (Germany), provided by IONOS, including object storage for files and screenshots. Keeping primary data within the EU helps our EEA and UK customers meet their data residency and data protection obligations.

Some of our Sub-processors operate outside the EEA. Where personal data is transferred to a country that has not been recognized as providing an adequate level of protection, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK Addendum, where applicable), as described in our Data Processing Agreement.

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and ongoing monitoring. A summary of these measures is included in our Data Processing Agreement.

We maintain procedures to detect and respond to personal data breaches. Where we act as a processor, we will notify the affected customer without undue delay after becoming aware of a breach affecting their data, so they can meet their notification obligations.

We engage trusted Sub-processors under contractual data protection obligations. Our current Sub-processors are listed on our Sub-processors page.

For any questions about our GDPR practices, or to exercise your rights, contact our privacy team at info@hubnity.eu. You also have the right to lodge a complaint with your local supervisory authority if you believe your data has not been handled in accordance with the GDPR.