Privacy information on news processing
Last updated on
This page translates the German original . If the two ever differ, the German version applies.
This information is addressed to people who are named in reports that Quorvyn News evaluates. It is not addressed to users of the application, for whom a separate notice applies. We do not collect your data from you but from published sources, and so we inform you under Article 14 of the General Data Protection Regulation.
Who is responsible
Benny Botsch, trading as Quorvyn,
Chemnitzer Straße 202, 12621 Berlin, Germany.
For data protection matters, please write to contact@quorvyn.de.
No data protection officer has been appointed, because the legal requirements for one are not met here.
Where the data comes from
Only from published sources, and from two kinds of them.
The first kind is disclosures that companies are required to publish. At present these are current reports on Form 8-K, which companies file with the US Securities and Exchange Commission (SEC) and which the SEC makes publicly available in its EDGAR system.
The second is the publicly accessible event database of the GDELT Project (Global Database of Events, Language, and Tone). GDELT analyses news reports from around the world by machine and records in structured form who did what to whom, when and where. We read only these structured records. We do not retrieve the reports from which GDELT derived them.
We keep a record of exactly which sources are evaluated in our internal list of sources. If a source is added, we update this information. We do not search social networks, we do not buy address data and we use no source that is not public in the first place.
What data is processed
From mandatory disclosures we process the text of a report and its metadata, that is the title, the source, the author where one is given, the time of publication and the link to the original. If you are named in such a report, your name becomes part of that text. This is typically the case if you sit on a company’s board or belong to its management. We do not currently evaluate the reportable securities transactions of executives.
From the GDELT event database each entry contains the names of the actors involved, codes for their role and country of origin, a code for the type of event, the time and place, and the address of the report from which GDELT derived the entry. We store a name only if it is the name of a company in our company directory. Any other name, including the name of any natural person, is discarded in memory while the data is read in and is not stored. Instead of the name we record only the role and country code, such as “government” or “business” together with a country. Of the report’s address we store only the name of the website on which it appeared, not the address of the individual article.
From both sources we build a structured event record with the event type, the companies concerned, the direction and the time. This record contains no information about you.
We do not store special categories of personal data under Article 9. The fields in which GDELT records an actor’s ethnic or religious affiliation separately are discarded when the data is read in. A role code can contain such an affiliation as the name of a group. Because we store no name of a natural person alongside it, it does not refer to any particular person.
We do not evaluate reports about criminal proceedings from mandatory disclosures. GDELT also records events such as arrests or court proceedings. From such entries we store no name of a natural person, only the fact that an actor with a particular role and country code was involved. We do not evaluate whether a particular person is being investigated or tried.
For what purpose and on what basis
The purpose is to understand how economic events affect markets. To that end we evaluate published reports by machine and assign them to companies and securities.
The legal basis is Article 6(1)(f) of the General Data Protection Regulation, that is our legitimate interest. This interest lies in evaluating economic connections in a way that others can follow. We have weighed your interests against it and concluded that they do not override it. The information is published anyway, and in the case of mandatory disclosures because the law requires it. From the GDELT event database we read names of natural persons only for the moment the data is read in, and we do not store them. Nothing about you is rated, assessed or predicted, and no decision is made about you. What we evaluate is the security, not the person.
Who receives the data
No one outside our own systems. We do not pass the data on, we do not sell it and we do not publish any names. Users of our application see event data. For mandatory disclosures they also see the title and summary, where the licence of the source allows it, with a link to the original. For GDELT entries they see only the description that we write ourselves from the stored information. It contains no name of a natural person.
No data is transferred to a third country. That a source was published in a third country does not mean that we transfer anything there.
How long we keep the data
We keep reports and their versions permanently, because the historical collection of events is the actual purpose of the evaluation. Deleting an event after a set period would destroy exactly what it was collected for.
We delete the unprocessed responses from our sources after 90 days. They serve only to let us trace an evaluation that went wrong. For mandatory disclosures they contain the full text. For GDELT they contain only the information that has already been cleaned, and so none of the discarded names. When deleting, we overwrite the freed areas so that the content does not remain in the file.
If the licence of a source requires a shorter period, the shorter one applies.
Your rights
You have the right of access to the data stored about you, the right to have inaccurate data rectified, and the rights to erasure, to restriction of processing and to data portability.
We would like to point out in particular your right to object under Article 21. Because we base the processing on a legitimate interest, you can object to it on grounds relating to your particular situation. If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests. Giving reasons helps, but we will not let an objection fail for lack of them.
An informal message to contact@quorvyn.de is enough for all of this. So that
we can find you in our records, please give your name as it appears in the
report. We store no names of natural persons from the GDELT event database, so
as a rule we will find nothing about you there.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.
No automated individual decisions
There is no automated decision-making, including profiling, within the meaning of Article 22 that produces legal effects concerning you or similarly significantly affects you. Our evaluation assesses securities, not people.
Changes
We update this information when the processing changes, in particular when a new kind of source is added. The date at the top shows the version that currently applies.