Privacy Statement

We respect your privacy and are committed to protecting your personal data. This Privacy Statement explains how STX Commodities B.V. (“STX”, “we”, “us”) collects, uses, and safeguards personal information.

It applies not only to visitors of this website (the “Site”), but also more generally, unless otherwise stated in a more tailored privacy statement.
This includes various purposes and situations in which your personal data may be collected, whether directly through our websites or indirectly from other sources.

1. Data Controller

STX Commodities B.V. is generally responsible for processing your personal data in accordance with this Statement. However, in certain cases, such as when you request it, where you already have an existing relationship with another STX group entity, or where we believe it better serves your needs, your data may also be shared with another STX group entity, which will then act as the responsible controller.

2. Processing of your personal data

This section provides an overview of the purposes for which we may process your personal data, the related processing activities, and the applicable legal bases. Certain topics are explained in more detail later in this Privacy Statement. The personal data processed in this context is always limited to what is necessary and derives from the purposes laid out below.
We may process your personal data in particular as follows:

Communication and Requests

To communicate with you, handle and respond to your inquiries, or fulfill requests made via our website, events, or other channels.
Legal basis: (pre)contractual necessity or our legitimate interest.

Customer and Business Relationships

To fulfill and execute agreements with customers and business partners, including account registration, authentication, administration, credit checks, and provision of products and services.
Legal basis: contractual necessity, legitimate interest, or legal obligation (where applicable).

Events

To register participants, manage attendance, and handle participant lists in connection with events we organize or participate in. We may also use personal data to communicate with participants before and after events, and may create recordings, pictures, or videos during events for documentation or promotional purposes.
Legal basis: contractual necessity, legitimate interest, or consent (for photos, videos, and recordings where required).

Marketing Communication

To provide you with marketing communications by email, phone, text message, or other channels, and to tailor such communications to your interests. We may also use cookies or similar technologies to personalize marketing content and improve how we engage with you.
Legal basis: consent or legitimate interest.
Marketing Analytics and Targeting
To analyze how our websites, newsletters, and digital platforms are used, evaluate and improve the effectiveness of our marketing activities, and create targeted marketing audiences. This may include the use of cookies or similar technologies for audience measurement, retargeting, creating custom or lookalike audiences, and campaign performance tracking. Essential cookies required for website functionality do not require consent, while non-essential cookies require your prior consent.
Legal basis: consent or legitimate interest (for statistical/essential cookies).

Security

To maintain the security and integrity of our websites, platforms, applications, and sites, including fraud prevention and compliance with security standards.
Legal basis: legitimate interest or legal obligation (where applicable).

Corporate Transactions

To process personal data in the context of due diligence, restructurings, mergers and acquisitions, or other corporate transactions.
Legal basis: legitimate interest or legal obligation.

Compliance and Legal Claims

To comply with legal and regulatory obligations or requests, and to establish, exercise, or defend against legal claims.
Legal basis: legal obligation or legitimate interest.

3. Marketing

We process personal data for marketing purposes as part of our legitimate interest in understanding our commercial activities and strengthening business relationships. This includes gaining insights into how our services are used and how we can best reach existing and potential customers.

When we contact you with unsolicited marketing communications, we will generally ask for your prior consent.

However, depending on the applicable national law, we may in some cases rely on statutory exceptions to this requirement. For example, where permitted, we may send marketing communications to existing customers or business partners about similar products or services without prior consent. If you are already a customer or have contracted with us for products or services, we may therefore use your contact details to inform you about related offerings or updates, unless you have previously opted out. In all cases, you have the right to object to the use of your personal data for marketing at any time.

For the preparation and improvement of our marketing communications, we may also use cookies and similar technologies. These help us to personalize marketing content, understand engagement, evaluate campaign effectiveness, and adapt our communications to better align with your interests.

4. Cookies

STX uses cookies and similar tracking technologies (such as pixels, local storage, JavaScript, and tag management solutions) to enhance your browsing experience, analyze website traffic, and deliver tailored content and advertising. These technologies also enable us to retarget visitors on external platforms, build custom and lookalike audiences, and measure the effectiveness of our marketing activities.

Cookies serve different functions: some are essential for the technical operation of our website, while others help us understand how visitors use our services, improve functionality, or deliver personalized marketing. Some cookies are placed directly by STX (“first-party cookies”), while others are set by trusted partners we work with (“third-party cookies”).

You can change your cookie preferences or withdraw previously given consent at any time by pressing this link.

We use the following categories of cookies:

{table}

5. Sharing of Personal Data

We may share your personal data with different categories of recipients. In all cases, we ensure that such sharing is carried out in compliance with applicable privacy laws, that a valid legal basis exists as explained in this Privacy Statement, and that appropriate contractual or other safeguards are in place.

Affiliates within the Group

We may share your personal data with other STX group entities based on our legitimate interest in operating as a global organization and furthering our business relationships. In certain cases, such affiliates may act as independent controllers where they determine their own purposes of processing.

Service Providers Acting on Our Behalf

We engage trusted third-party service providers, contractors, and agents to perform services on our behalf related to the operation, maintenance, or improvement of our websites, platforms, products and services. These disclosures are limited to what is necessary for them to carry out their tasks, and such providers act under contractual obligations to protect your data.

Independent Third Parties

In some situations, your personal data may be shared with third parties acting in their own capacity. This may include professional advisors, auditors, joint venture or business partners, banks and financial institutions (e.g. for payments, financing, or settlements), and competent public authorities or regulators (e.g. tax, supervisory, or reporting bodies). In all such case and where needed, we ensure that contractual and legal guarantees are in place to safeguard your information.

Legal, Security, and Corporate Transactions

We may disclose personal data where required to comply with legal obligations, respond to regulatory authorities, or participate in legal proceedings. We may also share data in good faith to prevent fraud, unlawful activity, or threats to security, including with law enforcement where permitted by law. In the event of a corporate transaction, such as a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the relevant successor or acquiring entity.

International Transfers

Some of our affiliates, service providers, partners, or other recipients are located outside the European Economic Area (EEA), including in the United States and other countries worldwide. Where such transfers occur, we ensure that adequate protection is provided in accordance with applicable law. This may include:

• reliance on an adequacy decision, or
• the use of Standard Contractual Clauses (SCCs), supplemented where necessary with additional measures.

6.Social Media

When you visit our social media pages, we may process your personal data, to communicate with you, but also for marketing purposes as further described in this Privacy Statement. In this context, we act as joint controllers together with the respective platform provider.
The social media platform provider primarily determines the purposes and means of the data processing. Our ability to influence these processes is limited.
We maintain the following social media presences:

Facebook, LinkedIn, YouTube, Instagram, X

Further information on the data processing conducted by the platform provider, including information concerning your rights as a user, can be found in the provider’s data protection policy and, the joint controller addendum:

Facebook: https://www.facebook.com/privacy/explanation and https://www.facebook.com/legal/terms/page_controller_addendum.

LinkedIn: https://www.linkedin.com/legal/privacy-policy and https://legal.linkedin.com/pages-joint-controller-addendum 


YouTube: https://www.youtube.com/intl/en_us/howyoutubeworks/our-commitments/protecting-user-data/

Instagram: https://www.facebook.com/privacy/explanation and https://www.facebook.com/legal/terms/page_controller_addendum.

X: https://x.com/en/privacy

7. Security and retention

STX employs stringent physical, electronic, and procedural safeguards to protect personal information from unauthorized access, disclosure, accidental loss, misuse, alteration, or destruction. The company adheres to all applicable laws and regulations governing personal data and ensures that access to such data is limited strictly to individuals who require it for legitimate business purposes.
Personal information is retained only for as long as necessary to fulfill the specific purpose for which it was collected, along with any related and permissible secondary purposes. If a piece of information serves multiple purposes, it will be retained until the longest applicable retention period expires. However, once a shorter retention period concludes, the information will no longer be used for that particular purpose. STX’s retention periods are determined by operational needs and legal obligations. When information is no longer required, it is either securely destroyed or irreversibly anonymized.

8. Your Rights

• You may have the right to:
• Information about the processing of your data and receive a copy of your personal data;
• Request rectification or erasure;
• Restrict the processing of your data;
• Request data portability;
• Object to processing, especially when based on our legitimate interests; and
• Lodge a complaint with a supervisory authority if you believe your data has been processed unlawfully.
• Withdraw any consents you have given.

9. Contact Information

If you have any questions about how your data is processed, or would like to execute your rights, please contact us at:
STX Commodities B.V.
Gelrestraat 30, 1079 MZ Amsterdam, The Netherlands
Phone: +31 20 535 7770
Email: compliance@stxgroup.com

10. Changes to this Policy

We may revise this Privacy Statement at our sole discretion by updating the content on this web page. You are responsible for reviewing the Privacy Statement periodically to stay informed of any changes.