Privacy policy

1. Who publishes this site

This site is published by the Vinga Corporate Finance Report, an independent public-interest publication documenting bond-market conduct in the EU, EEA and Switzerland. The publication acts as the data controller for any personal data processed through this website.

Because part of the material originates from protected whistleblower disclosures, the editorial team does not publish individual staff identities. Correspondence is handled through the contact page.

2. What we collect

Browsing the site does not require an account and we do not ask for personal data to read any page. Standard web-server request logs (IP address, user agent, requested URL, timestamp) may be produced by the hosting provider for security and abuse prevention, and are retained only for a short technical period.

If you send correspondence through the contact page, your message opens in your own email client — the site itself does not transmit or store your message. Once you send it, we process the name, email address and content you chose to include, for the sole purpose of replying, verifying facts and publishing corrections.

3. Cookies and local storage

We use no advertising cookies, no cross-site trackers and no profiling technologies. Strictly necessary local storage records your cookie choice so the consent banner is not shown again. Optional analytics storage, used only if you agree, records aggregate page-level readership so we can tell which parts of the disclosure are consulted.

You may withdraw or change your consent at any time by clearing this site's storage in your browser, after which the consent banner reappears on your next visit.

4. Legal basis

Processing of reader correspondence rests on legitimate interest (Article 6(1)(f) GDPR) in publishing accurate public-interest journalism and in offering a right of reply. Optional analytics storage rests on your consent (Article 6(1)(a) GDPR). Strictly necessary storage is exempt from consent requirements under the ePrivacy Directive.

Where the site reports on named individuals in their professional capacities, processing is carried out for journalistic purposes and benefits from the freedom-of-expression derogation in Article 85 GDPR as implemented in the relevant member states.

5. Sharing and transfers

We do not sell, rent or trade personal data. Data may be shared with hosting and content-delivery providers acting as processors, and with competent supervisory authorities or regulators where disclosure is required by law or where a report of suspected market misconduct is submitted.

Confidential sources are never disclosed. Where a source has requested anonymity, that request is honoured against any voluntary disclosure request.

6. Your rights

Under the GDPR you may request access, rectification, erasure, restriction or objection in respect of personal data we hold about you, and you may lodge a complaint with your national supervisory authority. Named individuals additionally have an open right of reply: verified corrections are published in the next revision of the report and reflected on the relevant pages.

Requests should be sent through the contact page. We aim to respond within thirty days.

7. Security and retention

Correspondence is kept only as long as needed to verify the matter it concerns and to maintain the editorial record of corrections. Files published on this site are stripped of document metadata before release.

This policy may be updated as the publication evolves; the current version always governs use of the site.

Frequently asked questions about privacy and data protection

What personal data does this register hold about named individuals?

Only professional and public-capacity information drawn from court records, regulator decisions, official registers and disclosures made in the public interest: name, role, jurisdiction and the substance of the source document. No special-category data, private addresses or private contact details are published.

What is the lawful basis for publishing information about named people?

Publication relies on the public interest in access to financial-conduct information and on the exemptions available under Article 85 GDPR, and equivalent Swiss provisions, for processing carried out for journalistic purposes. Reliance is assessed entry by entry against the intrusion involved.

How can a data subject exercise access, rectification or erasure rights?

Requests for access, rectification, erasure, restriction or objection are made through the contact page and are answered on their merits. Where a request identifies an inaccuracy, the entry is corrected or removed; where an exemption applies, the reason is given.

What data is collected from readers of the site?

No advertising or cross-site tracking is operated. Ordinary server request data may be processed for security and availability, and any local storage used is limited to making the site function. Correspondence sent to the register is processed only to handle the matter it concerns.

How long is data retained, and where can a complaint be lodged?

Correspondence is kept only as long as needed to verify the matter it concerns and to maintain the editorial record of corrections. Complaints should be raised with the register first through the contact page; the right to complain to a competent supervisory authority is unaffected.