Privacy Policy

designz e.K., Jörg Schmidtmann, Bornumer Weg 17, 30457 Hannover, Germany
Email: info@tradeinsider.io

We process personal data of our users only to the extent necessary to provide a functioning website and our content and services. Processing takes place based on user consent (Art. 6(1)(a) GDPR), for the performance of a contract with the user (Art. 6(1)(b) GDPR), or based on our legitimate interests (Art. 6(1)(f) GDPR).

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel automatically processes server log files (e.g. IP address, date and time of the request, requested page, referrer URL, browser used) to technically deliver the website. Legal basis is our legitimate interest in a secure, functional delivery of the website (Art. 6(1)(f) GDPR). A data processing agreement is in place with Vercel.

We use Vercel Web Analytics for anonymized, aggregated analysis of visitor numbers and page views. According to Vercel, the service does not use cookies and does not create personal user profiles. Legal basis is our legitimate interest in statistically analyzing usage to improve our offering (Art. 6(1)(f) GDPR).

To use certain features (in particular paid content), users can register with an email address and a self-chosen password. Passwords are stored encrypted. Processing takes place to fulfill the usage agreement (Art. 6(1)(b) GDPR). We use Supabase Inc., 970 Toa Payoh North #07-04, Singapore, as a processor for the technical management of accounts and login data; processing may take place on servers in the EU or the US. A data processing agreement is in place with Supabase.

For paid subscriptions we use the payment provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland (and affiliated Stripe group companies, including Stripe Inc., USA). Data required for payment processing (e.g. name, payment method information, billing address) is transmitted directly to Stripe; we do not receive or store full card details ourselves. Legal basis is the performance of the subscription contract (Art. 6(1)(b) GDPR). Stripe's privacy notice is available at stripe.com/privacy.

If you contact us by email, the data you provide is stored to process your inquiry. Legal basis is Art. 6(1)(b) or (f) GDPR, depending on whether the inquiry relates to a contract.

We retain personal data only for as long as necessary for the respective purpose, or as required by statutory retention obligations (in particular commercial and tax law). Account data is deleted upon deletion of the user account, unless statutory retention obligations apply.

Some of the service providers we use (Vercel, Supabase, Stripe) also process data in the US. Where data is transferred to countries outside the EU/EEA without an adequacy decision by the European Commission, this is based on EU Standard Contractual Clauses pursuant to Art. 46 GDPR.

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification or erasure (Art. 16, 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent given (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the Landesbeauftragte für Datenschutz und Informationsfreiheit Niedersachsen.

We update this privacy policy whenever processing or the legal situation changes. The version published on this page applies.