Privacy Policy

1. Introduction

This policy applies to all users of our website and services, regardless of your location. By using our website, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

4. How We Use Your Data

We use your personal data for the following purposes:

• Providing and improving our MQL5 development services
• Responding to inquiries and service requests
• Scheduling consultations and strategy audits
• Sending service-related communications
• Analytics and website optimization
• Legal and regulatory compliance

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Consent: When you explicitly provide consent for specific processing activities
• Contractual Necessity: To fulfill our service obligations to you
• Legitimate Interest: For purposes that are necessary for our legitimate business interests
• Legal Obligation: To comply with applicable laws and regulations

6. Data Sharing and Third Parties

We may share your data with the following third parties:

• Calendly: For appointment scheduling
• Stripe: For payment processing (if applicable)
• Web Hosting Providers: To store and serve our website
• Analytics Providers: For website analytics (with your consent)

We ensure all third parties implement appropriate security measures and only process data in accordance with our instructions.

7. Payment Processing (Stripe)

We use Stripe, Inc. ("Stripe") as our payment processor. When you make a payment, certain payment information is collected and processed by Stripe in accordance with their privacy policy and applicable laws.

7.1 Payment Data Collected

Stripe may collect the following payment-related information:

• Payment card information (encrypted and tokenized)
• Bank account details (for direct payments)
• Billing address
• Transaction amounts and dates
• Device information for fraud prevention

7.2 Stripe's Data Processing

Payment data is processed by Stripe under a Data Processing Agreement (DPA) that complies with GDPR requirements. We have executed a DPA with Stripe that:

Stripe is:

• PCI DSS Level 1 compliant for payment card security
• SOC 2 Type II certified for overall security
• Bound by GDPR when processing EU customer data
• Required to implement Strong Customer Authentication (SCA) under PSD2

7.3 Payment Data Retention

We retain payment records for 10 years to comply with German tax requirements (§ 147 AO). Stripe retains payment data as required for payment processing and regulatory compliance.

8. International Data Transfers

Your data is primarily stored within the European Union. However, when using Stripe for payment processing, your payment data may be transferred to the United States. We ensure appropriate safeguards are in place for such transfers:

• Standard Contractual Clauses (SCCs): legally binding agreements approved by the European Commission
• Stripe's EU-US Data Privacy Framework: certified compliance with EU data transfer requirements
• Adequacy Decisions: transfers to countries with EU adequacy decisions
• Supplementary Measures: additional technical and organizational measures where required

You have the right to obtain a copy of the data protection safeguards used for international transfers by contacting us at the details provided below.

9. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, unless a longer retention period is required by law. Typical retention periods:

• Contact inquiries: 2 years after last contact
• Service communications: 10 years (tax requirements per § 147 AO)
• Payment records: 10 years (tax requirements per § 147 AO)
• Strategy specifications: 10 years (warranty and tax purposes)
• Analytics data: 26 months
• Calendly data: Until deleted by user or 2 years of inactivity

10. Your Rights

Under GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Transfer data to another service provider
• Right to Object: Object to certain processing activities

11. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. For detailed information, please refer to our Cookie Policy.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit and at rest
• Secure authentication systems
• Regular security audits
• Staff training on data protection

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last Updated" date.

14. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the supervisory authority for data protection in your jurisdiction.