Privacy policy
As of: 01.01.2026
1. Controller
2. General
We process personal data only to the extent necessary to operate this website, secure it, analyze usage (only with consent) and respond to inquiries.
3. Hosting, CDN & server logs (Cloudflare)
This website is delivered via Cloudflare services (content delivery, security and performance). When you access the website, technical data (e.g., IP address, time of access, requested URL, referrer, user agent, status codes) is processed to deliver content, protect against attacks and troubleshoot.
Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in secure and efficient operation of the website.
Retention: Up to 14 days, unless a longer retention is required for security investigations.
Recipients / processors: Cloudflare (processing may take place in the EU and/or in third countries such as the USA).
Where data is transferred to third countries, this is done based on appropriate safeguards (e.g., EU Standard Contractual Clauses) and, where applicable, additional measures.
4. Loading data from our database (Supabase)
When you use the website, your browser loads data for the displayed assets via Supabase. As a result, connection data (in particular your IP address and request metadata) may be transmitted to Supabase.
Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in providing the requested content and features.
Recipient / processor: Supabase (project region/hosting location depends on your Supabase project configuration).
If third countries are involved, transfers are made based on appropriate safeguards (e.g., EU Standard Contractual Clauses).
5. Web analytics (Google Analytics 4)
We use Google Analytics 4 to measure and improve the website. Google Analytics may set cookies or use similar identifiers and process usage data (e.g., page views, interactions, device/browser information).
Legal basis: consent (Art. 6(1)(a) GDPR).
Google Analytics is loaded only if you consent via our consent mechanism. You can withdraw your consent at any time by changing your cookie settings or deleting website data in your browser.
Recipient / processor: Google Ireland Limited (Ireland). Depending on configuration, data may be transferred to third countries (e.g., USA) with appropriate safeguards (e.g., EU Standard Contractual Clauses).
6. External content (TradingView charts)
TradingView charts are loaded only after you actively enable them (click-to-load). Once enabled, TradingView may process technical data and set its own cookies.
Legal basis: consent (Art. 6(1)(a) GDPR), where personal data is transmitted or cookies are set.
7. FX rates (Frankfurter API)
For currency conversion we fetch exchange rates server-side from the Frankfurter service.
Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in providing this functionality.
8. Local storage
We use functional browser storage (e.g., localStorage) to remember settings such as language/currency and whether external content is enabled.
Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in a user-friendly experience; where required, consent (Art. 6(1)(a) GDPR).
Retention: Until you delete website data in your browser.
9. Contact
If you contact us, we process the data you provide (e.g., email address and message content) to handle your request.
Legal basis: contractual/pre-contractual communication (Art. 6(1)(b) GDPR) or legitimate interests (Art. 6(1)(f) GDPR).
Retention: Up to 6 months after completion, unless legal retention obligations apply.
10. Your rights
Depending on the requirements, you have rights to access, rectification, deletion, restriction, data portability and objection (Art. 15–21 GDPR).
You may also lodge a complaint with the Austrian Data Protection Authority (DSB).
11. Changes
We may update this privacy policy. The version published on the website applies.