Data Protection Policy

1. Name and contact details of the data controller and the company data protection officer

This data protection notice applies to data processing by:

Controller: Tradesignal GmbH (hereinafter also: Tradesignal),
Linzer Strasse 11, 28359 Bremen, Germany
Email: info@tradesignal.com
Phone: +49 421 20109-0
Fax: +49 421 20109-12

The company data protection officer of Tradesignal is available at the
above address, care of
Ms. Tanja Wenk;
Email: dsb@tradesignal.com

2. Collection and storage of personal data as well as type and purpose of their use

a) When visiting the website

When you visit our websites www.tradesignal.com, www.tradesignalonline.com, terminal.tradesignalonline.com and www.tradesignalchart.com, the browser on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

- the IP address of the requesting computer, - the date and time of access, - the name and URL of the retrieved file, - the website from which access is made (referrer URL), and - the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The data mentioned are processed by us for the following purposes:

Ensuring a smooth connection setup of the website, safeguarding ease-of-use on our website, evaluating system security and stability, as well as for other administrative purposes.

The legal basis for data processing is Article 6(1)(f) of the GDPR (General Data Protection Regulation). Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally. In addition, we use cookies and analytics services when you visit our website. You will find more detailed explanations under numbers 4 and 5 of this data protection policy.

b) When using our contact form

If you have any questions, we offer you the opportunity to contact us using the form provided on the website. A valid email address is required so that we know who sent the request and can respond to it. Further information can be provided voluntarily.The data needed for the purpose of contacting us will be processed in accordance with GDPR Article 6(1)(a) on the basis of your voluntary consent. The personal data collected by us for the use of the contact form will automatically be deleted after your request has been processed.

You will find your rights as a data subject under numbers 7 and 8 of this data protection policy.

c) When using our free or paid services and performances (registration) You can register on our website by entering your personal data. The scope of the personal data transferred to the data controller is determined by the corresponding input screen used for registration. On our website, both paid and free services are provided.When you register to use our services by creating an account, we collect the personal information necessary to provide the services you have requested. Depending on the services selected (paid or free), you may be required to provide your company name, own name, address, telephone number, email addresses, and other content that you generate or that relates to your account, such as financial information (e.g. credit card, SEPA, PayPal or World Pay data as well as billing information). The personal data to be given in detail can be taken from the respective input screens.

The purpose of registration is to offer you the use of our paid or free services.

The legal basis for the authorization to process the personal data of registered users is GDPR Article 6(1)(b).

For registered users, number 2 point a applies accordingly. To register and use our services, you must visit our website. In particular, when registering and using our services, the data specified in number 2 point a of this data protection policy will be collected.

You will find your rights as a data subject under number 7 of this data protection policy.

d) Blog on the website, with comment function

We offer registered users (see number 3 point c above) the opportunity to leave individual comments about individual blog posts on a blog located at the www.tradesignal.com website. A blog is a portal on a website, usually open to the public, in which one or more people, called bloggers (i.e. web loggers), can post articles or write down thoughts in so-called blog posts. The blog posts can usually be commented upon by third parties.

If you now leave a comment in the blog published on our website, not only the comments you leave but also details of the time you entered the comment and the user name (pseudonym) chosen by the data subject will be saved and published.

Comments posted on the blog can generally be subscribed to by third parties. In particular, it is possible for a commenter to subscribe to the comments that follow his or her own comment on a particular blog post.If a data subject chooses the option to subscribe to comments, we will send an automatic confirmation email to verify, using the double opt-in method, that the owner of the specified email address has actually chosen this option. The option to subscribe to comments can be cancelled at any time.The legal basis for allowing public retrieval of the above information (in particular the user name and the comment in a blog) results from GDPR Article 6(1)(b). In addition, with regard to the specific design of the blog, we have a legitimate interest in making the blog available with the specified functionalities, pursuant to GDPR Article 6(1)(f). Following from this, our legitimate interest is to provide users and interested third parties with content from other users as conveniently, comprehensively and functionally as possible.For readers and commenters of the blog as well as for subscribers, number 2 point a of this data protection policy applies accordingly. To register and use our services, you must visit our website. In particular, when registering and using our services (“blogging”, “posting on the blog”, “subscribing to comments”), the data specified in number 2 point a of this data protection policy are collected.

You will find your rights as a data subject under numbers 7 and 8 of this data protection policy.

e) If our services are linked to service providers (data vendors, stock exchanges) outside the EU or Switzerland, we are obliged to transfer your personal data to the named parties in order to make the requested service available to you.

f) For job applications and in the application procedure

We collect and process personal data from job applicants for the purpose of handling the employment application process. Processing may also be carried out electronically. For this purpose, we offer a contact form on our website. The applicant has the option of sending the relevant application documents to the data controller by electronic means, by email or via a web form on the website. If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. The legal basis for this can be found in Section 26 subsection 1 sentence 1 of the BDSG (Federal Data Protection Act). The data controllers need the application documents submitted by the applicants in order to decide whether an employment relationship is justified. If no employment contract is concluded by us with the applicant, the application documents will automatically be erased two months after notification of the rejection decision, provided that no other legitimate interests of the controller stand in the way of erasure. “Other legitimate interest” in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). The legal basis for the retention of application documents can be found in GDPR Article 6(1)(f); the legitimate interest in the retention of application documents for rejected applicants results from the above-mentioned circumstances (“possible claim pursuant to the General Equal Treatment Act (AGG)”).

3. Disclosure of data

Your personal data will not be transmitted to third parties for purposes other than those listed below. We will only pass on your personal data to third parties:

a) if you have given your express consent pursuant to GDPR Article 6(1)(a);

b) if the disclosure pursuant to GDPR Article 6(1)(f) is necessary for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data; c) in the event that a legal obligation exists for the disclosure pursuant to GDPR Article 6(1)(c); or

d) if this is legally permissible and is required by GDPR Article 6(1)(b) for the processing of contractual relationships with you.

You will find your rights as a data subject under numbers 7 and 8 of this data protection policy.

4. Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your terminal device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not harm your device, nor do they contain viruses, trojans or other malicious software. Information is stored in the cookie that in each case is generated in connection with the specific terminal device used. However, this does not mean that we directly become aware of your identity. For example, we use so-called session cookies to detect that you have already visited certain pages of our website. These will be deleted automatically after leaving our site. In addition, we also use temporary cookies that are stored on your terminal device for a specified period of time to optimize user-friendliness. If you visit our site again to use our services, it will automatically recognize that you have already been with us and what entries and settings you made previously, so that you do not have to enter them again. On the other hand, we use cookies to statistically record the use of our website and to evaluate these cookies for the purpose of optimizing our offering for you. When you return to our site, these cookies enable us to automatically recognize that you have visited us previously. These cookies are automatically deleted after a defined period of time. Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. On the other hand, disabling cookies completely may mean that you cannot use all features of our website.

The data processed by cookies is necessary for the purposes mentioned in order to safeguard our legitimate interests and those of third parties pursuant to GDPR Article 6(1)(f), as already explained above. In summary: the purpose of cookies is facilitate the use of our offering and to optimize our services, in particular also by statistical collection of usage patterns.

You will find your rights as a data subject under numbers 7 and 8 of this data protection policy.

5. Analytics tools

We use the open source software Matomo to analyse and statistically evaluate the usage of the website. Cookies are used for this purpose (see number 4). The information generated by the cookie about website usage is transmitted to our servers and combined in pseudonymous usage profiles. The information is applied to evaluate the usage of the website and to adapt the design of our website to the users’ requirements and interests. The information is not disclosed to third parties. Under no circumstances will the IP address be linked to other data relating to the user. The IP addresses are anonymized so that an assignment is not possible (IP masking). Your visit to this website is currently being recorded by Matomo web analytics. Click here (https://matamo.org/ docs/privacy/) to stop your visit from being recorded.

The tracking measures listed above and used by us are carried out on the basis of GDPR Article 6(1)(f). With the tracking measures used, we wish to ensure that our website is designed to meet the users’ requirements and is continually optimized. On the other hand, we use this tracking measure to record the usage of our website statistically and to evaluate it for the purpose of optimizing our offering for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision. The respective data processing purposes and data categories can be found in the corresponding tracking tools.

You will find your rights as a data subject under numbers 7 and 8 of this data protection policy.We do not use social media plugins on our website, only links.

Facebook

We link to the social network Facebook, specifically to our presence there. This is not a so-called “social media plugin”. If you do not use the button, no information is transmitted to Facebook and no Facebook cookie is placed on your computer. As soon as you click on the link without being logged into Facebook, the Facebook login screen opens in a new window. At the same time, Facebook places a cookie on your hard drive. If you use Facebook as a logged-in Facebook user, these webpages are operated exclusively by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (Facebook). What data Facebook collects on these webpages is beyond our knowledge and our sphere of influence. General information can be found at http://www.facebook.com/about/privacy/your-info-on-other#applications.

Twitter

We use the “social bookmark” of the social network Twitter. This is only a link and not a so-called “social plugin”. If you do not use the button, no information is transmitted to Twitter and no Twitter cookie is placed on your computer. As soon as you click the button without being logged into Twitter, the Twitter login screen opens in a new window. At the same time, Twitter places a cookie on your hard drive. If you press the button as logged-in Twitter user, Twitter can assign the visit to your Twitter account. The webpages within Twitter are operated exclusively by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (Twitter). What data Twitter collects on these webpages is therefore beyond our knowledge and sphere of influence. General information can be found at http://twitter.com/privacy. You can change your Twitter privacy settings in your account settings at http://twitter.com/account/settings.

Google+

We have integrated the Google+ button as a component in the form of a link. After clicking on the Google+ symbol, a link to the login screen of Google+ as well as our own presence under Google+ will appear. As part of this technical process, Google is informed about which specific subpage of our website you are visiting. More detailed information about Google+ is available at https://developers.google.com/+/. Pages within Google+ are operated exclusively by the operating company of Google+, namely Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. What data the aforementioned operating company collects and processes is beyond our knowledge. The applicable privacy policy of Google can be accessed at https://www.google.com/intl/en/policies/privacy/. Additional information by Google on the Google +1 button can be found at https://developers.google.com/+/web/buttons-policy.

Other links

Insofar as links are provided to webpages of other providers, this data protection policy does not apply to their content. What data the operators of these sites may collect is beyond our knowledge and sphere of influence. You will find further information in the data protection notice of the respective website. You will find your rights as a data subject under numbers 7 and 8 of this data protection policy.

7. Rights of the data subject

You have the right:

a) to request information about personal data concerning you and processed by us, pursuant to GDPR Article 15. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data (insofar as these have not been collected by us), and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;

b) to request the rectification without undue delay of incorrect or incomplete personal data as stored by us, pursuant to GDPR Article 16;

c) to request the erasure of your personal data stored with us, pursuant to GDPR Article 17, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;

d) to demand the restriction of processing of your personal data, pursuant to GDPR Article 18, if you dispute the accuracy of the data, if the processing is unlawful but you oppose its erasure and we no longer need the data, but you require them for the establishment, exercise or defence of legal claims, or if you have filed an objection to the processing, pursuant to GDPR Article 21;

e) to receive the personal data concerning you and which you have provided to us, in a structured, commonly used and machine-readable format or to request the transmission to another data controller, pursuant to GDPR Article 20;

f) to revoke your consent to us at any time, pursuant to GDPR Article 7(3). As a result, we are no longer allowed to continue processing any data based on this consent in the future: and

g) to lodge a complaint with a supervisory authority, pursuant to GDPR Article 77. To do this, you can as a rule contact the supervisory authority at your habitual residence or place of work or at our company headquarters.

8. Right to object

If your personal data are processed on the basis of legitimate interests, pursuant to GDPR Article 6(1)(f), you have the right to object to the processing of your personal data, pursuant to GDPR Article 21, provided that there are reasons for this which arise from your particular situation or the objection is aimed against direct marketing. In the latter case, you have a general right to object, which we will implement without the need to specify a particular situation. If you wish to exercise your right to revoke or object, simply send an email to info@tradesignal.com.

9. Data security

For visits to the website, we use the commonly used SSL (Secure Sockets Layer) method in connection with the highest level of encryption supported by your browser. Usually, this involves 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a particular page of our website is transmitted in encrypted form is indicated by the closed form of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

10. Effectiveness and amendment of this data protection policy

This data protection policy is currently valid and is dated May 2018.

Due to the continued development of our website and its offerings, or due to changing legal or official requirements, it may become necessary to amend this data protection policy. You can call up and print out the current data protection policy at any time on the websites named under number 2 point a above.