Privacy Policy

1. Data Controller

The data controller responsible for this website is:

2. Data We Collect

We collect and process the following personal data:

• • Email address — for license management and customer communication
• • Hardware ID — a hashed identifier of your server for license binding (not personally identifiable)
• • Payment data — processed exclusively by Stripe (see section 3)

3. Payment Processing (Stripe)

We use Stripe Ireland Ltd. (Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland) as our payment processor. When you subscribe, the following data is transmitted to Stripe:

• • Email address
• • Payment method details (card number, expiration, etc.)
• • Transaction amounts and currency

We do not store your payment details. Stripe processes payments under their own privacy policy:

https://stripe.com/privacy

4. Legal Basis (Art. 6 GDPR)

• • Contract performance (Art. 6(1)(b)) — Processing necessary for license management and service delivery
• • Legal obligation (Art. 6(1)(c)) — Retention of billing data as required by tax law

5. Your Rights

Under the GDPR, you have the following rights:

• • Right of access (Art. 15) — request a copy of your data
• • Right to rectification (Art. 16) — correct inaccurate data
• • Right to erasure (Art. 17) — request deletion of your data
• • Right to restriction (Art. 18) — restrict processing of your data
• • Right to data portability (Art. 20) — receive your data in a structured format
• • Right to object (Art. 21) — object to processing based on legitimate interest

To exercise these rights, contact us at: [email protected]

6. Data Retention

• • License data — retained until contract termination plus statutory retention periods
• • Payment data — retained by Stripe according to their policies and applicable tax law

7. Data Security

All communication with our servers is encrypted via TLS. TradeFork runs entirely on your own server — no trading data is transmitted to or stored on our systems.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority is the data protection authority of the German state in which our company is based.