Back to SignalSays
shieldPrivacy

Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Soheil Ebrahimi
Chausseestrasse 38
10115 Berlin
Germany
Email: contact@signalsays.com
Phone: +49 176 84052879

2. General Information

The following information gives you an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Data processing is carried out on the basis of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

3. Server Log Files

When you access this website, our hosting provider, Cloudflare, Inc., automatically collects information in so-called server log files that your browser transmits. This may include your IP address, date and time of the request, page accessed, amount of data transferred, referrer URL, browser used, and operating system.

This data is not combined with other data sources and is used exclusively for the technical provision and security of the website. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in stable and secure operation.

4. Contact by Email or Phone

If you contact us by email or phone, the information you provide will be stored for the purpose of processing your request and for possible follow-up questions. The legal basis is Art. 6(1)(b) GDPR for pre-contractual measures or Art. 6(1)(f) GDPR for our legitimate interest in responding to your request.

5. Account and Portfolio Checkup Data

If you create an account or save a portfolio checkup, we process the email address and holdings information you provide for the purpose of creating your account, saving your checkup, and showing your portfolio comparison.

This data may be stored in a database operated by our processor Supabase, as described in section 6, within the European Union.

Legal basis: Art. 6(1)(b) GDPR, initiation of a contractual relationship.
Retention period: until your request has been finally processed, thereafter for a maximum of 12 months unless statutory retention obligations prevent deletion.

6. Hosting and Processing on Our Behalf

We use the following service providers as processors within the meaning of Art. 28 GDPR:

  • Cloudflare, Inc. for hosting, CDN, and edge functions. A transfer of personal data to third countries, in particular the United States, cannot be excluded. Such transfers are based on the EU Standard Contractual Clauses.
  • Supabase Inc. for authentication and database hosting for saved checkups, using the EU region Frankfurt.

Data processing agreements pursuant to Art. 28 GDPR are in place with both providers.

7. Cookies

This website uses only technically necessary cookies required for operation of the site, for example for session management. We currently do not use tracking, analytics, or marketing cookies. The legal basis is Section 25(2) TTDSG and Art. 6(1)(f) GDPR. Consent is not required for these cookies.

8. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix in your browser's address bar.

9. Your Rights

You have the right at any time to:

  • Access information about the data stored about you, Art. 15 GDPR.
  • Rectify inaccurate data, Art. 16 GDPR.
  • Delete your data, Art. 17 GDPR.
  • Restrict processing, Art. 18 GDPR.
  • Data portability, Art. 20 GDPR.
  • Object to processing, Art. 21 GDPR.
  • Withdraw consent with effect for the future, Art. 7(3) GDPR.
  • Lodge a complaint with a supervisory authority, in our case: Berliner Beauftragte fuer Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin.

To exercise your rights, an informal message to contact@signalsays.com is sufficient.

10. Retention Period

We store personal data only for as long as necessary for the purposes stated above or as required by statutory retention periods. Afterwards, the data is deleted or anonymized.

11. Changes to This Privacy Policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The new privacy policy will apply to your next visit.