Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when you use our website. Personal data are all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR; German: DSGVO) is Yannick Henn, StockScorer, Dresdener Str. 7, 76139 Karlsruhe, Germany, Phone: 015679819427, Email: hello@stockscorer.app. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When You Visit Our Website

2.1 When our website is used for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the site server (so-called "server log files"). When you visit our website, we collect the following data, which are technically necessary for us to display the website to you:

• Our visited website
• Date and time at the moment of access
• Amount of data sent in bytes
• Source/referrer from which you reached the page
• Browser used
• Operating system used
• IP address used (where applicable: in anonymised form)

The processing takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data are not passed on or used in any other way. However, we reserve the right to check the server log files subsequently should there be concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string "https://" and the padlock symbol in your browser bar.

3) Hosting & Content Delivery Network

For hosting our website and displaying the page content, we use a provider that provides its services itself or through selected subcontractors exclusively on servers within the European Union.

All data collected on our website are processed on these servers, unless different data recipients are named below for specific data processing operations.

We have concluded a data processing agreement with the provider which ensures the protection of our site visitors' data and prohibits unauthorised disclosure to third parties.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted again after you close the browser (so-called "session cookies"), while others remain on your device for longer and enable page settings to be saved (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.

Insofar as personal data are also processed by individual cookies used by us, the processing takes place either pursuant to Art. 6(1)(b) GDPR for the performance of the contract, pursuant to Art. 6(1)(a) GDPR where consent has been given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually on their acceptance, or exclude the acceptance of cookies for certain cases or in general.

Please note that the functionality of our website may be limited if cookies are not accepted.

5) Contacting Us

5.1 When you contact us (e.g. via contact form or email), personal data are processed exclusively for the purpose of handling and responding to your request and only to the extent necessary for this.

The legal basis for processing these data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, an additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively resolved, provided that no statutory retention obligations prevent this.

5.2 - Resend

For sending transactional emails, i.e. event-related messages triggered by a specific user interaction (such as conclusion of a contract, registration or password reset), we use this provider: Plus Five Five, Inc., 2261 Market Street, #5039, San Francisco, CA 94114, USA

On the basis of our legitimate interest in effective and user-friendly email communication, we pass on the data you provide when performing such a user action to this provider pursuant to Art. 6(1)(f) GDPR, so that it can send the emails on our behalf.

We have concluded a data processing agreement with the provider which protects our site visitors' data and prohibits disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

6) Data Processing When Opening a Customer Account

Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide them to us when opening a customer account. You can see which data are required to open an account in the input mask of the corresponding form on our website.

Your customer account can be deleted at any time by sending a message to the above-mentioned address of the controller. After your customer account has been deleted, your data will be deleted, provided that all contracts concluded via it have been fully processed, no statutory retention periods prevent this and we have no continuing legitimate interest in further storage.

7) Use of Customer Data for Direct Marketing

7.1 Subscribing to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters once you have expressly confirmed your consent to receive the newsletter by clicking a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to the use of your personal data pursuant to Art. 6(1)(a) GDPR. In doing so, we store your IP address as registered by your internet service provider (ISP) as well as the date and time of subscription, in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you subscribe to the newsletter are used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After you unsubscribe, your email address will be deleted from our newsletter distribution list without undue delay, unless you have expressly consented to further use of your data or we reserve the right to use your email address beyond this for advertising purposes, which is permitted by law and about which we inform you in this policy.

After unsubscribing from the newsletter, your email address may be stored in a so-called blocklist and compared from there with recipient lists of future newsletters in order to technically prevent newsletters requiring consent from being sent again. This processing is based on our legitimate interest in avoiding unwanted advertising mailings pursuant to Art. 6(1)(f) GDPR.

7.2 Resend

Our email newsletters are sent via this provider: Plus Five Five, Inc., 2261 Market Street, #5039, San Francisco, CA 94114, USA

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when subscribing to the newsletter to this provider pursuant to Art. 6(1)(f) GDPR, so that it can send the newsletter on our behalf.

Subject to your express consent pursuant to Art. 6(1)(a) GDPR, the provider also carries out a statistical performance analysis of newsletter campaigns by means of web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the content of the newsletter. In doing so, device information (e.g. time of access, IP address, browser type and operating system) is also collected and analysed, but not combined with other data sets.

You can withdraw your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider which protects our site visitors' data and prohibits disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

8) Data Processing for Contract Performance

8.1 Where necessary, we collect and use certain personal data (name, address, email address and, where applicable, further required information requested during the ordering process) for the purpose of concluding and performing the contract, on the basis of Art. 6(1)(b) GDPR.

To process and perform the contract, we work with the service provider(s) listed below, who support us in whole or in part in performing concluded contracts. Certain personal data are transmitted to these service providers in accordance with the following information.

8.2 Use of payment service providers (payment services)

- Stripe

One or more online payment methods of the following provider are available on this website: Stripe Payments Europe, Ltd., One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland

If you select a payment method of the provider, the payment data you provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to the provider pursuant to Art. 6(1)(b) GDPR. In this case, your data are passed on exclusively for the purpose of processing the payment with the provider and only insofar as this is necessary for that purpose.

8.3 Electronic termination option for continuing obligations with consumers

Consumers who have entered into contracts on this website for continuing obligations subject to a fee (such as subscription contracts) have the option of terminating them via an electronic button in accordance with the applicable notice periods.

Pressing the button leads to a confirmation page on which the consumer can provide further details on the termination, clearly identify themselves and then declare their termination electronically.

The collection of personal data and their transmission to us take place pursuant to Art. 6(1)(b) GDPR and only insofar as they are necessary for the proper processing of the termination. Also on the basis of Art. 6(1)(b) GDPR, the personal data provided are used to confirm receipt of the notice of termination and the termination date electronically in text form. A further legal basis for the processing is Art. 6(1)(c) GDPR. We are legally obliged to provide an electronic termination option for consumer contracts concluded by way of electronic commerce concerning continuing obligations subject to a fee.

9) Retargeting / Remarketing and Conversion Tracking

Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers by means of advertisements (so-called Google Adwords) on external websites. Based on the data of the advertising campaigns, we can determine how successful the individual advertising measures are. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an ad served by Google. Cookies are small text files that are stored on your end device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Google Ads customers. The information obtained with the help of the conversion cookie, which also includes your IP address, is used to compile conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. In the course of using Google Ads, personal data may also be transmitted to the servers of Google LLC in the USA.

Details on the processing triggered by Google Ads conversion tracking and on how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies to read information on the end device used, is only carried out if you have given us your express consent to do so pursuant to Art. 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future by deactivating this service via the "cookie consent tool" provided on the website.

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in from Google available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.
Google's privacy policy can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

10) Website Functionalities

10.1 Google Sign-In

On our website, we provide a single sign-on function of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

In addition to a transfer of data to the above-mentioned provider location, data may also be transferred to: Google LLC, USA

If you have an account with the provider, you can use this account data to log in to create a user account or to register on our website.

When you visit this page, a direct connection between your browser and the provider's servers may be established via this login function, even if you do not have an account with the provider or are not logged into one. The provider thereby receives the information that you have visited our site. The information collected in this respect (where applicable including your IP address) is transmitted by your browser directly to a server of the provider and stored there. However, the information is not used to identify you personally and is not passed on to third parties.

These data processing operations take place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in a user-friendly and interactive design of our online presence.

If you press the login button in order to register on our website with the data of your account with the provider, the provider transmits to us, exclusively on the basis of your express consent pursuant to Art. 6(1)(a) GDPR, the general and publicly accessible information stored in your account (user ID, name, address, email address, age and gender).

We store and use the data transmitted by the provider to set up a user account with the necessary data (salutation, first name, surname, address data, country, email address, date of birth), provided that you have released these data to the provider. Conversely, on the basis of your consent, data (e.g. information about your browsing or purchasing behaviour) may be transferred by us to your account with the provider.

The consent given can be withdrawn vis-à-vis us at any time with effect for the future.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Further information on Google's data protection can be found here: https://business.safety.google/intl/de/privacy/

10.2 Google Web Fonts

This site uses so-called web fonts of the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you open a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly and establishes a direct connection to the provider's servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transferred to: Google LLC, USA

The processing of personal data in the course of establishing a connection with the font provider is only carried out if you have given us your express consent to do so pursuant to Art. 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future by deactivating this service via the "cookie consent tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

11) Tools and Miscellaneous

Sentry

This website uses a service for the automatic transmission of error reports of the following provider: Functional Software Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA

In the event of technical complications or functional impairments in connection with the operation of the website, the service sends automatic error reports to the provider which contain information on the respective source of the error and its origin. Both server information and usage parameters such as the IP address, the browser used, timestamps and the URL accessed are transmitted in this process.

Depending on the origin of the error, error reports may under certain circumstances also contain further personal customer data that we have collected and stored in the course of concluding contracts (in particular first name and surname, address, email address). This is conceivable whenever the error occurs in connection with software-based processing of customer data.

Insofar as the information transmitted in this way also includes personal data, the processing takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in efficient error cause analysis to improve the reliability and functionality of our website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

12) Rights of the Data Subject

12.1 Applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the cited legal basis for the respective conditions of exercise:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to notification pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent given pursuant to Art. 7(3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

12.2 RIGHT TO OBJECT

IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

13) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and, where relevant, additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data are processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned are stored until you withdraw your consent.

If statutory retention periods exist for data processed within the framework of legal or quasi-legal obligations on the basis of Art. 6(1)(b) GDPR, these data are routinely deleted after expiry of the retention periods, provided they are no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continued storage.

When personal data are processed on the basis of Art. 6(1)(f) GDPR, these data are stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

When personal data are processed for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, these data are stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information in this policy on specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.