{"document":"privacy","language":"en","revision":5,"title":"Privacy notice – StereoTrader web services","content":"Privacy notice – StereoTrader web services\n\n1. Controller\nLEVEREDGE LTD, Gregoriou Afxentiou 8 / SHP19, 6023 Larnaca, Cyprus, registration number HE396927, represented by managing director Marcel Mussler. Privacy contact: marcelmussler@leveredge-ltd.com. This notice concerns the StereoTrader ID portal at id.stereotrader.eu, my.stereotrader.eu and my.stereotrader.net and our manuals and tutorials at tutorials.stereotrader.eu. When merely viewing documentation pages, the information on technical delivery, security, browser storage and your rights is particularly relevant. Information on registration, licence association and support applies only when the respective features are used. External services have their own privacy notices.\n\n2. Access and security\nConnection and delivery require technical data such as IP address, time, requested resource and technical browser/connection information. Purposes are service delivery, troubleshooting and abuse prevention. The legal basis is Article 6(1)(f) GDPR, with our legitimate interest in a secure and functioning service; where directly necessary for a requested account function, Article 6(1)(b) GDPR applies. Access is not possible without the necessary connection data.\n\n3. Registration and account\nFor the voluntary account we process the email address used as your StereoTrader ID, submitted login credentials, verification status, verification/recovery processes and feature entitlements. This enables account creation, email verification, login, management and password recovery under Article 6(1)(b) GDPR. Necessary security checks additionally rely on Article 6(1)(f) GDPR. Required information is necessary for the relevant function. A product purchase is not required for regular registration.\n\n4. Licence access\nIf you choose alternative access with a DigiStore24 licence key, the key is processed to verify and assign your entitlement. The purchase email address may be used to associate your StereoTrader ID; the relevant information originates from the purchase/licence record. The legal basis is Article 6(1)(b) GDPR. This alternative is not necessary for regular registration. Keep licence keys confidential.\nWhen registration or account linking is initiated from StereoTrader, we also process the necessary broker/server identifier, trading account number and licence reference to associate and administer usage entitlements. Processing relies on Article 6(1)(b) GDPR where necessary to perform the contract; supplementary internal entitlement checks rely on Article 6(1)(f) GDPR and our legitimate interest in licence use in accordance with the contract. These checks take place within our own systems. Automatic account and licence association does not transmit or store equity, balance, position or transaction data or account histories.\n\n5. Features and support\nThe account manages personal entitlements, particularly for LiveChart-local. Local setup files must be distinguished from server-side entitlement checks; this does not mean that all technical data is processed exclusively locally. For requested support we process contact details, your request and problem information provided. When the support function is used, the position and transaction data required to investigate a reported software or execution error are transmitted and processed for error analysis and reconciliation. Equity, balance and the account history are not transmitted automatically, even when the support function is used. Their transmission and the associated processing take place only upon a separate explicit request and confirmation by the user. Use of the support function alone does not constitute such a request or confirmation. Broker login passwords are not transmitted or stored in this process either. The basis is Article 6(1)(b) GDPR for requested/agreed services, otherwise Article 6(1)(f) GDPR with our interest in answering requests appropriately. Do not send unnecessary confidential trading or account information. Features marked as being prepared are not yet available services.\n\n6. Account messages and marketing\nNecessary verification, password recovery, security and directly relevant operational messages serve account use and secure operation under Article 6(1)(b) or (f) GDPR. They must be distinguished from marketing.\nMarketing product news, events, offers and promotional guides are subject to the legal requirements for email marketing. Where consent is required, processing relies on Article 6(1)(a) GDPR. Registration or describing messages as part of a contract does not replace required consent. A statutory existing-customer exception applies only where its particular conditions are met. Topic preferences and necessary consent/objection records are processed to administer your choices.\nYou may withdraw consent for the future and object to direct marketing at any time using available unsubscribe options or marcelmussler@leveredge-ltd.com. A non-editable portal setting does not remove these rights. Withdrawal does not affect the lawfulness of earlier processing. Necessary non-marketing account messages must be assessed separately.\n\n7. Recipients\nAccess is limited to persons and organisations necessary for the relevant purpose. These may include hosting, operations, maintenance and email providers and, for requested licence association, relevant licensing/distribution organisations. Processors acting on instructions are subject to applicable data-processing requirements. Registration does not authorise disclosure for third-party marketing. Legally required disclosures remain possible.\n\n8. Retention and deletion\nAccount data is processed for account use. Request deletion at marcelmussler@leveredge-ltd.com. Once the purpose ends, data must be deleted unless statutory retention duties or evidence necessary for legal claims require continued storage. Technical logs and verification/recovery data must be retained only for their operational/security purpose. Consent/objection records may be kept separately to the extent necessary to demonstrate and respect your choices and prevent further marketing. Product licences must be distinguished from the voluntary StereoTrader ID.\n\n9. Session cookie and browser storage\nWhen you log in, we set the strictly necessary cookie st_id_session to keep you logged in and associate your requests with your account. It contains a randomly generated session key, not a password. The cookie has a lifetime of twelve hours and is deleted when you log out. It is inaccessible to JavaScript (HttpOnly); in the hosted service, it is transmitted exclusively over HTTPS.\nWe do not use analytics, advertising or tracking cookies. The browser storage described below concerns our manuals and tutorials at tutorials.stereotrader.eu.\nManuals and tutorials: Search runs locally in your browser using the documentation content supplied with the page; search terms are not transmitted to a search service. We use Local Storage (st-theme and st-language) to remember your chosen appearance and language. These preferences remain stored until changed, deleted in your browser or cleared by the browser.\nSession Storage is used for short-term search and navigation features: st-q carries a search term within the documentation to highlight it on the selected destination page; st-resume enables resuming a previously viewed chapter where this feature is offered. Search information is used only within a one-minute validity window and resume information within a 30-minute validity window. Search information is deleted when processed on the destination page; expired information is discarded when the relevant checks are performed. These validity windows do not mean that deletion is always triggered automatically when the time expires. Session Storage is generally tied to the browser session; browsers may restore sessions. You can delete stored website data in your browser.\nThese storage features serve the selected usability functions, not visitor analytics or advertising. To the extent personal data is processed, the legal basis is Article 6(1)(f) GDPR and our legitimate interest in user-friendly, functioning documentation. The general information on necessary connection data and its retention also applies to the documentation pages.\n\n10. Your rights\nSubject to statutory conditions, you have rights of access, rectification, erasure, restriction and portability. Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. You may object to direct marketing at any time without special grounds. Consent may be withdrawn for the future at any time. Contact marcelmussler@leveredge-ltd.com. Identity checks are limited to what is necessary to protect your data. You may complain to a data protection supervisory authority, particularly where you habitually reside, work or consider an infringement to have occurred.\n\n11. International processing\nProcessing outside the European Economic Area additionally requires compliance with Articles 44 et seq. GDPR, in particular an applicable adequacy decision or appropriate safeguards. Information about the recipients, processing countries and safeguards applicable to your case, and copies of relevant safeguards, may be requested from the privacy contact above.\n\n12. Updates\nChanges in features or processing may require updates to this notice. An update does not replace required consent or restrict existing rights.\n","format":"text","updated_at":1794228611,"actor":"legal-agent"}