Privacy Policy

1. Data Controller

Data Protection Officer:
Vincent Geith
Email: info@vestchance.com

2. General Information on Data Processing

We process personal data exclusively in accordance with legal requirements, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). “Personal data” refers to any information relating to an identified or identifiable natural person—e.g., name, email address, or IP address.

3. Data Processing When Visiting the Website

When you visit our website, we automatically collect technical usage data (including IP address, browser information, and time of access) to ensure the website’s operation and security. The legal basis for this is our legitimate interest (Art. 6(1)(f) GDPR).

4. User Account and Registration

To use our services, you must create a user account. In doing so, we process your email address and an encrypted password. The purpose is to provide you with your personal dashboard and to manage your trading bots. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR).

Optional information in the profile: You have the option to voluntarily provide additional information in your account area:

• Phone number: We use this information exclusively for security purposes to verify your identity during critical processes (e.g., if you wish to change your email address or name). This helps protect your account from unauthorized access. The legal basis for this is our legitimate interest in the security of user accounts (Art. 6(1)(f) GDPR).
• Nationality: We use this information exclusively for internal statistical analysis to better understand our user base and optimize our services. The legal basis for this is your consent, which you provide by voluntarily submitting this information (Art. 6(1)(a) GDPR), as well as our legitimate interest in improving our services (Art. 6(1)(f) GDPR).

We also use your email address to notify you of important events related to your account or our services (e.g., scheduled maintenance). The legal basis for this is also the performance of the contract.

4.1 Signing up via third-party providers (social login)

We offer you the opportunity to learn more about the service Google Sign-In (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

• Data processed: When you use this service, Google provides us with your email address, your name, and your profile picture (if it is public).
• Purpose: Identification and creation of your user account without requiring you to set a separate password with us.
• Legal basis: Performance of a contract or the implementation of pre-contractual measures (Art. 6(1)(b) of the GDPR).

We do not store your Google account passwords. You can remove the link at any time in your Google account under Security settings.

In addition, we offer Microsoft Login (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Irland).

• Data processed: When you use this service, Microsoft provides us with your email address and name (and possibly additional profile information, depending on what you’ve shared).
• Purpose: Sign in and create your user account without a separate password.
• Legal basis: Performance of a contract or the implementation of pre-contractual measures (Art. 6(1)(b) of the GDPR).

We do not store any third-party passwords here either. You can unlink your account in your Microsoft account.

5. Data Processing During API Connections (Core Service)

When you connect your brokerage account to TRADIC via an API, we process the data transmitted by your broker. This is essential for providing our core service.

Data processed: API keys (stored in encrypted form), account balances, transaction history, open orders, and position data.

Purpose of processing: The execution of trading strategies by our bots, the calculation of performance data, and the display of your activities in your TRADIC dashboard.

Important safety notice: The API keys you create authorize us solely to trade and retrieve account information. We never request authorization for withdrawals and have no technical means of accessing your funds.

Legal basis: This processing is necessary for the performance of the user agreement with you (Art. 6(1)(b) GDPR).

6. Cookies

Our website uses cookies. These are small text files that your browser stores.

• Technically necessary cookies: These are essential for the basic functions of the site, such as logging in. Without them, the platform will not work. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
• Functional cookies: We use these only with your explicit consent, which you provide via our cookie banner. This includes cookies for our referral program (see the next section). The legal basis is your consent (Art. 6(1)(a) GDPR).

You can withdraw your consent at any time here via the Change cookie settings and revoke your consent via the cookie banner for the future.

6.1 External Content (CDN)

We use external content delivery networks (CDNs) to deliver JavaScript libraries (e.g., cdn.jsdelivr.net, unpkg.com). In doing so, your IP address may be transmitted to the respective providers. The legal basis for this is our legitimate interest in ensuring the stable and high-performance delivery of the website (Art. 6(1)(f) GDPR).

7. Our Referral Program (Affiliate Program)

If you visit our site via a referral link (affiliate link) and consent to the cookie banner, we will place a cookie in your browser. This cookie contains the ID of the affiliate who referred you and is valid for 30 days.

If you register with TRADIC within these 30 days, we will associate your new account with this partner. This is done solely for the purpose of crediting the partner with a commission for the successful referral. No other personal data will be shared with the partner. The legal basis for setting the cookie and making this association is your consent (Art. 6(1)(a) GDPR).

Bei erfolgreicher Werbung erhält der Partner 30% der von dir gezahlten TRADIC-Servicegebühren; 70% verbleiben bei TRADIC.

8. Wallets and Payment Processing

We use external payment service providers to process our fees and manage your account balance (wallet). Currently, payments are processed through Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Dublin 2, Ireland). When you make a payment, your payment details (e.g., credit card numbers or bank account information) are processed directly by the respective service provider. We do not store this data ourselves. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR).

Auszahlungen werden automatisiert und sicher über unseren lizenzierten Zahlungsdienstleister Stripe (Stripe Connect) abgewickelt. Hierfür ist eine separate Verifizierung bei Stripe erforderlich.

9. Duration of storage

We store your data only for as long as is necessary to provide our services or to comply with legal retention requirements.

• User account: We will delete your profile data upon request or upon termination of the contract, provided there are no legal obligations preventing us from doing so.
• Bot & Transaction Data: We store logs of bot activity for 10 years at the end of each calendar year. This is necessary to provide complete documentation of our commission income to the tax authorities and regulatory bodies (Art. 6(1)(c) & (f) GDPR). This retention applies even after the bot is no longer in use, to the extent that statutory documentation requirements apply.
• Tax documents: We retain documents relevant to accounting (e.g., invoices) for the legally required period of 10 years.

10. Your rights as a data subject

You have the right at any time to:

• Information about the data we have stored about you (Art. 15 GDPR).
• Correction incorrect data (Art. 16 GDPR).
• Deletion your data (“right to be forgotten”), provided that there are no legal obligations to retain the data (Art. 17 GDPR).
• Restriction of processing your data (Art. 18 GDPR).
• Data portability (Art. 20 GDPR).
• Objection to object to the processing of your data based on legitimate interests (Art. 21 GDPR).
• Withdrawal of your consent (e.g., for cookies) for the future (Art. 7(3) GDPR).

To exercise your rights, simply send us an email at the address listed above. You also have the right to file a complaint with a data protection supervisory authority.

11. Redirection to external AI providers

Our platform provides links to external AI services (e.g., ChatGPT by OpenAI) to help you set up your account. When you click these buttons, you will leave our website and be redirected to the respective provider’s platform.

TRADIC does not transfer any personal data (such as email addresses or API keys) to these providers. Your data entered on the landing pages is processed exclusively by the respective provider in accordance with its privacy policy:

• OpenAI (ChatGPT): openai.com/privacy/