Privacy notice

Controller

Providing the website

The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in Germany. Every page request first passes through Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA); Cloudflare delivers the pages, protects the website against attacks and hides our server's address. To do so, Cloudflare and our server process your browser's request, including your IP address. Both work for us as processors under a contract under Article 28 GDPR.

Cloudflare may also process data in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework; for certified companies, the European Commission has found an adequate level of data protection (Article 45 GDPR).

Our server keeps no access logs with IP addresses. The legal basis is our legitimate interest in providing the website securely and reliably (Article 6(1)(f) GDPR).

Protection against overload

To protect the service against too many requests, our server counts each visitor's requests for a short time. For this it doesn't store your IP address, only a one-way code derived from it with a secret key (a hash), which is deleted automatically after one hour at the latest. The legal basis is our legitimate interest in a working, secure service (Article 6(1)(f) GDPR).

Your country and the language of the website

Our server uses your IP address to find the country you are visiting from. For this it uses a local copy of DB-IP's country database: the lookup takes place only on our server, and your IP address is neither passed on nor stored.

The result is used only for the request at hand. When you open an address without a language, we use it to choose a suitable language (for example Persian for visitors from Iran). Our internal rules on which services are offered where may also take it into account; currently no service is restricted. The legal basis is our legitimate interest in showing the website in a suitable language and in following the rules that apply to our services (Article 6(1)(f) GDPR).

Cookies

We set only one cookie, and only when you choose a language in the language menu: "locale" stores your choice (en, fa or de) for one year, so that the website opens in your language next time. It is strictly necessary for the function you asked for and therefore needs no consent (Section 25(2) No. 2 TDDDG).

We use no cookies for analytics, advertising or tracking. To protect the website, Cloudflare may set strictly necessary security cookies.

Error reports

If an error occurs on our server, it sends a technical error report to Sentry (Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA); the reports are stored in Sentry's EU data centre. They contain the time, the kind of error and the path of the page (for example /en/markets/crypto:BTC-USD), but no IP addresses, cookies, request contents or other information about you. Sentry also checks from outside every minute whether the website is reachable.

Sentry works for us as a processor, is certified under the EU-U.S. Data Privacy Framework and keeps the reports for 90 days at most. The legal basis is our legitimate interest in finding and fixing errors (Article 6(1)(f) GDPR).

Feedback form

If you send us feedback through the form, we store only your message and the page you send it from: no name, no e-mail address, no IP address and no cookies. Please don't write personal information in the message. We delete messages automatically after 12 months. The legal basis is our legitimate interest in improving the service (Article 6(1)(f) GDPR).

Contact by e-mail

If you write to the e-mail address above, Cloudflare forwards your message to our mailbox at Google (Gmail; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We use your address and your message only to answer you, and delete them when the conversation is over, unless the law requires us to keep them. The legal basis is handling your request (Article 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Article 6(1)(f) GDPR).

Fonts, charts and prices

Fonts, the chart library and all other parts of the website are delivered by our own server. While you use it, your browser contacts no other company except Cloudflare (see above). Our server fetches the prices shown from our data sources (see "Sources and licences") without passing on any information about you.

Your rights

You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where we process data on the basis of our legitimate interest, you may object at any time on grounds relating to your particular situation (Article 21 GDPR). To do so, write to the e-mail address above.

You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR), for example the one responsible for us: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (the Hessian Commissioner for Data Protection and Freedom of Information), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

datenschutz.hessen.de

No obligation, no automated decisions

You don't have to give us any personal data beyond what is technically necessary; the website works without the language cookie, the feedback form and e-mails. We make no decisions based solely on automated processing that have legal effects on you or similarly significantly affect you (Article 22 GDPR).

Changes

We update this notice when the service changes, for example when user accounts or e-mail notifications are added.