Source: https://www.att-signals.com/privacy
Timestamp: 2019-04-25 06:37:11+00:00

Document:
We are delighted about your interest in our services and take your privacy very seriously. This data protection policy sets out and explains the nature, scope and purpose of the processing of personal data ("data") through the services and presence of ATT Trading Signals UG (limited liability) and the related websites (e.g., www.att-signals.com or social websites), features, content, business processes and external offline and online services (all of which are referred to herein as “service(s)”. With regard to the legal terms used, reference should be made, in particular, to the definitions in Art. 4 of the GDPR (General Data Protection Regulation).
As far as permissible, ATT-Signals uses the data processing of cookies and so-called tracking (analysis of visitor behaviour, measurement of reach, among other things) with regard to the users, in return for the services we provide free of charge, including support.
If we disclose data to external persons or companies (order processors or third parties), transmit data to third parties or otherwise grant others access to the data, then only on the basis of juridical consent (e.g., transmission of data to a payment service provider in accordance with Art. 6 (1)(b) GDPR for fulfilment of the contract), if the affected person has given his/her consent, if there is a legal obligation to do so or if it is based on our legitimate interests. The processing of data by third parties through our order based on a so-called processing contract takes place in accordance with Art. 28 GDPR.
ATT-Signal enters into a manifold of contractual relationships and pre-contractual relationships. These include contractual relationships with contractual partners such as customers and ordering parties, but also with interested parties and other users (collectively "contractual partners"). We process the data of our contractual partners in accordance with Art. 6 (1)(b) GDPR in order to fulfil our contractual or pre-contractual services. The processed data itself, the nature, the scope, the purpose and the necessity of its processing are determined by the underlying contractual relationship.
When utilising our services, we can store the IP address and the time of the respective action of the user. The storage takes place based on our legitimate interests as well as the interests of the users with regard to protection against misuse and other unauthorised use. In principle, this data will not be disclosed to third parties unless this is necessary in order to pursue our claims pursuant to Art. 6 (1)(f) GDPR, or there is a legal obligation pursuant to Art. 6 (1)(c) GDPR. The data will be deleted if it is no longer required to fulfil contractual or statutory duties of care and any warranty, consumer protection or similar obligations. For this purpose, the necessity of keeping the data is reviewed every three years. Furthermore, statutory storage requirements apply.
Users have the possibility to create an account. Upon registration, the required mandatory information is communicated to users and processed based on Art. 6 (1)(b) GDPR for purposes of providing the account (signal service) or to provide the service itself (copy trading). The processed data includes, in particular, the login information (name, email address, password if applicable). This data, as well as other data entered during registration, will be used for the purpose of providing the account and the use of related services.
The users can be informed by email about information that is related their account (e.g., technical changes). As soon as users have cancelled their account, or the term has expired, their data concerning the account will be deleted, subject to legal storage obligations. It is the users’ responsibility to back up their data before the end of the contract. We are entitled to irretrievably delete all user data stored during the contract duration.
When utilising our registration and login functions, as well as the account utilisation, we store the IP address and the time of the corresponding action of the user. This storage is based on our legitimate interests and on the interest of the user’s protection against misuse and other unauthorised use. Disclosure of this data to third parties does generally not take place unless it is necessary to pursue our claims or there is a legal obligation in accordance with Art. 6 (1)(c) GDPR. IP addresses are anonymised or deleted after 7 days at the latest.
To process user inquiries faster and more efficiently, we use the Zendesk CRM system from Zendesk, Inc., 989 Market Street #300, San Francisco, CA 94102, USA. Our legitimate interests are in accordance with Art. 6 (1)(f) GDPR. Zendesk is a certified participant of the Privacy Shield Agreement, thereby providing additional assurance of compliance with European data protection law.
Zendesk only uses the user’s data for the technical processing of inquiries and does not pass it on to third parties. To use Zendesk, the specification of a correct email address is required. Pseudonymous utilisation is possible. During the processing of service requests, it may be necessary to collect further data (name, address).
What follows is the explanation of the content of our regular (circa weekly) newsletter, as well as the registration, sending and statistical evaluation procedure, as well as the right of objection. By subscribing to our newsletter, you consent to the receipt and the procedures described.
To register for the newsletter, it is sufficient to enter your own correct email address.
We sometimes also ask for the name, so that it is possible to personally address the individual or in connection with a further contact request.
The newsletters and the ordered Trading-Signals contain a so-called Web-Beacon. This is a pixel-sized file which is retrieved by our server when you open the newsletter/Trading-Signals message or from the server of a mail service provider. Upon retrieval, technical information, for example information about the browser and the computer system, as well as your IP address and the time of retrieval are collected. This information is used for the technical improvement of the services based on the technical data, the target groups and their reading behaviour, which is based on the location that the information is retrieved (can be determined with the help of the IP address) or the access times. Statistical surveys also include determining if the newsletter/Trading-Signals messages were opened, when they were opened, and which links were clicked on. Although this information can be technically ascribed to the individual recipients, there is no intention on our part or the mail service providers to monitor individual recipients. Instead, the evaluations serve to identify the reading habits of the recipients and to adapt our content to suit these habits or to send different content according to the interests of the recipients. A separate revocation of the performance measurement is not possible. In order to do this, the newsletter itself or the Trading-Signals subscription would have to be cancelled.
ATT-Signals does not send the newsletter itself, but via the mail service provider MailChimp, a US-American based provider by Rocket Science Group LLC, 675 Ponce De Leon Ave NE#5000, Atlanta, GA 30308, USA. The data protection policy of the mail service provider can be found here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement, providing a guarantee of compliance with European privacy standards ( https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active ) This mail service provider is used based on our legitimate interests in accordance with Art. 6 (1)(f) GDPR and a contract processing agreement (Data Processing Agreement) in accordance with Art. 28 (3)(1) GDPR. By subscribing to our newsletter, you consent to receiving the newsletter and the procedures described in this context.
The mail service provider may use the data of the recipient in a pseudonymous form, meaning without being ascribed to an individual user, to optimise or improve their own services, e.g., for the technical optimisation of the mailing and the presentation of the newsletter or for statistical purposes. However, the mail service provider does not use the data of the recipients from our newsletter to write them personally and does not pass this data onto third parties.
ATT-Signals uses the mail service provider SendGrid, a US-American based company by SendGrid, Inc., 1801 California Street, Suite 500, Denver, CO 80202, USA for the delivery of the ordered Trading-Signals. SendGrid is a service which allows the dispatch of emails, among other things, to be organised and analysed. If users enter data such as, for example, an email address, it will be stored on the SendGrid servers in the USA. The data protection policy of the mail service provider can be found here https://sendgrid.com/policies/privacy/. SendGrid is certified under the Privacy Shield Agreement, providing a guarantee of compliance with European privacy standards ( https://www.privacyshield.gov/participant?id=a2zt0000000TRktAAG&status=Active ). With the help of SendGrid, we are able to analyse the sent emails. This allows us to determine whether a message has been opened and which links have been clicked on. In addition, technical information is collected (e.g., time of retrieval, IP address, browser type and operating system). This solely serves for statistical analysis of the emails. The results of these analyses can be used to better identify delivery problems. This mail service provider is used based on our legitimate interests in accordance with Art. 6 (1)(f) GDPR and a contract processing agreement (Data Processing Agreement) in accordance with Art. 28 (3)(1) GDPR.
In accordance with Art. 32 GDPR, ATT-Signals takes into account the currency of technology, the costs of implementation, and the type, scope, circumstances and purposes of processing, as well as the different probabilities of occurrence and severity of the risk to the rights and freedoms of natural persons, and appropriate technical and organisational measures to ensure a level of protection appropriate to the risk incurred. This includes, above all, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data and controlling access, input, disclosure, security of availability and separation of such data. In addition, there are procedures that introduce observance of data subject rights, data deletion and responses to data threats. Furthermore, according to Art. 25 GDPR, the protection of personal data is already taken into account in the development and selection of hardware, software and procedures, in accordance with the principle of data protection, through the design of technology and privacy-friendly default settings.

References: Art. 4
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 28
 Art. 32
 Art. 25