Privacy

Last updated: 30 October 2026

This notice explains which personal data we process when you use excon‑trading.de. The public pages run without advertising, without analytics services and without content from other servers; the fonts are on our own server too.

1. Controller

Bennet Blanck, Montessoristr. 1, 40670 Meerbusch-Osterath, Germany
Email: abo@excon-trading.de

2. Server and page requests

The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, located in Nuremberg. Hetzner processes the data on our behalf (Art. 28 GDPR).

With every request the server processes your IP address, the requested address, the time, the browser identifier and the response code. From this we keep an access log per IP address, browser identifier and, if you are signed in, account: first and last access, number of requests, number of refused requests and the most recently requested address. Sign-ins, failed attempts and changes to accounts are also recorded in a security log. The server logs can also contain IP addresses, usernames and email addresses.

The purpose is to run the website and protect it against attacks, for example by blocking individual addresses. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure operation. We delete all these logs after 30 days.

3. Language of the pages

As long as you have not chosen a language, we suggest one based on your country and your browser's language settings; on some pages we select it directly. We determine the country from your IP address using a country list on our own server. Nothing goes to third parties, and apart from the language cookie (section 4) we do not store the result. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is showing you the pages in your language straight away.

4. Cookies and browser storage

Name	Purpose	Duration
`pt_lang` Cookie	Remembers the language.	Selected automatically: until you close the browser. Chosen by you: one year.
`pt_session` Cookie	Keeps you signed in.	Until you sign out, one year at most.
`pt-lang-hint` Session storage	Stops the language hint from appearing more than once.	Until you close the tab.
`pt-user` Session storage	Fills in the username again after a failed attempt.	Until you close the tab.

All four are strictly necessary for the use you request (Section 25(2) no. 2 of the German TDDDG), so we do not ask for consent. We do not set advertising or statistics cookies.

5. Accounts and sign-in

Accounts exist for invited people and for subscribers. We store the username, name, email address, role, the password only as a verification value (PBKDF2), and the time and IP address of the last sign-in. For each signed-in device we also store the time, IP address and browser identifier. The purpose is access to the agreed service; the legal basis is Art. 6(1)(b) GDPR. We delete device data when you sign out, after one year at the latest. We delete subscriber accounts according to the periods in section 7, and invited accounts once they are no longer needed or you ask us to.

In the app for invited accounts, some charts come from TradingView (TradingView, Inc., USA) and price data comes directly from Binance. When you open these views, your browser connects to these providers and transmits your IP address, including to countries outside the EU. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is showing current prices. The public pages and the subscriber app load nothing from these providers.

6. Contact form and email

When you write to us, we process your email address, your message and, if given, your name in order to reply. The legal basis is Art. 6(1)(b) GDPR where a contract is concerned, otherwise point (f); our legitimate interest is answering your enquiry. The form sends your details by email to our mailbox at Hetzner; they do not stay on the web server. To protect against mass requests we keep your IP address in working memory for at most one hour. We delete messages once the enquiry is settled and no retention duty applies.

7. “Trend-Bot Signals” subscription

Order. To order, you give your email address. We store it with the chosen plan, the language, the time and your IP address and create a checkout at Stripe, passing on the email address, plan, language and an internal number.

Payment. Payment runs through Stripe Managed Payments; the checkout page says “Sold through Link”. You enter your payment details directly at Stripe and we do not receive them. From Stripe we get the customer number, the subscription number, the status of the subscription, its periods and any refunds. Stripe itself is responsible for the processing on the checkout page and in a Link account: Stripe Technology Company, Limited, One Wilton Park, Wilton Place, Dublin 2, Ireland, and affiliated companies, including in the USA. See the Link privacy policy and the Stripe privacy policy for details.

Contract. For your subscription we store the email address, status and periods, and cancellations and withdrawals with their time as evidence. For the one-time free trial we remember which email address has already had it. We send signals, reminders, confirmations and password links by email through our mailbox at Hetzner.

Legal bases. Art. 6(1)(b) GDPR for the contract, point (c) for statutory retention duties and point (f) for evidence and the one-time trial; our legitimate interest is defending against claims and preventing misuse of the trial.

Retention.

Orders that were not completed: 30 days.
IP addresses for orders, cancellations and withdrawals: 90 days.
Sent emails in the outbox: 90 days.
Subscription, account, evidence and the trial marker: three years after the last subscription ends.
Records we must keep for bookkeeping: eight years (Section 147 of the German Fiscal Code).

8. Recipients and countries outside the EU

Only the parties named here receive data: Hetzner as processor, Stripe as a controller in its own right and, for invited accounts, TradingView and Binance. We pass data to authorities only where the law requires it. Stripe, TradingView and Binance process data outside the EU; these providers describe the applicable safeguards in their own notices.

9. No automated decisions

We make no automated decisions within the meaning of Art. 22 GDPR and do not build profiles. Stripe checks payments for fraud; Stripe describes this in its notice.

10. Required data

The website cannot be delivered without an IP address. Without an email address we cannot set up a subscription or answer enquiries. Everything else is voluntary.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we rely on Art. 6(1)(f) GDPR you can object on grounds relating to your particular situation (Art. 21). An email to abo@excon-trading.de is enough.

You can also complain to a supervisory authority, for example the one responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf, Germany, www.ldi.nrw.de.

12. Changes

We update this notice when the processing changes. The version on this page applies.