Orders, Payments, and Contract Evidence
For an order, we process account and contact details, product, plan, price, platform, order and invoice identifiers, payment status, and billing data to perform the contract (Art. 6(1)(b) GDPR) and comply with commercial and tax law (Art. 6(1)(c) GDPR). Stripe processes payments. For each order we also retain the precise terms and withdrawal information displayed, cryptographic hashes, the order summary, and the time, IP address, and browser information associated with the declarations made. This evidence is processed to perform the contract and establish, exercise, or defend legal claims (Art. 6(1)(b) and (f) GDPR).
Withdrawal and Termination
When you use the electronic withdrawal or termination functions, we process your name, contract reference, email address, the content, date and time of the declaration, and technical evidence. This is necessary to handle the declaration, issue the immediate receipt, and comply with legal duties (Art. 6(1)(b) and (c) GDPR). Transactional emails are sent through Brevo. A data processing agreement under Article 28 GDPR is in place with Brevo.
Optional cancellation feedback and one-time expiry email
After cancellation, you may voluntarily provide a reason, comment and preferred platform. We store these separately from your legal cancellation declaration and, with your consent, use them to improve our offering and suggest suitable products. Suggestions consider your platform, existing products and optional feedback. Feedback is deleted after twelve months. No Discord behavioural data is analysed.
An email with product alternatives before licence expiry is sent only with separate consent and confirmation of your email address (double opt-in). The confirmation email contains no advertising. The one-time promotional email is normally sent seven calendar days before your licence period ends, including any complimentary cancellation bonus. If confirmation arrives later, delivery can occur within the final seven days, no later than the preceding day. This does not subscribe you to a newsletter. Consent can be withdrawn in your account or through the email link. Your cancellation, contractual rights and licence period are independent of this.
Delivery is handled by Brevo based on your consent (Article 6(1)(a) GDPR, Section 7 UWG). We record the purpose, exact consent wording, request, confirmation, use and withdrawal timestamps, and delivery status. Delivery details are minimised after 90 days. Minimum consent evidence is retained for three years after last use or withdrawal where necessary to defend legal claims (Article 6(1)(f) GDPR). The recipient address is then removed; a purpose-specific cryptographic value remains in the evidence. A minimal delivery record prevents further promotional emails for the same subscription. Account deletion removes feedback and blocks pending deliveries; legally required evidence remains separately protected. Requests for access, withdrawal or erasure can be sent to contact@einfachtraden.com.
When signing in through Google or Discord, we also record the provider-verified email address matching your account, the verification method, the time and a random login identifier. These details document a recent sign-in and do not grant marketing consent. The additional records on the linked sign-in account are removed at the next daily cleanup after the fifteen-minute evidence window expires; account deletion removes them immediately.
Where direct activation in a verified account is offered, you may request the one-time email using a separate, initially unchecked checkbox and the activation button instead. This requires a recent sign-in with a Gmail or Workspace address for which Google is authoritative. We record the exact consent wording, confirmation method and minimum sign-in evidence comprising the time, provider and cryptographic verification values. This consent evidence follows the same three-year retention period; it contains no OAuth credentials or plaintext email address.
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address
This data is not merged with other data sources.
Trader DNA Test
When you participate in our "Trader DNA Test," we collect your name, email address, and your answers to the behavioral questionnaire. From this data, we determine your personal trading profile (Trader DNA).
This data is processed for the purpose of evaluating the test, sending your results by email, and – if linked by you – assigning a corresponding role on our Discord server. If you consented to receiving a newsletter during the test, we also use your email address for promotional purposes.
The legal basis for this is your voluntary consent (Art. 6 para. 1 lit. a GDPR) and, for role assignment, contract fulfillment or pre-contractual measures (Art. 6 para. 1 lit. b GDPR). You may revoke your consent at any time for the future.
Free ATAS workspace by email
When you request the free ATAS workspace, we process your email address only to send the requested download link. Delivery is handled as a transactional email through Brevo. Your address is not subscribed to a newsletter or used for other advertising.
The email address and the IP address used for abuse prevention are not stored in plain text in our application database. We store only purpose-specific cryptographic HMAC values, the selected language, delivery status, expiry time, and download timestamps. The link is valid for seven days and the related records are deleted after 30 days. The legal basis is Article 6(1)(b) GDPR for providing the free digital service you requested.
Purchase and Activation of Software Products (Bots & Indicators)
When you purchase or request access to trading programs (such as the TMS-Levels indicator or fully automated setup bots) through our website, we collect the strictly necessary data (e.g., name, email address, platform IDs). In order to technically assign and activate the software licenses for the respective platform (e.g., ATAS), we forward this data to the required extent to our technical development and licensing partners.
The processing and necessary transfer of this data to our partners is carried out exclusively on the basis of pre-contractual measures or contract fulfillment (Art. 6 para. 1 lit. b GDPR).
Technical separation from trading-made-simple.com
Einfach traden (einfachtraden.com) is operated by Johann Wilhelm. Trading Made Simple (trading-made-simple.com) is a legally separate service with a different provider; contrary to an earlier version, the two services do not have the same controller. Under the current technical implementation, both applications use shared database and server components. Johann Wilhelm remains the controller for personal data processed in connection with Einfach traden. Use of this data for the separate service Trading Made Simple's own purposes is not part of the contract with Einfach traden and would require its own legal basis.