Last updated: May 2026. This English policy mirrors our GDPR information. The German version at Datenschutz applies for users in Germany/EU where required.
1. Controller
Controller for data processing on this website:
(AlgoScriptX)
Phone:
Email:
2. Scope
This policy applies to visitors of our website worldwide. We are based in Germany and process personal data of users in the EU/EEA in accordance with the GDPR. For users outside the EU/EEA we apply comparable data protection principles where applicable.
3. Hosting
Our website is hosted on servers operated by Hetzner Online GmbH (Germany). When you access the site, technically necessary data is processed (e.g. IP address, time, requested page, browser type).
Legal basis: Art. 6 (1) (f) GDPR (secure operation of the website).
4. SSL/TLS encryption
This website uses SSL/TLS encryption to protect data in transit.
5. Cookies and consent
We use Real Cookie Banner to obtain and document your consent to non-essential cookies and services. Essential cookies are required for the site to function. Other services load only after you consent.
Legal basis: Art. 6 (1) (a) GDPR (consent) or Art. 6 (1) (f) GDPR (essential cookies).
6. Contact form
When you contact us we process the data you submit (e.g. name, email, message) via Contact Form 7. Messages are stored in Flamingo on our system.
Legal basis: Art. 6 (1) (b) or (f) GDPR.
7. Marketplace & digital products
AlgoScriptX operates a marketplace for digital trading tools (cTrader, MetaTrader, TradingView, etc.). When you buy or sell we process in particular:
- Name and email address
- Order and billing data
- Payment status (via payment providers)
- License and download information
- IP address and order time (fraud prevention)
- For sellers: identity verification data (KYBC) as described on Become a seller
Legal basis: Art. 6 (1) (b) GDPR (contract) and Art. 6 (1) (c) GDPR (legal retention, e.g. tax and commercial law).
Retention: Order and invoice data are kept for statutory periods (typically up to 10 years).
Payment providers
Payments are processed by external providers (e.g. PayPal, Stripe). They receive data required for payment. We do not store full card numbers on our servers.
7a. Statutory online withdrawal (§ 356a BGB)
If you use our online withdrawal function (/withdraw/ or /widerruf-online/), we process your name, order number, email address, and IP address (fraud prevention and proof of submission), plus timestamps of your declaration.
Legal basis: Art. 6 (1) (c) GDPR (legal obligation) and Art. 6 (1) (b) GDPR (steps prior to contract performance / handling your declaration). Receipt confirmations are sent via Mailjet (see section 8).
Retention: Withdrawal declarations are kept for the statutory limitation periods and as required for tax and commercial records (typically up to 10 years for related order data).
8. Email (Mailjet)
System and order emails are sent via Mailjet (email addresses and message content).
Legal basis: Art. 6 (1) (b) or (f) GDPR. A data processing agreement under Art. 28 GDPR is in place with Mailjet.
9. Security
To protect the website, IP addresses and technical access data may be processed (e.g. firewall, rate limiting).
Legal basis: Art. 6 (1) (f) GDPR.
10. Backups
Website backups may contain order and contact data for disaster recovery.
Legal basis: Art. 6 (1) (f) GDPR.
11. Transfers outside the EU/EEA
Some providers (e.g. payment or email services) may process data outside the EU/EEA. Transfers occur only on the basis of appropriate safeguards (e.g. EU Standard Contractual Clauses) unless an adequacy decision applies.
12. Your rights
You have the right to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Contact:
13. Supervisory authority
You may lodge a complaint with a supervisory authority, e.g. Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany — www.lda.bayern.de
14. Updates
We update this policy when services or legal requirements change.