Onlytraders Logo
Back to home
de en

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is No B.S. GmbH, Ritzling 9, 4904 Atzbach, Austria, Tel.: +436644269674, E-Mail: billing@onlytraders.com.

2) Data Collection when Visiting our Website

2.1 When using our website for information purposes only, we only collect data that your browser transmits to our server (server log files). This includes: Visited website, date/time, amount of data, source/reference, browser, operating system, IP address. The processing is carried out in accordance with Art. 6 (1) lit. f GDPR.

2.2 This website uses SSL or TLS encryption.

2.3 Web Analytics (Umami) We use the open-source software Umami for statistical analysis of website usage. Umami is exclusively operated on our own server within the EU (self-hosted). No data is shared with third parties.

Umami collects the following anonymized data: page visited, referral source, browser type, operating system, device type, screen resolution, language, and country (derived from the IP address). IP addresses are not stored and are not used to identify returning visitors. Umami does not set any cookies and does not enable cross-site tracking. Individual visitors cannot be identified at any point.

Processing is carried out on the basis of our legitimate interest in the statistical analysis of user behavior to improve our services in accordance with Art. 6 (1) lit. f GDPR.

2.4 Usage Analytics in the Members Area When you are logged in as a registered member in our Cockpit (members area), we collect data on which pages and features you use within the Cockpit to improve our services. The following data is collected: page visited, timestamp, event type (e.g., page view), and a technical session identifier. This data is associated with your user account.

Processing is carried out on the basis of our legitimate interest in improving and developing the members area in accordance with Art. 6 (1) lit. f GDPR. The data is automatically deleted after 180 days.

3) Hosting & Content Delivery Network

3.1 Hosting by providers within the EU.

3.2 Content Delivery Networks (CDNs) To provide technical libraries (e.g., JavaScript frameworks, icon fonts, charting libraries), we use the CDN services jsDelivr (operated by Prospect One, Poland) and unpkg (operated by Cloudflare, Inc., USA). When loading these resources, your IP address is transmitted to the respective CDN operator. Processing is carried out on the basis of our legitimate interest in a technically secure and optimized delivery of our website in accordance with Art. 6 (1) lit. f GDPR. Cloudflare is certified under the EU-US Data Privacy Framework.

4) Cookies

4.1 Our website only uses technically necessary cookies. One cookie stores your preference regarding the cookie notice (ot_cookie_consent). In the members area (Cockpit), session data is managed via the browser’s local storage (localStorage) — no cookies are set for this purpose.

4.2 Our web analytics tool (Umami) does not set any cookies and does not store any data in the browser.

4.3 You can configure your browser to inform you about the setting of cookies and to accept or reject them individually.

5) Contacting Us

Personal data is collected exclusively for processing your request (Art. 6 (1) lit. f or b GDPR).

6) Use of Customer Data for Direct Advertising

6.1 Newsletter: Registration via Double Opt-in. Data processing in accordance with Art. 6 (1) lit. a GDPR. Unsubscription possible at any time.

6.2 ActiveCampaign: Shipping service provider from the USA (certified under the EU-US Data Privacy Framework).

7) Site Functionalities

7.1 YouTube Embedded videos from Google Ireland Limited. Videos are only loaded after your consent via our cookie consent tool. A connection to Google servers is only established upon playback. Possible cookies and data transfer to Google LLC, USA. Google is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6 (1) lit. a GDPR (consent).

7.2 Maps (MapTiler) In the members area, we use the map service MapTiler to display interactive maps. Provider: MapTiler AG, Höfnerstrasse 98, 6314 Unterägeri, Switzerland. When loading the map, your IP address is transmitted to MapTiler. Switzerland has an adequacy decision from the EU Commission. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest).

7.3 Payment Processing (Digistore24) Payment processing and subscription management is handled by Digistore24. Provider: Digistore24 GmbH, St.-Godehard-Str. 32, 31139 Hildesheim, Germany. During the purchase process, your order data (name, email, payment information) is processed by Digistore24. Digistore24 acts as an independent controller in this regard. Legal basis: Art. 6 (1) lit. b GDPR (performance of contract). For more information, please refer to Digistore24’s privacy policy.

7.4 Discord We use the communication platform Discord as a community channel for our members. Provider: Discord Inc., 444 De Haro Street, San Francisco, CA 94107, USA. When you join our Discord community, we store your Discord ID in our system to grant you access to the members area on Discord. Discord Inc. is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6 (1) lit. b GDPR (performance of contract).

7.5 Zoom For online meetings. Provider: Zoom Video Communications Inc., USA. Certified under the EU-US Data Privacy Framework.

7.6 Google Forms For occasional surveys and forms. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data transfer to Google LLC, USA possible. Google is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest).

7.7 Support Form In the members area, a support contact form is available. Your name, email address, and message are processed. Processing is carried out for handling your request in accordance with Art. 6 (1) lit. b GDPR (performance of contract).

7.8 Google Calendar In the members area, we link to Google Calendar entries so you can add events to your personal calendar. Clicking the link redirects you to Google. Provider: Google Ireland Limited. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest).

8) Tools and Others

Cookie Consent Tool: To obtain consent for cookies (Art. 6 (1) lit. c GDPR).

9) Rights of the Data Subject

9.1 Right of access, right to rectification, right to erasure, right to restriction of processing, right to information, data portability, right to withdrawal, right to lodge a complaint.

9.2 RIGHT TO OBJECT: You can object to the processing at any time if there is an overriding legitimate interest. Please send your objection by email to: billing@onlytraders.com

10) Duration of Storage

  • Server log files: 14 days
  • Web analytics (Umami): No personal data stored
  • Cockpit usage analytics: 180 days (automatic deletion)
  • Contract data: For the duration of the contractual relationship plus statutory retention periods (up to 7 years)
  • Support requests: 3 years after completion of processing
  • Cookie consent setting: 365 days