Privacy notice

The controller is the person named in the legal notice. Contact: webmaster@myalg.de.

This website (myalg.de) and the application at app.myalg.de are under development and are a demonstration, not a finished product. The application is only for testers who have been expressly invited. If you have not been invited, please do not enter data there, and do not enter real personal or business data of third parties unless agreed otherwise.

The public pages set no cookies, include no analytics, tracking or advertising services, and load no fonts or scripts from third parties at runtime. The font is bundled when the application is built and served from our own server.

When you open a page, our server processes technically necessary connection data (in particular IP address, date and time, page requested, browser and operating system details) in server logs to deliver the page and keep operation secure. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). The data is kept only as long as necessary for that purpose.

The website and the application run on a virtual server at Google Cloud (Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2, Ireland, or Google LLC, USA) in the asia-south1 region (Mumbai, India). Data is therefore processed outside the EU and EEA. The transfer relies on the European Commission standard contractual clauses or the provider data processing terms (Art. 44 et seq. GDPR). A data processing agreement under Art. 28 GDPR is, or will be, concluded with the provider.

TO CHECK: Google Cloud Data Processing Addendum accepted in the console account? Keep the India location or move to an EU region (for example Frankfurt)?

The certificate for the encrypted connection (HTTPS) is obtained automatically from Let's Encrypt; no visitor data is sent in doing so.

If you write to us, we process your details (email address, message content) to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR. We delete the data once the enquiry is settled and no retention duty applies.

Emails from the application (invitations, password reset, notifications) are sent through the email service of STRATO AG, Pascalstraße 10, 10587 Berlin, Germany. A data processing agreement under Art. 28 GDPR is, or will be, concluded with the provider.

For sign-in at app.myalg.de we process your email address, name, a hash of your password (never the password itself), your role and organisation membership, technical session data (hash of the session token, expiry, IP address and browser) and logs of sign-ins and changes (audit trail). A technically necessary cookie (session) is set for sign-in. Purpose: providing and securing the test. Legal basis: Art. 6(1)(b) or (f) GDPR.

If you sign in with Google, we receive your email address and name from Google; Google processes data under its own privacy policy (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

If you connect broker accounts, we store credentials in encrypted form and data about your accounts and trading activity (orders, executions, positions, balances, journal entries with screenshots, notes and checklists). On your instruction we send orders and queries to the broker you chose; that broker's own privacy policy applies to its processing. Purpose: carrying out your instructions during the test. Legal basis: Art. 6(1)(b) GDPR.

Data is deleted when the test ends, or earlier on request, unless a retention duty applies. Backups are overwritten when they expire (up to 14 days).

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Contact webmaster@myalg.de.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement.

No automated decision-making including profiling under Art. 22 GDPR takes place. Trading rules you set yourself only carry out orders according to your own instructions.

We update this notice when the offering or the law changes. The version published here applies.