PRIVACY · AS OF OCTOBER 2026

Privacy Policy

Your data belongs to you. Here we explain as simply as possible which data we process on social-trading.org, why we need it and what rights you have.

1. Who is responsible?

The controller responsible for data processing on this website is the operator of social-trading.org.

E-mail: support@social-trading.org

You can write to us at this address at any time with any questions about data protection.

2. The key points at a glance

  • We only process the data we need for the website and our contact with you.
  • Our website runs on servers of a hosting provider in the United Kingdom.
  • We do not sell your data.
  • We only use an analytics service with your consent.
  • Videos are only loaded from our video service when you start them.
  • We use data from the trading platform’s partner program to support you; we do not store your login details there.
  • You can request information, have data corrected or deleted and withdraw consent at any time.

3. Hosting and server log files

Our website is hosted by a hosting provider with servers in the United Kingdom. Each time you visit, the server automatically stores technical data sent by your browser:

  • IP address
  • date and time of access
  • page requested and amount of data transferred
  • previously visited page (referrer)
  • browser and operating system

We need this data to run the website securely and reliably and to fend off attacks. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The log files are deleted automatically after a short time unless they are needed to investigate a security incident.

4. Cookies and local storage

We only use a few cookies and similar technologies:

  • Necessary: login cookies so you stay logged in, a language cookie for German or English, security cookies against misuse and your choice of light or dark mode (stored in your browser).
  • Only with your consent: cookies of the analytics service (see section 11).
  • When you play a video: see section 13.

We set necessary cookies on the basis of Section 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act) and Art. 6(1)(b) and (f) GDPR, and all others only with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). We store your cookie choice itself in a cookie for six months. You can change it at any time via Cookie settings (also in the footer) and delete or block cookies in your browser.

5. Registration and members area

When you register, we process:

  • first and last name
  • e-mail address
  • your invitation code
  • your password (stored only in encrypted form)
  • time of registration and your language setting

We use this to create your member account, give you access to the members area and guide you personally. The legal basis is the performance of our agreement with you (Art. 6(1)(b) GDPR). We store your data for as long as you are a member. If you would like your account deleted, just write to us.

6. Data from the trading platform’s partner program

If you open an account with the trading platform and its partner program through our recommendation, we see some details of your account there as a partner. We match this data with our customer management once a day:

  • name, e-mail address and account numbers at the trading platform
  • who invited you and where you are in the partner structure
  • balance of your trading account, balance of the accounts below you and deposits in the current month
  • the date you registered there

We also keep one record per day. We use this to unlock the members area for you, to support you when you get started and to create overviews. The legal basis is the performance of our agreement with you (Art. 6(1)(b) GDPR) and our legitimate interest in supporting you correctly (Art. 6(1)(f) GDPR).

Partner area: Members who have invited others themselves can see the accounts below them with names and balances in the partner area after logging in – just as the trading platform’s partner portal shows them – and can download them as a PDF. So if someone invited you, that person can see your name and your balance. E-mail addresses and other details from our customer management are not shown there.

My transactions: For members for whom we unlock this feature, we store the transactions of their wallet at the trading platform (date, type, status, method, amount) and the account balance. Only you can see your transactions and download them as a PDF or Excel file. They are sent via the partner program or via your personal bookmark button.

We do not know or store your login details for the trading platform or the partner portal.

7. Contact form, e-mail and support

When you write to us via the contact form, by e-mail or via a support ticket, we process your name, your e-mail address, the topic and your message.

We only use this data to answer your request. The legal basis is Art. 6(1)(b) GDPR (for questions about your membership) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete the data once your request has been dealt with and no retention obligations apply.

8. Booking appointments

You can book a personal conversation via our calendar. We process your name, your e-mail address, the chosen time and your notes. For the conversation itself we may use a video conferencing service, which we will name in the booking confirmation.

The legal basis is Art. 6(1)(b) GDPR.

9. E-mails to you

After you register, we send you e-mails that are part of your membership, for example to set your password and about getting started. For this we store your contact details in our customer management system on our own server. The e-mails are sent via the mail servers of our hosting provider in the United Kingdom.

If you no longer want to receive information from us, you can unsubscribe at any time – via the link in the e-mail or with a short message to us. The legal basis is Art. 6(1)(b) GDPR or your consent (Art. 6(1)(a) GDPR).

10. Messenger channel

We run a messenger channel for dates and announcements. When you join via your personal link, we store your messenger ID and the name you chose there with your contact record so that we can match the request to your account. If you leave the channel or your account is deleted, this link is removed.

Joining is voluntary. The messenger provider’s own privacy policy applies to your use of the messenger itself. The legal basis is Art. 6(1)(b) GDPR.

11. Protection against spam and misuse

  • Form protection: Our forms are protected by a verification service of a provider in the USA. It checks whether a human is filling in the form. Technical data such as your IP address and browser information are sent to that provider in the process.
  • Login protection: Login attempts are logged with IP address and time so that we can detect and block attacks.

The legal basis is our legitimate interest in a secure website (Art. 6(1)(f) GDPR).

12. Analytics

With your consent we use an analytics service of a provider based in Ireland. This shows us which pages are visited so that we can improve the website. The service records, for example, pages viewed, time spent, device, browser and approximate region. IP addresses are not stored in the process.

  • The analytics service is switched off for logged-in members.
  • Data may be transferred to the provider’s parent company in the USA. It is certified under the EU-US Data Privacy Framework.
  • The service is only loaded once you click “Accept” in the cookie banner.
  • You can withdraw your consent at any time with effect for the future – via Cookie settings.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

13. Fonts

The fonts on this website are stored on our own server. No connection to external font providers is made when a page loads.

14. Videos

On some pages we show tutorial videos. The videos are hosted by the video service Vimeo (Vimeo.com, Inc., USA) and are played through a video player on our own website.

  • Before you start a video: no connection to Vimeo is made. The preview image comes from our own server.
  • When you click play: your browser loads the video from Vimeo’s servers, including servers in the USA. Vimeo receives technical data such as your IP address, browser and device information, the page you are on and playback information. We use Vimeo’s privacy mode (“Do Not Track”); according to Vimeo, it then does not set cookies to analyse your behaviour. If you are logged in to Vimeo at the same time, Vimeo may link the request to your Vimeo account.
  • On our server: our video player counts which videos are watched and how far, so that we can improve the guides. This data stays on our server and is deleted after 30 days.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to show you the guides clearly and with short loading times. You decide yourself whether a video is loaded by clicking play. Vimeo is certified under the EU-US Data Privacy Framework. You can find more in Vimeo’s privacy policy.

15. Links to other providers

On our website you will find links to other providers. Some of them are referral links: the provider can then see that you came via us.

As soon as you click such a link, the privacy policy of that provider applies. We have no influence on how they process data.

16. Transfers to third countries

Our servers are located in the United Kingdom. The European Commission has issued an adequacy decision for the United Kingdom. The operator is based in the USA. In addition, some services (analytics, form protection, profile pictures, videos) use servers in the USA. Data is only transferred where necessary for the respective purpose, on the basis of the EU-US Data Privacy Framework, EU standard contractual clauses or where it is necessary to perform our agreement with you (Art. 49(1)(b) GDPR).

17. How long we keep data

  • Member account: for as long as you are a member
  • Enquiries and support: until your request has been dealt with
  • Server log files and login records: only briefly, for security
  • Video statistics on our server: 30 days
  • Messenger link: until you leave the channel or your account is deleted
  • Data from the partner program, daily records and transactions (“My transactions”): for as long as you are a member

After that we delete your data or restrict its processing.

18. Your rights

You have the right at any time to:

  • information about the data we store about you (Art. 15 GDPR)
  • correction of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdraw consent with effect for the future (Art. 7(3) GDPR)
  • lodge a complaint with a data protection supervisory authority, for example in the country where you live (Art. 77 GDPR)

Right to object: Where we process data on the basis of our legitimate interest, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). You can object to the use of your data for advertising at any time without giving reasons.

Just write to us at support@social-trading.org.

19. Security

Our website is encrypted throughout with SSL/TLS – you can recognise this by the padlock in the address bar. We only store passwords in encrypted form. Only a few administrators have access to the technical area of the website.

20. Changes

If our website or the legal requirements change, we will update this privacy policy. The current version on this page always applies.

As of: October 2026