Privacy Policy

The controller responsible for processing personal data within the meaning of the General Data Protection Regulation is:

• TradingPlace UG (haftungsbeschränkt), Spitzengässle 8, 72800 Eningen, Germany
• Represented by managing director Michael Gross
• Telephone: +49 7121 3178442
• Email: info(a)tradingplace.io

We process personal data only where a legal basis permits us to do so. Processing may in particular be necessary for the performance of a contract or to take steps prior to entering into a contract under Article 6(1)(b) GDPR.

Where processing is necessary for compliance with a legal obligation, it is based on Article 6(1)(c) GDPR. Processing for the purposes of our legitimate interests or those of a third party is based on Article 6(1)(f) GDPR, provided that your interests or fundamental rights do not override those interests.

Where we obtain your consent, processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

When you access our website, your browser transmits technically necessary information to the server on which the website is hosted. This information may be temporarily stored in server log files.

The data is processed to provide the website, ensure its stability and security, analyse technical errors and detect abusive or unlawful access.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and economical operation of our website.

• IP address of the accessing device
• Date and time of access
• Page or file accessed
• Referrer URL or previously visited page
• Browser type and browser version
• Operating system and device type
• HTTP status code and amount of data transferred

Our website may use cookies or comparable storage technologies such as Local Storage. Cookies are small data records stored on your device.

Technically necessary storage may be required to save language settings, session information, security functions or your privacy preferences.

Technically necessary access to your device is based on Section 25(2) of the German Telecommunications Digital Services Data Protection Act. Subsequent processing of personal data is generally based on Article 6(1)(b) or (f) GDPR.

Non-essential cookies or comparable technologies are used only with your prior consent. The legal basis is Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR. You may withdraw your consent at any time through the privacy settings.

When you contact us by email, telephone or another communication channel, we process the information you provide to handle and respond to your request.

This may include your name, company, contact details, the content of your message and any other information you provide voluntarily.

Processing is based on Article 6(1)(b) GDPR where it is necessary to take pre-contractual steps or perform a contract. Other requests are processed based on our legitimate interest in proper communication under Article 6(1)(f) GDPR.

Companies and authorised users may be able to create a user account to submit company news, manage publications or use other platform features.

Processing is necessary to provide the account, verify the user's authorisation, secure access and provide the requested platform services.

The legal basis is Article 6(1)(b) GDPR. Security and log data may additionally be processed based on our legitimate interest in preventing misuse under Article 6(1)(f) GDPR.

• Name and, where applicable, the user's professional role
• Company name and company information
• Email address and other contact details
• Login credentials in encrypted or hashed form
• Registration and login times
• Technical security and log data

When you submit company news, press releases, images, videos, documents or other content, we process the related data to review, edit, publish and manage the submission.

Submitted content may contain personal data such as names, professional roles, photographs, quotations or contact details. The submitting user is responsible for ensuring that the transmission and publication of such data is lawful.

Processing is carried out to perform the user agreement under Article 6(1)(b) GDPR and based on our legitimate interest in operating a journalistic and industry-specific news service under Article 6(1)(f) GDPR.

• Title and content of the submitted news item
• Company and author information
• Images, videos, logos and documents
• Source, copyright and licence information
• Submission time, status and technical information

When paid or promoted publications are booked, we process the data necessary for ordering, invoicing, payment processing and performing the contract.

This may include company and contact-person data, billing address, VAT identification number, booking information, invoice data and payment status.

The legal basis is Article 6(1)(b) GDPR. Data required under tax and commercial law is processed and retained based on Article 6(1)(c) GDPR.

When you subscribe to our newsletter, we process your email address and, where applicable, your name, company, language and selected areas of interest.

The newsletter is sent only with your consent under Article 6(1)(a) GDPR. The registration time, confirmation time and IP address may be stored to document the subscription.

You may withdraw your consent at any time with effect for the future, for example by using the unsubscribe link included in every newsletter email or by contacting us.

After unsubscribing, your email address is removed from the active mailing list. It may be stored on a suppression list where necessary to prevent further messages and to demonstrate that your withdrawal has been respected.

Our website contains links to external websites and social networks, particularly LinkedIn. A link initially only provides a connection to the external destination.

A direct connection to the respective provider is established only when you click an external link. Your IP address, browser information and the page previously visited may then be transmitted to that provider.

The respective provider is generally responsible for processing data on the external website. Its privacy policy applies.

Personal data is disclosed only where necessary to provide our services, perform a contract, comply with legal obligations or protect legitimate interests.

Where service providers process personal data on our behalf, we enter into a data processing agreement with them in accordance with Article 28 GDPR.

• Hosting, cloud and infrastructure providers
• IT, maintenance and security service providers
• Email and newsletter service providers
• Payment, invoicing and accounting service providers
• Public authorities, courts or other bodies where disclosure is legally required

Some service providers used by us may be based outside the European Union or the European Economic Area or may process data there.

Data is transferred to a third country only where the requirements of Articles 44 et seq. GDPR are met. Such transfers may in particular be based on an adequacy decision by the European Commission or appropriate safeguards such as the Standard Contractual Clauses.

Where a transfer is based solely on your explicit consent, we will inform you of the possible risks before consent is given.

We retain personal data only for as long as it is necessary for the relevant processing purpose or statutory retention obligations apply.

Contract, invoice and booking data may be retained for up to ten years in accordance with commercial and tax law. Business correspondence may also be subject to statutory retention periods.

After the applicable period has expired, the data is deleted or anonymised unless it remains necessary for the establishment, exercise or defence of legal claims.

We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other security risks.

Our website uses an encrypted HTTPS connection. An encrypted connection can generally be recognised by the lock symbol and the address beginning with “https://”.

Where the applicable legal requirements are met, you have the following rights in relation to us:

You may contact us using the details provided in this Privacy Policy to exercise your rights. We may request suitable proof of identity where necessary to prevent the unauthorised disclosure of personal data.

• Right of access to personal data processed by us under Article 15 GDPR
• Right to rectification of inaccurate data and completion of incomplete data under Article 16 GDPR
• Right to erasure of personal data under Article 17 GDPR
• Right to restriction of processing under Article 18 GDPR
• Right to data portability under Article 20 GDPR
• Right to object to certain processing under Article 21 GDPR
• Right to withdraw consent with effect for the future

You may withdraw any consent given under data protection law at any time with effect for the future.

Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before the withdrawal.

Where we process personal data based on Article 6(1)(e) or (f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

We will then no longer process the relevant data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the General Data Protection Regulation.

You may in particular contact the supervisory authority of your habitual residence, place of work or the place of the alleged infringement. The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg is generally responsible for our company.

We currently do not use decision-making based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

We may update this Privacy Policy if our processing activities, technical systems, service providers or legal requirements change.

The version published on this website at the relevant time applies. The date of the latest update can be found at the beginning of this Privacy Policy.