Controller
The controller responsible for processing personal data on this website is Dennis Klahn, Theresenstraße 36, 28203 Bremen, Germany. For privacy questions or requests, contact info@thetradingexpert.com.
Data we process
We process information entered during registration, evaluation purchasing, contact enquiries and optional marketing subscriptions. This may include email addresses, names, billing details, selected products, trading platform preferences, payment and order references, account activity, consent records and technical data (such as IP address, request time, browser or device information and security logs). Where marketing links contain campaign parameters, we may also record the referral source and landing path in aggregate acquisition reporting.
Registered account, checkout and orders
To provide registration, evaluation purchases, invoicing, payment confirmation, order status and fraud-prevention services, Aurion processes account identifiers, contact and billing data, purchased plan, selected platform, price, order status, acceptance evidence and payment-provider references. Depending on the processing activity, the legal basis includes performance of a contract (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c)) and legitimate interests in fraud prevention and service security (Art. 6(1)(f)). Payment details needed for settlement are also processed by the payment provider; Aurion does not require customers to provide payment-card information directly in the account settings.
Hosting and delivery (Vercel)
This website is hosted and delivered using Vercel. Vercel processes connection and server-log data on our behalf to provide, secure and operate the website. The legal basis is our legitimate interest in operating a reliable and secure digital service (Art. 6(1)(f) GDPR).
Marketing emails and Brevo
If you subscribe to Aurion marketing emails, we process your email address and, if supplied, your first name to send product news and relevant service updates. The legal basis for those emails is your consent (Art. 6(1)(a) GDPR).
Marketing subscriptions are managed with Brevo as our email-service provider and processor. The submitted contact details are transferred to the configured Brevo contact list for this purpose. You can withdraw consent at any time with effect for the future by using an unsubscribe option in an email or by contacting info@thetradingexpert.com.
Where a marketing signup contains referral or campaign parameters, we may process these alongside signup information to assess the effectiveness of marketing channels. Attribution information is not a substitute for optional cookie consent, and analytics technologies that require consent are only activated after the relevant consent has been provided.
An email address is needed to subscribe to marketing messages; your first name is optional. Marketing subscriptions are separate from account registration and evaluation purchases.
Optional website analytics (Google Analytics 4)
If Google Analytics 4 is configured on this website, it is loaded only after you actively consent to optional analytics. It may be used to understand page activity and supported conversion events. We do not intentionally include account email addresses, full names or payment details in analytics event parameters.
The legal basis for Google Analytics processing is your consent under Art. 6(1)(a) GDPR. You may withdraw that consent at any time through the Cookie settings link in the footer. Withdrawal affects future processing and does not make processing that occurred before withdrawal unlawful.
Google Analytics is provided by Google. Depending on the service configuration and provider subprocessors, data may be processed outside the EEA. Where required, applicable transfer safeguards provided for the service are used. More detail about browser storage is available in the Cookie Policy.
Aurion accounts, purchases and Supabase
Aurion Funding uses Supabase for account authentication, trading dashboards, order records and administrative functions. Where those areas are used, Supabase may process account identifiers, authentication/session information and application data needed to provide the requested account functionality. Strictly necessary authentication cookies may be used to keep a secure login session active.
The legal basis is Art. 6(1)(b) GDPR where processing is required to provide requested account functionality and Art. 6(1)(f) GDPR to safeguard service infrastructure, accounts and prevent misuse.
Cookies and similar storage
Optional Google Analytics cookies are used only after analytics consent. Aurion stores the visitor's analytics choice in browser localStorage so that the preference can be applied on later page views. Strictly necessary authentication/session storage may also be used in login, dashboard and admin areas. Details are set out in the separate Cookie Policy.
Contact form and email
If you contact us via the website form or by email, we process your email address, selected topic, message and any information you provide in order to answer your enquiry. The website form does not subscribe you to marketing or create an Aurion account. Depending on the request, the legal basis is Art. 6(1)(b) GDPR (pre-contractual or contractual communication) and/or Art. 6(1)(f) GDPR (handling legitimate business enquiries).
Website enquiries are recorded in the protected customer messaging system (Supabase) and may be forwarded to the website operator via the configured transactional email provider (Brevo, if activated). To reduce automated submissions, a cryptographic pseudonymous identifier derived from the sending connection is recorded with the message for duplicate-request prevention. The original IP address is not written into the contact record by this feature. Messages are accessible to authorized staff and are retained only as necessary for handling the enquiry and applicable legal requirements.
Payment processing
Checkout is handled through the payment provider configured for the order (including Mollie where selected). Required payment and billing information and technical transaction references are shared to initiate and verify payment, handle refunds and keep accounting records. The payment provider may process additional data under its own privacy notice.
Recipients and international transfers
Personal data is disclosed where necessary to providers supporting website hosting, authentication, payment handling, customer messaging and consented analytics, including Vercel, Supabase, Brevo, Mollie where used and Google where configured. Where a provider or its subprocessors process data outside the EEA, transfers are handled using the safeguards made available for the relevant service, such as an applicable adequacy decision, the EU–US Data Privacy Framework where available, or EU Standard Contractual Clauses.
Retention
We retain personal data only for as long as it is needed for the relevant purpose or as required by law. Marketing subscription details and attribution data are retained for their stated purposes until withdrawal or another applicable deletion event, subject to records needed to document consent or meet statutory obligations. Contract, transaction and accounting records may be stored for longer where required by law. Analytics data is retained according to the configured Google Analytics retention settings and is not used after withdrawal for new tracking activity.
Your rights
Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you may withdraw that consent at any time with effect for the future. To exercise a right, contact info@thetradingexpert.com.
You also have the right to lodge a complaint with a competent data-protection supervisory authority.
Automated decision-making
Marketing subscription handling does not involve solely automated decisions producing legal or similarly significant effects. Risk and compliance workflows may use automated signals and manual review; any legally relevant automated decision-making will be described in more detail if introduced.
Changes to this policy
We will update this policy when providers, data purposes or other material processing activities change, and inform users where required.
