Datenschutzerklärung

Privacy Policy & Cookie Policy

Last updated: January 11, 2025

🔒 GDPR Compliance

This Privacy Policy is compliant with GDPR, German Federal Data Protection Act (BDSG), and ePrivacy Directive. Generated using eRecht24 GDPR standards.

Certified by:eRecht24 GDPR Generator

Your Rights Under GDPR

📋 Access (Art. 15 GDPR)

Request your personal data

✏️ Rectification (Art. 16 GDPR)

Correct inaccurate data

🗑️ Erasure (Art. 17 GDPR)

Delete your personal data

📤 Portability (Art. 20 GDPR)

Export your data

🛑 Restriction (Art. 18 GDPR)

Limit data processing

❌ Object (Art. 21 GDPR)

Object to processing

1. Verantwortlicher (Data Controller)

TradeComply

Represented by: Phuong Nguyen (CEO) & Rahul Bhat (CTO)

Email: info@tradecomply.eu

Website: www.tradecomply.eu

EU Representative: Available upon request

Data Protection Officer (DPO): For data protection inquiries, contact our DPO at privacy@tradecomply.eu

2. Datenverarbeitung (Data Processing Overview)

We process personal data necessary for providing trade compliance services:

Personal Data Categories:

  • Account Data: Name, email address, company name, business role
  • Trade Data: Product descriptions, HS codes, customs documents, shipment details
  • Technical Data: IP addresses, browser information, device identifiers
  • Usage Data: Platform interactions, feature usage, session data
  • Communication: Support requests, feedback, correspondence
  • Billing Data: Payment information (processed by third-party providers)

3. Rechtsgrundlagen (Legal Basis for Processing)

Art. 6(1)(b) GDPR - Contract Performance

Service provision, account management, trade compliance assistance

Art. 6(1)(c) GDPR - Legal Obligation

Customs law compliance, tax obligations, record keeping

Art. 6(1)(f) GDPR - Legitimate Interest

Security monitoring, fraud prevention, service improvement

Art. 6(1)(a) GDPR - Consent

Marketing communications, newsletter, optional features

4. Speicherdauer (Data Retention)

Trade Documents:10 years (German customs law § 147 AO)
Account Data:Service duration + 7 years
Technical Logs:12 months
Marketing Data:Until consent withdrawn
Support Communications:3 years

5. Datenübermittlung (Data Sharing)

We share data only as necessary for service provision:

🔒 Cloud Infrastructure

Google Cloud Platform (EU regions only), Firebase Hosting

Standard Contractual Clauses (SCCs) ensure GDPR compliance

💳 Payment Processing

Stripe (PCI DSS compliant), PayPal

Payment data is processed directly by providers, not stored by us

📊 Analytics

Google Analytics (anonymized), Hotjar (with consent)

IP anonymization enabled, demographic data collection disabled

⚖️ Legal Requirements

Customs authorities, tax authorities (when legally required)

Only upon valid legal request or court order

6. Cookies und Tracking (Cookies & Tracking)

✅ Essential Cookies (Always Active)

Required for basic website functionality

  • Authentication and session management
  • Security features and fraud prevention
  • Load balancing and performance

🔧 Functional Cookies

Enhance your experience (opt-in required)

  • Language preferences and settings
  • UI customization and preferences
  • Form data retention

📊 Analytics Cookies (Optional)

Help us improve our service (consent required)

  • Usage statistics and performance monitoring
  • Feature effectiveness analysis
  • Error tracking and debugging

Cookie Management: You can manage cookie preferences through our cookie banner or browser settings. Essential cookies cannot be disabled without affecting service functionality.

7. Datensicherheit (Data Security)

We implement appropriate technical and organizational measures:

  • Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
  • Access Control: Role-based permissions, multi-factor authentication
  • Monitoring: 24/7 security monitoring and incident response
  • Regular Audits: Security assessments and vulnerability testing
  • Employee Training: Regular data protection training for staff

8. Betroffenenrechte (Data Subject Rights)

To exercise your GDPR rights, contact us at privacy@tradecomply.eu:

How to Request:

  1. Send email to privacy@tradecomply.eu with "GDPR Request" in subject
  2. Include your account email and specify the right you wish to exercise
  3. We will verify your identity and respond within 30 days

Right to Complain: You have the right to lodge a complaint with a supervisory authority. In Germany, contact your local Landesdatenschutzbehörde or the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI).

9. Änderungen (Changes to Privacy Policy)

We may update this privacy policy to reflect legal changes or service improvements. Material changes will be communicated via email or platform notification 30 days before taking effect.

Version History: Previous versions are available upon request.