Privacy Policy

Last updated: 17 October 2026

1. Who is responsible

The controller within the meaning of the GDPR is:

Hendrik Oeser
Bautzner Str. 112
01099 Dresden
Germany

2. What we process and why

Hosting and delivery (Vercel)

This website, its server functions and scheduled jobs run on Vercel, a service of Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit a page, Vercel processes technically necessary data: your IP address, date and time of the request, the requested page, referrer, browser and operating system. This is required to deliver the website, protect it against attacks and fix errors (Art. 6(1)(f) GDPR; our legitimate interest is a secure, working website). Vercel keeps these logs only for a short period and acts as our processor under a data processing agreement (Art. 28 GDPR). We do not use Vercel Analytics or Speed Insights.

Free guide and email series

When you request the free guide, we process your email address, optional first name, the time of your request, the campaign parameters of the link you came from (e.g. utm_campaign), whether you opened the guide link and, if you answer it, your reply to the short question about where you are with trading. We use this to send you the guide and a short email series about building an agentic trading workflow, based on your consent (Art. 6(1)(a) GDPR). The guide link in the first email also confirms your email address (double opt-in). You can withdraw your consent at any time with the unsubscribe link in every email, which works with one click.

Sending emails (Resend)

All emails (the guide, the email series, purchase confirmations with your access link, and for buyers of the Firm Rules Tracker the update emails) are sent through Resend, a service of Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. For this, Resend processes your email address, first name, the content of the email and technical delivery data (e.g. delivered, bounced). Resend acts as our processor under a data processing agreement (Art. 28 GDPR). We do not use open or click tracking in our emails. Emails you request are based on your consent (Art. 6(1)(a) GDPR); purchase emails and Tracker updates are part of fulfilling your order (Art. 6(1)(b) GDPR).

Database (Neon)

Leads, orders and access rights are stored in a database operated by Neon, Inc. (a Databricks company), USA, on servers in the EU. Neon acts as our processor under a data processing agreement (Art. 28 GDPR).

Purchases (Stripe)

Orders are processed through Stripe Managed Payments. The payment form on our checkout page is loaded directly from Stripe. Stripe, through its Link service, acts as Merchant of Record and reseller: it sells the product to you, processes your payment and billing data, calculates and remits taxes, and handles payment support and refunds. Stripe does this as an independent controller under its own privacy policy (stripe.com/privacy; Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland, and affiliates including Stripe, Inc. in the USA). To prevent fraud, Stripe may also collect device and browser information when the payment form loads. We never see your full card or bank details. We receive your email address, name, country, the products purchased, the amount and the payment status, so that we can deliver your products, give you access and handle refunds (Art. 6(1)(b) GDPR). We keep order data for as long as required by tax and commercial law.

Funnel statistics without cookies

We count page views and steps in our funnel (e.g. checkout opened) on our own server, without cookies and without storing IP addresses, to understand which pages work (Art. 6(1)(f) GDPR).

Meta Pixel and Conversions API (only with your consent)

If you click "Accept" in the cookie banner, we load the Meta Pixel of Meta Platforms Ireland Ltd. and also transmit the events "Lead" and "Purchase" directly from our server to Meta (Conversions API), including a hashed version of your email address and first name, your IP address and browser information. This helps us measure and improve our ads (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Data may be transferred to Meta Platforms Inc. in the USA. Without your consent, none of this happens. You can change your choice at any time via "Cookie settings" at the bottom of every page.

3. Transfers to third countries

Vercel, Resend, Stripe and Meta are based in the USA or use affiliates there, so personal data may be processed in the USA. Transfers are based on the EU-U.S. Data Privacy Framework where the provider is certified (Art. 45 GDPR), and otherwise on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

4. How long we keep data

Lead data is kept until you unsubscribe or ask us to delete it. Order data is kept for the statutory retention periods (up to 10 years under German tax law).

5. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests, and to withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority, for example the Saxon Data Protection Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte). Just email us at hendrik@entreprenerds.de.