Privacy policy

1. Controller

Muhammed Ali Bilekkaya
Holunderweg 3
74199 Untergruppenbach
Deutschland
Phone: 0172 7135115
Email: info@indikatorlab.net

2. Principle

We process personal data only to the extent necessary to operate this website and to provide our services, and only within the framework of the GDPR and the German Federal Data Protection Act (BDSG).

3. Cookies, tracking and external content

This website does not generally use cookies. No analytics, tracking or advertising services are embedded, in particular no Google Analytics, no Meta pixel and no TikTok pixel. All fonts, images and logos are hosted on our own server; no content is loaded from external servers. We deliberately do not show a cookie banner.

Two exceptions are strictly necessary and require no consent (§ 25 (2) no. 2 of the German TDDDG):

• Shopping cart: so it survives moving between pages, we store in your browser's localStorage which indicators are in it. This contains no personal data. Your MT5 account number or cTrader ID is not stored there. You can delete this entry at any time by emptying the cart or clearing your browser's site data.
• Language cookie "il_lang": when you switch the website's language using the switch in settings, we set this cookie so we can show you the page in that language on your next visit. It is only set when you actively switch, contains only the language code (de or en) and no other personal data, and expires automatically after one year.

4. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you visit, Vercel processes technically necessary access data, in particular IP address, date and time, the page requested, the amount of data transferred, and browser and operating system information. This data is required to deliver and secure the website.

Legal basis: Art. 6 (1) (f) GDPR, legitimate interest in the secure and stable operation of the website. A data processing agreement under Art. 28 GDPR is in place with Vercel.

5. Contact and Laby

Contact messages are not stored on this website. When you send a message in the Mail app or the Custom form, your details, such as email address, name and message, are transmitted to our inbox via the form service Web3Forms. Privacy information for that service is available at web3forms.com/privacy.

Questions you type to Laby in chat are only evaluated in your browser and are not transmitted.

If you write to us by email or via Instagram, we process the data you provide to answer your enquiry. For Instagram messages, Meta Platforms Ireland Ltd. is additionally involved as the operator of the platform, over whose processing we have no influence. For contract related communication we recommend email.

Legal basis: Art. 6 (1) (b) GDPR for contract related enquiries, otherwise Art. 6 (1) (f) GDPR.

6. Email infrastructure

For the address info@indikatorlab.net we use the forwarding service ImprovMX Incorporated, 8 The Green STE D, Dover, Delaware 19901, USA. Incoming messages are technically forwarded there and then received and stored in a Gmail inbox of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Legal basis: Art. 6 (1) (b) or (f) GDPR respectively.

7. Purchase for TradingView, MetaTrader 5 or cTrader via Shopify

When you click "Continue to checkout" in the cart, we transmit the selected indicators, depending on the platform your TradingView username, your MetaTrader 5 account number or your cTrader ID (cTID), and your two declarations about early performance, to Shopify. You are then forwarded to the Shopify checkout, where you enter your contact and payment details.

The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes this data on our behalf to fulfil the order. Depending on the chosen payment method, further payment service providers are involved, for example PayPal, Apple or Google, which in part act as independent controllers. We ourselves do not receive complete payment data.

We use your TradingView username, MT5 account number or cTrader ID to bind the indicator to your account and deliver it to you.

Legal basis: Art. 6 (1) (b) GDPR, performance of the contract, and Art. 6 (1) (c) GDPR for tax and commercial retention obligations.

8. Invoice and receipt by email

After a purchase we generate an invoice, or, as long as no tax number has been set up yet, a receipt marked as a test, and send it to you by email along with a copy to ourselves. We use Resend (Plus Five Five, Inc.), 2261 Market Street #5039, San Francisco, CA 94114, USA to send it. Resend is certified under the EU-U.S. Data Privacy Framework. This processes your email address, your name, your billing address if provided, and the order data shown on the invoice.

Legal basis: Art. 6 (1) (b) GDPR, performance of the contract, and Art. 6 (1) (c) GDPR for the statutory obligation to issue invoices.

9. Download link and licence key

For purchases of MetaTrader 5 or cTrader indicators we operate our own licence server, hosted by Railway Corporation, 548 Market St PMB 68956, San Francisco, CA 94104, USA. Railway is certified under the EU-U.S. Data Privacy Framework. There we generate a licence key from your account number or cTrader ID, your broker/server name and the product purchased, which binds the indicator to your account, and provide you with a personal download link for the indicator file. The licence key itself is stored only locally in your indicator settings.

Legal basis: Art. 6 (1) (b) GDPR, performance of the contract.

10. Invoice archive

We additionally store all issued invoices and receipts as PDFs with Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992, on servers in London, United Kingdom, so that we can meet our statutory retention obligations. An adequacy decision of the EU Commission applies to the United Kingdom. A data processing agreement under Art. 28 GDPR is in place with Supabase. Access to this archive is restricted to us.

Legal basis: Art. 6 (1) (c) GDPR, statutory retention obligation under § 257 of the German Commercial Code (HGB) and § 147 of the Fiscal Code (AO).

11. Granting access on TradingView

For purchases of TradingView indicators we use the TradingView username you provide to grant you access personally in the relevant script on TradingView. This is done manually by us, usually within 24 hours of payment. Unlike MetaTrader 5 or cTrader, no additional, automated licence server is involved: your username is only stored in your order with Shopify and on your invoice.

Legal basis: Art. 6 (1) (b) GDPR, performance of the contract.

12. Custom developed indicators

If you commission a custom indicator, we process the data required for that: name, email address, details of your strategy, and payment and billing data. For a bank transfer, we receive the data from your payment order, in particular name, IBAN and payment reference. For payment via PayPal, PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg is involved as an independent controller.

Legal basis: Art. 6 (1) (b) and (c) GDPR.

13. Reviews

If you write a review on the homepage, we process your name, your star rating, your text, the images you upload, the selected language and the time. Every review is read by us before publication and only then shown on the website with name, date, text and images.

To protect against spam, we briefly process your IP address in the server's memory to prevent too many submissions in a short time. It is not stored in the database and is discarded after one hour at the latest.

We store reviews and images with Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992. The data is held on servers in London, United Kingdom. An adequacy decision of the EU Commission applies to the United Kingdom. A data processing agreement under Art. 28 GDPR is in place with Supabase.

Legal basis: Art. 6 (1) (a) GDPR, your consent. You can withdraw it at any time with effect for the future. A message to info@indikatorlab.net is sufficient, and we will delete your review and your images. Reviews that are not approved are deleted once we have decided on them.

14. Booking a call

If you book a call, we process your name, your email address, your phone number, the chosen time and your note. We use them to create an appointment in our Google Calendar and invite you by email. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For the call we create a Zoom meeting with Zoom Communications Inc., 55 Almaden Boulevard, Suite 600, San Jose, CA 95113, USA. Zoom is certified under the EU-U.S. Data Privacy Framework.

If these services are unavailable, we send your request to our inbox via Web3Forms and confirm the appointment by email.

Legal basis: Art. 6 (1) (b) GDPR, pre-contractual measures or performance of the contract. We delete the data after the call once it is no longer needed and no retention obligations apply.

15. Retention period

We delete enquiries that do not lead to a contract once they are resolved and no retention obligations apply. We keep contract, invoice and accounting records for the statutory periods, generally six or ten years under § 257 of the German Commercial Code (HGB) and § 147 of the Fiscal Code (AO). Server log files are only kept briefly by the host.

16. Transfers to third countries

Hosting with Vercel, form submission via Web3Forms, email forwarding via ImprovMX, order processing via Shopify, sending emails via Resend, our licence server with Railway, storing reviews and invoices with Supabase, and Zoom for call bookings may involve transferring data to third countries, in particular the USA, Canada and the United Kingdom. Vercel Inc., Zoom Communications Inc., Resend (Plus Five Five, Inc.) and Railway Corporation are certified under the EU-U.S. Data Privacy Framework; for Canada and the United Kingdom an adequacy decision of the EU Commission applies. Where no certification exists for a recipient, we base the transfer on the EU Standard Contractual Clauses under Art. 46 (2) (c) GDPR. An equivalent level of data protection in third countries cannot be guaranteed in every case despite these measures.

17. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing based on legitimate interests (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future. An informal message to info@indikatorlab.net is sufficient.

18. Right to complain

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Stuttgart (www.baden-wuerttemberg.datenschutz.de). You may also contact the authority in your place of residence.

19. No automated decision making

No automated decision making and no profiling within the meaning of Art. 22 GDPR takes place.