← Back to Home
Privacy Transparency: We respect your privacy and process all personal data strictly pursuant to the European General Data Protection Regulation (GDPR / DSGVO). Below is the comprehensive English policy, toggleable to the German statutory text.

Privacy Policy

GDPR Compliance (Articles 13 & 14 GDPR)

1. Privacy at a Glance

We treat your personal data with utmost confidentiality and in accordance with statutory data protection regulations (specifically the EU General Data Protection Regulation, GDPR, and the German Federal Data Protection Act, BDSG) and this Privacy Policy.

2. Controller (Responsible Entity)

The data controller responsible for data processing on this platform is:

Gerd Schumacher
Winkelweg 33A
59514 Welver
Germany
Phone: +49 (0) 2384 9411220
Email: privacy@emgena.com / support@emgena.com

3. Legal Bases of Processing

We process personal data strictly where permitted under European law:

  • Art. 6 (1) (a) GDPR: Explicit consent (e.g. voluntary waitlist updates or inquiries).
  • Art. 6 (1) (b) GDPR: Performance of a contract or pre-contractual measures (e.g. user account management, software delivery, subscription fulfillment).
  • Art. 6 (1) (c) GDPR: Compliance with legal obligations (e.g. tax and commercial retention requirements).
  • Art. 6 (1) (f) GDPR: Legitimate interests pursued by our enterprise (e.g. IT infrastructure security, DDoS prevention, operational stability).

4. Data Collection on Our Website

Server Log Files:

Our server infrastructure automatically logs connection information provided by your browser:

  • Browser type and version
  • Operating system used
  • Referrer URL (previously visited website)
  • Hostname of the accessing device
  • Time of the server request
  • IP address (anonymized/truncated)

This data is never merged with other data sources. Processing is based on Art. 6 (1) (f) GDPR to safeguard system integrity and prevent cyber attacks.

Cookies & LocalStorage:

Our website uses strictly necessary technical storage:

  • Session Cookie: Maintains secure login status during your authenticated session. It is automatically cleared upon logout or browser close.
  • LocalStorage (emgena-lang): Retains your language preference ('en' or 'de') so subsequent visits render in your selected language.

No third-party advertising or commercial tracking cookies are deployed without explicit consent.

Account Registration & Early Access Waitlist:

When registering for an account or joining the VIP Early Access Waitlist, we collect your chosen username and email address. Passwords are NEVER stored in plaintext; they are hashed using one-way cryptographic algorithms (Argon2 / bcrypt with unique salts). Processing is governed by Art. 6 (1) (b) GDPR.

Hardware-Grade Key Vault for API Secrets:

User-provided exchange API keys are encrypted at rest using AES-256-GCM authenticated encryption with nonces in an isolated vault. Plaintext keys cannot be retrieved by unauthorized staff or third parties.

5. External Web Fonts

To ensure performant and uniform typography, this website renders Google Fonts (Inter, Space Grotesk, JetBrains Mono). Fonts are delivered locally where feasible or loaded pursuant to legitimate interest (Art. 6 (1) (f) GDPR) for consistent, aesthetic interface rendering.

6. Data Retention & Deletion

Personal data is deleted as soon as the purpose for its storage ceases to apply, or upon your deletion request, provided no statutory retention periods (such as commercial or tax storage mandates under German law) apply.

7. Your Rights as a Data Subject

Under the GDPR, you have the following enforceable rights:

  • Right of Access (Art. 15 GDPR): Information regarding your processed data.
  • Right to Rectification (Art. 16 GDPR): Immediate correction of inaccurate data.
  • Right to Erasure (Art. 17 GDPR): Deletion of your stored personal data.
  • Right to Restriction of Processing (Art. 18 GDPR).
  • Right to Data Portability (Art. 20 GDPR): Retrieval of your data in a structured, machine-readable format.
  • Right to Object (Art. 21 GDPR): Right to object to processing founded on Art. 6 (1) (f) GDPR.
  • Right to Withdraw Consent (Art. 7 (3) GDPR): Revoke consent at any time.

8. Competent Supervisory Authority

You have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR):

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestr. 2-4, 40213 Düsseldorf, Germany
Phone: +49 (0) 211 38424-0 · Web: www.ldi.nrw.de

9. SSL / TLS Encryption

All communications are secured with 256-bit SSL/TLS encryption. You can verify the secure encrypted connection via the "https://" prefix and padlock icon in your browser URL bar.

Stand / Updated: September 2026 · EMGENA · Gerd Schumacher