SeviTrades
deSecure access
Legal

Privacy Policy

This policy tells you which personal data we process when you visit this website and buy our digital products, for what purposes, on which legal basis and what rights you have (Art. 13, 14 GDPR).

Controller

Lunasev LLC (SeviTrades), 3833 Powerline Rd, Suite 201, Fort Lauderdale, FL 33309, USA. Contact: info@sevilaytrades.de or via our contact form. No separate EU representative under Art. 27 GDPR is currently appointed; please send requests to the address above. We have not appointed a data protection officer, nor are we required to.

Processing, purposes, legal bases

  • Website access (server log files): technical connection data incl. IP address. Purpose: secure delivery, fault and attack defence. Legal basis: Art. 6(1)(f) GDPR. Stored at the host, per its documentation at most 30 days. Fonts are served from our own server; no connection to third parties.
  • Purchase & payment: payments are processed via Stripe (Stripe, Inc., USA); you enter payment data directly with Stripe and we never receive full card details. Purpose: processing your payment and triggering delivery. Legal basis: Art. 6(1)(b) GDPR.
  • E-book delivery: we create a member record (email, product purchased, transaction reference, status) and generate a personal download link. Purpose: providing the book. Legal basis: Art. 6(1)(b) GDPR.
  • Existing contracts with Telegram access: for contracts with access to a Telegram group concluded before 8 October 2026, we process a pseudonymous member ID and your Telegram user ID until the contract ends and then remove the access automatically. We do not transmit your email or payment data to Telegram. Legal basis: Art. 6(1)(b) GDPR.
  • Access and transaction emails: sent via Resend (EU region) or, alternatively, Brevo (Sendinblue SAS, Paris). Transmitted: email address, subject and content. Legal basis: Art. 6(1)(b) GDPR, for the order confirmation additionally (c) (§ 312f BGB). We do not send a newsletter.
  • Contact form / email: name, email address and message. Purpose: handling your request. Legal basis: Art. 6(1)(b) GDPR (if contract-related), otherwise (f). Form entries are not stored in a database but only delivered as an email to our mailbox.
  • Legal retention & legal claims: purchase-related data is retained where required by tax/commercial law (Art. 6(1)(c)) or to assert and defend claims (Art. 6(1)(f)).

Recipients of your data

We do not sell your data. Service providers that support us:

  • Vercel, Inc. (USA) — hosting of this website.
  • Supabase, Inc. — database, operated in the EU region Frankfurt.
  • Resend, Inc. (USA) or Sendinblue SAS (“Brevo”, France) — email delivery.
  • Heinlein Hosting GmbH (“mailbox.org”, Berlin) — our email mailbox.
  • Telegram Messenger Inc. — messenger (existing contracts only, see above).
  • Stripe, Inc. (USA) — payment processing.
  • Our IT service provider (Germany) — operation and maintenance on our behalf.

Transfers to third countries

Vercel, Resend and Stripe (USA) state that they comply with the EU-US Data Privacy Framework; in addition, the EU Standard Contractual Clauses (2021/914) are agreed (for Stripe with the connection of the account). Supabase stores in Frankfurt but is based/has locations outside the EU; the Standard Contractual Clauses apply to any third-country access (no DPF) — we conclude the relevant data processing agreement before processing customer data. Telegram (registered in the British Virgin Islands): no adequacy decision and no Standard Contractual Clauses; we base this transfer on Art. 49(1)(b) GDPR (performance of the contract), as the existing contracts concerned cannot be performed without Telegram. A level of protection equivalent to EU law cannot be guaranteed for this. Buying the e-book does not involve Telegram. Our mailbox provider and IT provider are located in Germany.

Cookies and consent

We use no analytics, tracking or marketing cookies. Your choice in the notice banner is stored locally in your browser (§ 25(2) no. 2 TDDDG). Should we ever use processing that requires consent, we load it only after your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time with effect for the future.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), and the right to lodge a complaint with a data protection supervisory authority (Art. 77). An informal message to info@sevilaytrades.de is sufficient. No automated decision-making under Art. 22 GDPR takes place; removal from a Telegram group after the contract ends is the agreed end of the contract.