1. Controller
The controller responsible for processing personal data in connection with ZEIZIQ is:
Dr. Florestan Goedings
Katharinenstr. 18
10711 Berlin
Germany
Email: fly@zeiziq.de
Phone: +49 1567 9621365
2. Personal data processed by ZEIZIQ
When you access the website, technically necessary connection and security data are processed. This may include your IP address, time of access, requested address, protocol and browser information, and technical error or security events. Where language is selected based on the visitor's country of origin, ZEIZIQ uses the country code derived from the IP address; the full IP address does not need to be stored persistently for that language decision.
For registration and sign-in, ZEIZIQ processes your email address and technical data required for one-time codes, verification attempts, abuse prevention, sessions and sign-out. Authentication is passwordless and uses a time-limited one-time code.
When you use ZEIZIQ, we process the portfolio and account data you provide. This may include portfolio names and brokers, securities and instrument identifiers, quantities, acquisition values, prices, fees, cash balances, deposits and withdrawals, purchases and sales, timestamps, settings, and your responses to Highlights and portfolio notices.
If you upload portfolio documents, the contents of CSV, PDF or image files may be processed to generate an import proposal. Files are checked for permitted file type and size and, where the relevant scanner is enabled, for malware. OCR and extraction results are proposals and must be confirmed by you before activation. Uploaded originals are not intended to serve as a permanent document archive; the data retained on your account are the portfolio data you confirm and the technical evidence necessary for the import process.
ZEIZIQ also processes data generated while you use the service, such as settings, comparison values, virtual model transactions, portfolio notices, Highlights, technical states, and actual transactions entered by you. Automated analyses are used for monitoring, contextualisation and comparison of different investment paths. ZEIZIQ does not place orders with your broker and does not make an automated decision that is legally binding on you.
If you contact us by email or telephone, we process the contact details and contents you provide in order to handle your request.
3. Purposes and legal bases
We process account, login, portfolio, transaction, settings and communication data where necessary to provide ZEIZIQ, perform the user relationship and respond to your requests on the basis of Article 6(1)(b) GDPR. Security, abuse-prevention, stability and error data are processed on the basis of Article 6(1)(f) GDPR; our legitimate interest is the secure, reliable and auditable operation of the service. Where processing is required to comply with a legal obligation, Article 6(1)(c) GDPR applies. Processing based on consent takes place only where we expressly request your consent; consent may be withdrawn at any time with effect for the future.
4. Cookies and local preferences
ZEIZIQ currently uses only technically necessary first-party cookies for authentication and session flows and for your selected language. These cookies are used to provide the service you expressly request, maintain secure authentication and remember your language preference. No consent is required for access that is strictly necessary for these purposes. We currently do not use analytics, advertising or marketing cookies. If optional technologies are introduced in the future, they will only be used after any consent required by law and this policy will be updated.
5. Hosting and recipients
The application is hosted on infrastructure provided by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. The current ZEIZIQ server is located in a data centre in Nuremberg, Germany. netcup processes technical data as a hosting service provider subject to the applicable contractual and data-protection requirements.
We use checkdomain GmbH, Große Burgstraße 27/29, 23552 Lübeck, Germany for domain administration and the ZEIZIQ email mailbox. If you contact us by email, or if email is processed through this infrastructure, checkdomain may process the communication data required for that purpose.
No external analytics or advertising service and no separate production transactional-email or live-research provider is enabled in the current staging environment. Before we activate additional providers that receive personal data, this Privacy Policy will be updated accordingly.
6. Retention and deletion
We retain personal data only for as long as necessary for the relevant purposes. Account and portfolio data are generally retained while the account remains active. Short-lived verification, session and technical data are deleted or detached after their function ends or in accordance with defined security and cleanup periods. If account deletion is requested, access is blocked first; after any applicable retention requirements and backup copies have been reviewed, the active account data are deleted. Data may remain in backup copies until the relevant backup is routinely overwritten or deleted and will not be restored as an active account. Statutory retention obligations remain unaffected.
7. Data security
ZEIZIQ uses technical and organisational measures appropriate to the risks of processing. These include TLS-encrypted transmission, server-side session management, access restrictions, separated account data stores, protection against unauthorised cross-account access and encrypted backups. No technical system can guarantee absolute security.
8. Your rights
Subject to the statutory requirements, you have rights including access, rectification, erasure, restriction of processing and data portability. You may object to processing based on Article 6(1)(f) GDPR. Any consent you have given may be withdrawn at any time with effect for the future. Requests can be sent to fly@zeiziq.de.
You also have the right to lodge a complaint with a data-protection supervisory authority. For a controller established in Berlin, the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany, is in particular competent.
9. Source and provision of data
Personal data mainly come directly from you, from your entries and uploads and from technical events generated when you use the service. An email address is required to create and use an account. The portfolio data necessary for a particular portfolio feature are required in order to provide that analysis or comparison feature. Other information is voluntary unless it is marked as required at the relevant input step.
10. Changes to this policy
We update this Privacy Policy when features, providers or legal requirements change. The version published on this page is the current version.
Effective: 25 September 2026