This is a translation; the German Datenschutzerklärung is legally binding.

Privacy Policy

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Tim van der Horst
Taubenstr. 7
40479 Düsseldorf
Germany
Phone: +49 211 7300150
E-mail: info@aivest.com

Summary

• We use no analytics or tracking tools and no advertising.
• We only set technically necessary cookies, which is why there is no cookie banner.
• Fonts and all other parts of the website are loaded from our own server; visiting the site transfers no data to third parties such as Google. The same applies to signing in, unless you expressly choose to sign in with Google or Microsoft.
• Your data is processed in data centres within the EU.

Hosting

The website and all related services run at OVHcloud in a data centre in Frankfurt am Main; backups are also stored at OVHcloud in Germany. OVHcloud processes the data solely on our behalf and on our instructions; a data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

Server log files

Each time the website is accessed, our server automatically processes information transmitted by your browser: IP address, date and time of the request, requested address, amount of data transferred, status code, and browser and operating system. This is technically necessary to deliver the website and serves the security and stability of its operation, for example to fend off attacks.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and error-free operation of the website. Log data is not combined with other data and is deleted as soon as it is no longer needed for these purposes.

Registration and user account

You need a user account to create portfolios. For this we process your user name, your e-mail address and your password, which is only stored in encrypted form (as a hash). We use your e-mail address to confirm your registration and, on request, to send you a new password. Sign-in and user management run on our own sign-in service at aivest.upsize.de, which is also operated at OVHcloud.

The legal basis is Art. 6(1)(b) GDPR (provision of the service you requested). Registration is not possible without an e-mail address. The data is stored for as long as your account exists. You can ask for your account to be deleted at any time by e-mail to info@aivest.com.

Signing in with Google or Microsoft

Instead of a user name and password, you can also sign in with an existing Google or Microsoft account. Only if you click the corresponding button on the sign-in page are you forwarded to that provider, where you sign in. The provider then sends us your e-mail address, your name and a unique identifier of your account. Of these we store the e-mail address (it also becomes your user name) and the identifier, to create your user account or to link it to an existing account with the same e-mail address. No password is stored in this case, and we have no access to any other data of your Google or Microsoft account.

The providers are Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The provider learns that you are signing in to aivest. Data may be transferred to the USA; the parent companies Google LLC and Microsoft Corporation are certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR). The legal basis is Art. 6(1)(b) GDPR. For details, see the privacy policies of Google and Microsoft.

Portfolios

When you create a portfolio, we store the data you enter (portfolio name, amount, currency, positions you require or exclude) and the calculated results, each linked to your user account. The legal basis is Art. 6(1)(b) GDPR. The data is deleted together with your account.

Portfolios are calculated automatically. They are non-binding calculation results; no automated decision within the meaning of Art. 22 GDPR that produces legal effects concerning you takes place.

Confirming the notice before each calculation

Before a calculation starts, you confirm the notice for the calculation, including that the result is not investment advice. We store the identifier of your user account, the time, and which revision of the notice you confirmed in which language.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is being able to prove that the notice was confirmed before each calculation, and to defend against legal claims. This information is kept even if you delete a portfolio or your account, and is deleted when the statutory limitation periods have expired, at the latest ten years after the confirmation.

E-mails

We use an e-mail service provider, processing data on our behalf, to send e-mails (registration confirmation, password reset and, if you choose it for an optimization, the message that your portfolio is ready or that the optimization failed). Your e-mail address and the content of the message are transmitted to it.

Cookies and local storage

We only use cookies that are technically necessary to operate the website:

• a session cookie that keeps you signed in. Scripts cannot read it, and it is deleted when you sign out or the session expires;
• short-lived cookies that secure the sign-in process, and the cookies of the sign-in service at aivest.upsize.de.

The website also stores your chosen language and colour scheme (light/dark) in your browser's local storage. This information does not leave your device.

The legal basis for storing and reading this information is § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), because it is strictly necessary for the service you requested; no consent is required. Further processing is based on Art. 6(1)(b) and (f) GDPR.

Contact by e-mail or phone

When you contact us, we process your details to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR. The data is deleted once the enquiry has been dealt with and no statutory retention obligations apply.

Market data

Our servers obtain price and reference data for securities directly from data providers. No personal data of visitors is transmitted in the process.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). A short e-mail to info@aivest.com is enough.

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (www.ldi.nrw.de).

Last updated

October 2026. We will update this privacy policy when the website or the law changes.