Privacy

Data controller

3R technologies is a Business Unit of 3RMCN. 3RMCN · Management consultancy, Fabian John, Friedrich-Ebert-Straße 1, 84164 Moosthenning, Germany. Data protection requests: privacy@3rmcn.com. Further contact details: Legal imprint.

Hosting and access data

Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Accessing the site involves processing technically necessary connection data. Server logs may include the IP address, timestamp, requested file, status code, browser, operating system and referrer. This supports delivery, fault diagnosis and site security. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is stable and secure website operation. The hosting provider receives these data in providing the infrastructure. Access data are retained only as long as necessary for these purposes; security incidents or statutory duties may require longer retention.

Local analysis and browser storage

ECS processes selected trading reports and simulation inputs locally in your browser. The local import does not transmit original reports, filenames, account numbers or individual transaction rows to us. Settings may be stored locally. An aggregate private profile preview is stored in browser session storage to open the OnePager. You can delete local storage through your browser; session storage ends with the corresponding browser session. The supplied package contains no Google Analytics measurement code and sets no analytics cookies.

Accounts and private Showroom profiles

When the Showroom server is connected and you create an account, it processes your chosen account handle, a salted password hash, technical session data and the aggregate profiles you explicitly save. Your passphrase is transmitted for authentication but is not stored in plain text. The ecs_gallery_session cookie supports authentication and expires after seven days; signing out invalidates the session. A CSRF token protects writes. Login and write attempts are limited to prevent abuse. Your account handle is not shown on public cards.

Account, authentication and private storage processing provides your requested service under Article 6(1)(b) GDPR; security measures rely on Article 6(1)(f) GDPR. Storage on or access to your device that is strictly necessary for the explicitly requested service is covered by section 25(2), point 2, TDDDG. Private profiles remain stored while needed for your requested service. Send erasure requests to privacy@3rmcn.com; this first implementation has no automatic account deletion. Sessions expire after seven days and expired entries are cleaned up on a subsequent login. Statutory obligations and necessary legal defence remain reserved.

Snapshots shared in the showroom are deleted from public storage no later than 28 days after their respective approval. This also applies to stored public revision copies; approval metadata may remain without snapshot contents. Separately stored private drafts are unaffected. Previously downloaded copies are outside this deletion process.

Public KPI snapshots and approval

The reviewed snapshot is published only after separate explicit approval. It comprises the title, pseudonym, description, style, period, metrics, grouped curves, monthly values, aggregate distributions and source status. These fields are public without an account and visitors can save them. Original reports, individual transactions and absolute starting capital are not part of the transmitted snapshot. Review your free text for identifying details. Pseudonymisation does not guarantee complete anonymity.

Publication relies on your consent under Article 6(1)(a) GDPR. You can withdraw the public view in your account and withdraw consent for future processing. The card and profile are then unavailable through the public Showroom API. Previously downloaded copies cannot be recalled. Withdrawal does not automatically delete private versions or recorded approvals. Approvals include the timestamp, revision and snapshot digest to document what was approved; retaining them supports evidence under Article 7(1) GDPR and, where necessary, legitimate interests in legal defence. Contact the privacy address for erasure or questions.

The technical hosting provider receives data necessary to provide the service. Public snapshots can be accessed worldwide. Approval is not professional verification. ECS metrics and modelled counterfactuals are informational views and do not make automated decisions with legal or similarly significant effects.

Google Analytics

Google Analytics is not currently active in this website package. If introduced later, it would be used to analyse website usage statistically. The provider for the European region is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Usage events, page views, device and browser information, and cookie identifiers may be processed. This may involve processing by Google companies in the United States.

Activation requires prior voluntary consent under Article 6(1)(a) GDPR and, where applicable, section 25(1) TDDDG. Before activation, this policy will identify the specific configuration, retention period and basis for transfers. Options to refuse consent and withdraw it at any time will be provided. Withdrawal does not affect the lawfulness of processing carried out before it. Further information: Google data protection and Data protection at Google Analytics.

Contact and external services

When you contact us, we process your contact details and message to deal with your enquiry. For contract-related enquiries, the legal basis is Article 6(1)(b) GDPR; otherwise it is Article 6(1)(f) GDPR, reflecting our interest in responding. We delete these data once the matter is resolved and no retention duty or other necessary legal basis remains. When you open an external link, that provider’s privacy information applies. In particular, its server receives technically necessary connection data.

Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent for future processing. You may also object to processing based on legitimate interests for reasons relating to your particular situation, under Article 21 GDPR. You may lodge a complaint with a data protection supervisory authority, particularly the Bavarian State Office for Data Protection Supervision. Local report analysis does not require original trading reports to be transmitted. These functions do not make automated decisions with legal or similarly significant effects.

Last updated: 1 October 2026