Privacy Policy for ValueStockFinder

Last updated: 25 June 2026

1. Data controller

The controller responsible for the processing of personal data in connection with ValueStockFinder is:

Beaufort AG Im Hochrain 2 8102 Oberengstringen Switzerland UID/VAT No. CHE-255.825.301 MWST

Contact for data protection matters: hello@beaufort.ch

This privacy policy applies to the online portal ValueStockFinder. It is based on the revised Swiss Federal Act on Data Protection (revFADP) and, where applicable (e.g. for users in the EU), on the EU General Data Protection Regulation (GDPR).

2. Data processed and purposes

We process personal data only to the extent necessary to operate, provide and further develop ValueStockFinder, or where you have given your consent.

Account data.
Upon registration we process your email address and the information required to manage your account (e.g. password in encrypted form, verification status). Purpose: creation and administration of your personal user account, email verification, authentication and security.

Contract and payment data.
When you take out a paid subscription, we process the data required for the contract and billing (e.g. selected subscription, term, payment status, transaction IDs). Payment processing, invoicing and tax determination are handled by our payment service provider Paddle, which acts as Merchant of Record (reseller) (see section 4). We do not store full credit card details; they are entered and processed directly with Paddle.

Usage and settings data.
Within the protected portal we process your settings, lists, favourites and similar usage data so that the portal works and can be used in a personalised way.

Technical data and logs.
When you access the portal, technical data is generated (e.g. IP address, date and time, browser type, operating system, pages accessed). Purpose: technical operation, stability, security, abuse and error detection.

Communication data.
When you contact us, we process the information you provide in order to handle your request.

3. Legal bases

Where the GDPR applies, we base processing on the performance of the contract (Art. 6(1)(b) GDPR) for account, contract and payment data, on our legitimate interest (Art. 6(1)(f) GDPR) in a secure, stable and user-friendly portal and in direct communication, and on your consent (Art. 6(1)(a) GDPR), in particular for web analytics and marketing communication. Under the revFADP we process data based on the contractual relationship, an overriding legitimate interest or your consent.

4. Processors and service providers

To provide our services we use carefully selected service providers that process personal data on our behalf:

Hosting.
Hetzner Online GmbH, Germany. Servers are located in Germany (EU). Purpose: operation and storage of portal and user data.

Payment processing, invoicing and tax.
Paddle (Paddle.com Market Ltd., United Kingdom, and affiliated companies, including in the USA). Paddle acts as Merchant of Record (reseller) and is therefore your contractual partner for payment. Purpose: processing of card payments and subscriptions, invoicing, and determination and remittance of applicable taxes. Full card data is entered and processed directly with Paddle; Paddle processes payment data as a controller.

Web analytics.
Google Analytics (Google Ireland Ltd. / Google LLC, USA). Purpose: reach and usage analysis to improve our offering. Used only with your consent (see section 6).

Email delivery.
Transactional emails (e.g. registration, verification, payment and system notices) and any product information are sent via our own self-hosted infrastructure (hosting with Hetzner, Germany). No external email or newsletter service provider is used for this. ValueStockFinder is operated as an open-source, self-hosted solution.

Where required, data processing agreements are in place with these service providers.

5. Transfers abroad

Personal data may be transferred to service providers in countries outside Switzerland or the EEA, in particular the United Kingdom (Paddle) and the USA (e.g. Google, Paddle affiliates). Where such a country does not provide an adequate level of data protection, we ensure appropriate safeguards, in particular Standard Contractual Clauses and, where applicable, certification under the EU-U.S. Data Privacy Framework. An adequacy decision is recognised for the United Kingdom. Hosting with Hetzner takes place within the EU (Germany).

6. Cookies and web analytics

In the protected area of the portal we use technically necessary cookies or comparable storage technologies to store user settings and the session (login). These are required for operation.

For web analytics with Google Analytics, analytics cookies are only set after you have given your consent. You can withdraw your consent at any time, with effect for the future, via the cookie/consent banner.

7. AI-based analyses

The analyses displayed in the portal are generated automatically with AI support. No personal user data is transmitted to external AI service providers in this process; the analyses relate to company, financial and market data, not to your personal data.

8. Retention and deletion

We retain personal data only for as long as necessary for the stated purposes or as required by statutory retention obligations (e.g. commercial and tax law obligations for invoice data).

After cancellation or expiry of a subscription, your account may remain in place so that you can reactivate it later. You may request deletion of your account and personal data; deletion is carried out in accordance with applicable data protection laws and subject to statutory retention obligations.

9. Data security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse or alteration (e.g. encrypted transmission, access restrictions, encrypted storage of passwords).

10. Your rights

Subject to applicable law, you have in particular the right to information about the data processed about you, to rectification of inaccurate data, to erasure, to restriction of processing, to data portability, as well as the right to withdraw consent at any time and to object to processing.

To exercise your rights, a message to hello@beaufort.ch is sufficient. You also have the right to lodge a complaint with the competent supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the respective competent data protection authority.

11. Changes to this privacy policy

We may amend this privacy policy if the processing, the services used or the legal framework change. The current version published on the portal applies.