Legal

Privacy Policy

This is a convenience translation. The German version (German original) is the legally binding document.

Last updated: July 2026. This policy informs you, in accordance with Art. 13, 14 GDPR (DSGVO), about the type, scope, and purpose of the processing of personal data on this website.

1. Controller

Aron Deme
Untere Augartenstraße 15-17/1/32, 1020 Vienna, Austria
Email: office@capitaldesk.at

2. General Information on Data Processing

We process personal data only to the extent necessary to provide a functioning website and our content and services, or to the extent that you actively provide us with data (e.g. by email). The legal basis is Art. 6(1)(b) DSGVO (initiation/performance of a contract) or (f) DSGVO (legitimate interest).

3. Contact by Email

If you contact us by email, the data you provide (sender address, name, content of the message) will be stored in order to process your request. We do not disclose this data without your consent. Legal basis: Art. 6(1)(b) or (f) DSGVO.

4. Hosting

This website is hosted by World4You Internet Services GmbH (Wolfgang-Pauli-Straße 2/BT3, 4020 Linz, Austria). When you access the website, technical data (so-called server log files) is automatically transmitted to the host, including IP address, date and time of access, the page accessed, browser type, and referrer URL. Legal basis: Art. 6(1)(f) DSGVO (secure and stable operation of the website).

5. Google Fonts

This website embeds fonts from Google Fonts (Google Ireland Limited) via a server operated by Google. In doing so, your IP address is transmitted to Google. Google Fonts has provided further information on this at developers.google.com/fonts/faq/privacy. Legal basis: Art. 6(1)(f) DSGVO (consistent presentation of the website).

6. Cookies & Tracking

This website does not currently use analytics or marketing cookies. Should this change (e.g. through the integration of web analytics tools), this Privacy Policy will be updated accordingly and, if required, consent will be obtained via a cookie consent tool.

7. Waitlist & Planned Partner Links

Capital Desk is currently in a preparatory phase. This website currently contains no active partner links to brokers. Once active partner cooperations exist, this Privacy Policy will be updated accordingly, and the relevant broker partners will be named.

For the waitlist, we use the email marketing service provider Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany). If you sign up via the form on this page, your email address and the information you have provided will be transmitted to Brevo and processed there. Registration takes place via a double opt-in procedure: after submitting the form, you will receive a confirmation email and will only be added to our waitlist after confirming the link it contains. The legal basis is your consent (Art. 6(1)(a) DSGVO). You may withdraw this consent at any time via the unsubscribe link contained in every email. Further information can be found in Brevo's privacy policy.

To protect against automated spam sign-ups, we also use Google reCAPTCHA (Google Ireland Limited). In doing so, technical data (e.g. IP address, mouse movements) may be transmitted to Google and, where applicable, processed in the USA. The legal basis is our legitimate interest in a functioning, abuse-protected form (Art. 6(1)(f) DSGVO). Further information: Google's privacy policy.

8. Remote Support Software (Zoom)

As part of the technical onboarding, we use Zoom (including its remote control function) to set up your trading platform together with you. The entire setup is carried out exclusively on your demo account; your live account is never accessed at any time. The connection is established solely for the duration of the agreed session and is ended afterward. We do not store any login credentials for your broker or live account at any time. Legal basis: Art. 6(1)(b) DSGVO (performance of a contract).

9. AI-Assisted Session Notes (Zoom AI Companion)

Upon request, we use the Zoom AI Companion feature to create a written summary at the end of the session (e.g. as a PDF checklist of your individual settings). To do this, this feature analyzes the spoken content of the session. The processing is carried out via Zoom's infrastructure or via AI model providers commissioned by Zoom; depending on the account configuration, this may involve data processing outside the EU (in particular the USA).

We activate this feature only with your prior, explicit consent, which we obtain verbally at the start of the session. The legal basis is therefore your consent (Art. 6(1)(a) DSGVO). You may refuse consent at any time or withdraw consent already given for the ongoing session; in this case, the technical onboarding will take place without an AI-assisted summary. The summary produced is transmitted exclusively to you and is not permanently stored by us after transmission.

10. Screen Recording of Your Setup (Video Archive)

Upon request, we record the screen content during the session (your chart and platform configuration) without audio and without webcam, so that you can review the individual configuration steps yourself afterward. Your live account or sensitive login credentials are never visible, since the entire setup takes place exclusively on your demo account.

The recording is made only with your prior, explicit consent, which we obtain verbally at the start of the session. The legal basis is your consent (Art. 6(1)(a) DSGVO). The finished recording is transmitted exclusively to you (e.g. as a download link) and is not permanently stored by us afterward. You may decline the recording at any time; in this case, the technical onboarding takes place without a video archive.

11. Retention Period

Unless a statutory retention obligation applies (e.g. under the UGB, BAO), we delete personal data as soon as the purpose of the processing ceases to apply or you request deletion.

12. Your Rights

As a data subject, you have the following rights:

Right of access (Art. 15 DSGVO)
Right to rectification (Art. 16 DSGVO)
Right to erasure (Art. 17 DSGVO)
Right to restriction of processing (Art. 18 DSGVO)
Right to data portability (Art. 20 DSGVO)
Right to object (Art. 21 DSGVO)

To exercise these rights, an informal email to office@capitaldesk.at is sufficient.

13. Right to Lodge a Complaint

You have the right to lodge a complaint with the Austrian data protection authority:
Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna — www.dsb.gv.at

14. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy in order to adapt it to changes in the legal situation or to changes in our range of services.

NOTE: This Privacy Policy is a template and does not replace legal advice. Please have it reviewed by a lawyer before publication — in particular with regard to future broker partnerships.