Privacy Policy
The protection of your personal data is of particular importance to us. This Privacy Policy informs you pursuant to Art. 13 and 14 of the General Data Protection Regulation (GDPR) about how we process personal data on this website.
1. Data Controller
The data controller within the meaning of the GDPR is:
KID-Institut – Bildungs- & Forschungs-Verein zu
Künstlicher Intelligenz & Digitalisierung
Erlafstraße 41, 3270 Scheibbs, Österreich
ZVR-Zahl: 1346523225
E-Mail: office@kid-institut.org
Web: www.kid-institut.org
2. What data is processed?
TraderzClub is a password-protected member platform. Login is exclusively via the KID-Institut Single Sign-On (SSO) (kid-institut.org). TraderzClub does not store email addresses or passwords — these remain exclusively with KID-Institut.
Upon login via SSO we receive and process the following data:
- kid_user_id — an anonymous numeric identifier from the KID-Institut system
- Membership tier (e.g. Free, Basic, Premium, Gold) and its ID
- Role (member, admin)
- Licence data (expiry date, auto-renewal)
- Language preference (de/en) — stored on first login, changeable by the user thereafter
We additionally store: the time of first registration on TraderzClub, the time of the last login, and an administratively controlled licence status (active / paused / suspended).
A login event is recorded for each sign-in (kid_user_id, membership tier, IP address, timestamp). This log serves security and audit purposes.
3. Purpose of processing
- Provision of the closed member area (contract performance, Art. 6(1)(b) GDPR)
- Protection against misuse and unauthorised access (legitimate interest, Art. 6(1)(f) GDPR)
- Management of access rights according to membership tier (contract performance)
- Compliance with legal obligations (Art. 6(1)(c) GDPR)
4. Cookies and session data
TraderzClub only uses technically necessary cookies. Anonymous visitors (not logged in) receive no cookies. Cookies are only set for authenticated members after a successful login via the KID-Institut SSO.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
tzc_session |
Session data for authenticated members (technically necessary) | Browser session / max. 8 hrs. | Necessary |
5. Data sharing
Personal data is not shared with, sold to or rented to third parties. Authentication is handled by KID-Institut; when verifying an SSO token, only the encrypted token hash is transmitted to the KID-Institut API.
6. Retention period
User data is stored for the duration of membership. After membership ends, data is deleted unless statutory retention requirements apply. Login log data is deleted after 12 months.
7. Your rights
You have the right to:
- Access (Art. 15 GDPR) — what data is stored about you
- Rectification (Art. 16 GDPR) — correction of inaccurate data
- Erasure (Art. 17 GDPR) — deletion of your data
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object (Art. 21 GDPR)
- Lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at)
8. Contact for data protection requests
For enquiries regarding your data protection rights, please contact:
office@kid-institut.org
Last updated: July 2026