Privacy / GDPR
Privacy notice
Protecting your personal data matters to us. This notice explains which data is processed through this website.
1. Controller
The controller under the General Data Protection Regulation (GDPR) and other data protection laws is: Forex Group GmbH Kurfürstenstraße 114 10787 Berlin Germany Managing Director: Michael Medvedev Phone: +49 551 309 888 0 Email: info@forexgmbh.de
2. General information on processing
We process personal data only in accordance with applicable data protection law, particularly the GDPR and the German Federal Data Protection Act (BDSG). Personal data means any information relating to an identified or identifiable natural person. The data processed depends on whether you simply visit our website, contact us through the contact form or apply for a job on our website.
3. Website provision and hosting
This website is provided through ChatGPT Sites and hosted and operated by OpenAI. For users in the European Economic Area (EEA), the relevant processing of Hosted Data is carried out under the ChatGPT Sites Data Processing Addendum by OpenAI Ireland Ltd., Dublin, Ireland. OpenAI processes personal data on our behalf where necessary to provide, maintain, secure and support the published website. This may include IP addresses, access dates and times, pages and resources accessed, browser and device details, technical logs and usage data, and information submitted through forms or file uploads. Processing necessary for secure and reliable website delivery is based on Art. 6(1)(f) GDPR. Our legitimate interest is a secure, stable and functional website. OpenAI processes Hosted Data collected through ChatGPT Sites under the applicable contractual data protection terms and Data Processing Addendum.
4. Processing outside the EEA
ChatGPT Sites currently does not offer exclusive data residency in Germany or the EEA. Personal data may therefore also be processed outside the EEA in connection with operating the website. According to OpenAI, transfers from OpenAI Ireland Ltd. to OpenAI companies or other recipients outside the EEA are based on appropriate GDPR safeguards, in particular an adequacy decision of the European Commission or the Commission's Standard Contractual Clauses where required. You can obtain further information on international transfer safeguards from OpenAI's privacy and data processing terms or by requesting it from OpenAI.
5. Cookies, tracking and analytics
In its current configuration, our own website code does not use cookies for analytics, marketing or tracking. In particular, we currently do not use Google Analytics, Google Tag Manager, Meta/Facebook Pixel, TikTok Pixel, Hotjar, Microsoft Clarity or other marketing or analytics trackers. The website code also does not use LocalStorage or SessionStorage to persist personal user data. We therefore do not currently display a consent banner for analytics or marketing technologies. If we introduce technologies requiring consent, we will adjust the technical and privacy settings and obtain any necessary consent before activation.
6. Contact and contact form
When you contact us through the form, we process the information you provide to handle and respond to your enquiry. This may include your name, subject, required telephone number, email address if provided, message, language, submission time and technically necessary metadata. Fields marked as required are needed to handle your enquiry; other details are voluntary. Depending on the enquiry, processing is based in particular on Art. 6(1)(b) GDPR for precontractual steps or an existing contract, or on Art. 6(1)(f) GDPR for other enquiries. Our legitimate interest is responding appropriately to incoming enquiries. Form data is processed and stored in the infrastructure provided for this website.
7. Applications
You may apply for advertised positions at Forex Group GmbH through this website. An application may contain your name, telephone number, email address, desired position, message or other details, language, application documents and uploaded files, file name, type and size, submission time and technically necessary metadata. Personal data needed for recruitment is processed in particular under § 26(1) BDSG where necessary to decide whether to establish an employment relationship. We use the data only for recruitment and related communication unless another legal basis permits or requires further processing.
8. Application documents and uploads
Application documents can be uploaded through the application form. In the current configuration, application files are stored within the ChatGPT Sites infrastructure using Cloudflare R2. Structured data from contact and application forms is stored using Cloudflare D1. This may include applicant data and file information such as file name, type, size and internal storage key. OpenAI states that the ChatGPT Sites infrastructure, including D1/R2 data and file storage, currently does not support data residency. We do not use this data for advertising, profiling or marketing.
9. Acknowledgement of the privacy notice for applications
Before submitting an application, applicants are shown this privacy notice and confirm that they have read it. This acknowledgement provides transparent information about the processing of application data. It is not the sole legal basis for necessary processing; the legal grounds stated in section 7, in particular § 26(1) BDSG, apply.
10. Storage period and deletion
We generally retain personal data only for as long as necessary for the relevant purpose or to meet legal retention duties. General contact enquiries are deleted once finally resolved unless a legal or other legitimate reason for keeping them remains. Application data and documents are deleted after the recruitment process when they are no longer needed for that process or to establish, exercise or defend possible legal claims, and no legal retention duty applies. Keeping data for future vacancies requires an appropriate legal basis and corresponding notice to the person concerned.
11. External links and social networks
Our website contains external links, in particular to Google Maps, WhatsApp, TikTok, Instagram and YouTube. These services are not embedded content, tracking pixels or social media plugins on our website. Merely visiting our website does not connect you to those external services. Only when you click a link do you leave our website; the external provider's privacy terms then apply. We generally have no control over their subsequent processing.
12. No automated decision-making
The contact and application functions on this website do not involve decisions based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR.
13. Recipients and processors
We use service providers to deliver and operate this website who may process personal data on our behalf, in particular OpenAI as the provider and operator of ChatGPT Sites. Any further technical subcontractors within the ChatGPT Sites infrastructure are engaged under the applicable contractual data protection terms. Data is disclosed to other recipients only when necessary for the relevant purpose, required by law, supported by a legal basis or covered by valid consent.
14. Data security
We and our service providers take appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access and other unlawful processing. The website is delivered over encrypted HTTPS. Despite appropriate safeguards, absolute protection of internet transmissions cannot be guaranteed.
15. Your rights
Where the legal requirements are met, you have rights of access under Art. 15 GDPR, rectification under Art. 16, erasure under Art. 17, restriction under Art. 18, data portability under Art. 20, objection under Art. 21 and withdrawal of consent with future effect under Art. 7(3). To exercise these rights, contact info@forexgmbh.de.
16. Right to lodge a complaint
Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe the processing of your personal data breaches the GDPR. You may contact the authority responsible for us or another competent authority under Art. 77 GDPR.
17. Changes to this privacy notice
We may update this privacy notice when legal requirements, the technical design of the website or the services we use change. The version currently published on this website applies.
Updated: September 2026