SFZ Capital logo SFZ Capital

Legal

Privacy Policy

Last updated: June 2026

1. Controller

The controller responsible for processing your personal data within the meaning of the EU General Data Protection Regulation (GDPR) is:

Sam Zickermann
SFZ Capital (Einzelunternehmen)
Lutherstraße 21, 35037 Marburg, Germany
Email: contact@sfzcapital.com

2. Scope of this policy

This Privacy Policy describes how SFZ Capital collects, uses and protects personal data when you visit sfzcapital.com (the “Website”) or use the Pulsar platform. It applies to all data subjects in the European Economic Area (EEA) and beyond where GDPR obligations apply.

3. Data we process and purposes

3.1 Website visitors

  • Server log data — IP address (anonymised after 7 days), browser type, operating system, referrer URL and access timestamps. Processed by our hosting provider for security and operational purposes. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure website).
  • Contact and enquiry form data — name, email address, company name and message content when you use our contact, partnership or investor enquiry forms. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) and Art. 6(1)(f) GDPR (legitimate interest in responding to your enquiry).

3.2 Pulsar platform users

  • Account data — email address and chosen display name at registration. Legal basis: Art. 6(1)(b) GDPR (performance of the service contract).
  • Usage data — strategy configurations, backtest parameters and session data, processed to provide and improve the service. Legal basis: Art. 6(1)(b) GDPR.
  • Paper trading / simulation data — Pulsar operates exclusively in simulation and paper-trading mode; no live orders are placed and no real capital is deployed through the platform. Market data for paper trading is provided via Alpaca Markets under their own terms.

3.3 CAPTCHA (hCaptcha)

Our forms are protected by hCaptcha (Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA). hCaptcha may collect information about your device, browser and behaviour to distinguish humans from bots. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting forms from spam). Please review hCaptcha’s Privacy Policy at hcaptcha.com/privacy.

4. Form submissions — processor (Web3Forms)

Enquiry form submissions are transmitted via Web3Forms. Web3Forms processes form data solely for the purpose of delivering it to us and does not retain it beyond that delivery. For details, see the Web3Forms privacy policy.

5. Hosting

This Website is served from static hosting. Fonts are self-hosted; no data is transmitted to third-party font providers (e.g. Google Fonts) when you load our pages.

6. Cookies and analytics

SFZ Capital does not currently use cookies for tracking or analytics. Only technically necessary session tokens (where applicable within the Pulsar platform) are stored in accordance with Art. 6(1)(b) GDPR.

7. Third-party data processors

The following third parties act as data processors on our behalf:

  • Alpaca Markets — market data provider for the Pulsar paper-trading environment. Data shared: none beyond what is technically required to stream market quotes.
  • Web3Forms — form submission relay. Data shared: form field content submitted by you.
  • hCaptcha — bot protection. Data shared: browser and device signals.

All processors are bound by data processing agreements ensuring compliance with GDPR Chapter V requirements.

8. International transfers

Where processors are located outside the EEA (e.g. Alpaca Markets and hCaptcha in the USA), transfers are made on the basis of the EU Standard Contractual Clauses (SCCs) adopted by the European Commission, or equivalent safeguards.

9. Retention periods

Category Retention period
Server logs 7 days (IP anonymised); aggregated stats held indefinitely
Enquiry form submissions 12 months from last contact, then deleted
Pulsar account data Duration of account + 30 days after deletion request
Strategy / backtest data Duration of account; deleted with account

10. Your rights under the GDPR

You have the following rights regarding your personal data:

  • Access — obtain a copy of the data we hold about you (Art. 15 GDPR).
  • Rectification — correct inaccurate data (Art. 16 GDPR).
  • Erasure — request deletion of your data (“right to be forgotten”, Art. 17 GDPR).
  • Restriction — limit how we process your data in certain circumstances (Art. 18 GDPR).
  • Portability — receive your data in a structured, machine-readable format (Art. 20 GDPR).
  • Objection — object to processing based on legitimate interests (Art. 21 GDPR).
  • Withdrawal of consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at contact@sfzcapital.com.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority competent for SFZ Capital is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
datenschutz.hessen.de

12. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, disclosure or access. All data in transit is encrypted using TLS.

13. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available at this URL. We will notify users of material changes via the Pulsar platform where required.

14. Contact

For any data protection matter, please contact: contact@sfzcapital.com.