Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data means any data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Sven Uebel-Scholz, Market-Trader, Fürstenwalder Damm 536, 12587 Berlin, Germany, Tel.: +49 30 64091883, Fax: +49 30 64091884, E-mail: mail@market-trader.de. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Processing takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to subsequently check the server log files if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock symbol in your browser’s address bar.

3) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use cookies—small text files that are stored on your device. Some cookies are deleted automatically after closing the browser (so-called “session cookies”), others remain on your device longer and allow site settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in your web browser’s cookie settings.

Where personal data is also processed by individual cookies we use, processing takes place either pursuant to Art. 6(1)(b) GDPR for the performance of a contract, pursuant to Art. 6(1)(a) GDPR if consent has been given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

You can set your browser to inform you about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be restricted.

4) Contacting Us

When you contact us (e.g. via contact form or e-mail), personal data is processed—solely for the purpose of handling and responding to your enquiry and only to the extent necessary.

The legal basis for processing these data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that no statutory retention obligations conflict with this.

5) Data Processing When Opening a Customer Account

Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary when you provide it to us upon opening a customer account. The data required for opening the account can be seen from the input form on our website.

You can delete your customer account at any time by sending a message to the controller at the address given above. After deletion of your customer account, your data will be deleted provided all contracts concluded via it have been fully processed, there are no statutory retention periods to the contrary, and there is no legitimate interest on our part in further storage.

6) Use of Customer Data for Direct Advertising

Newsletter Subscription

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for newsletter delivery, which ensures that you only receive newsletters after you have expressly confirmed your consent to receive the newsletter by activating a verification link sent to the specified e-mail address.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. In this context we store the IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to trace any possible misuse of your e-mail address at a later time. The data collected by us when registering for the newsletter will be used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller named at the beginning. After unsubscribing, your e-mail address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use data beyond this which is permitted by law and about which we inform you in this policy.

7) Data Processing for Order Handling

7.1 To the extent necessary for contract processing for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6(1)(b) GDPR.

Insofar as we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you provided with the order (name, address, e-mail address) in order to inform you personally about upcoming updates within the legally prescribed period via an appropriate communication channel (e.g. by post or e-mail) pursuant to Art. 6(1)(c) GDPR. Your contact data will be used strictly for notifications about updates owed by us and will only be processed by us to the extent required for the respective information.

For processing your order we also work with the following service provider(s) who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers as set out below.

7.2 Use of Payment Service Providers

- PayPal

This website offers one or more online payment methods from the following provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider for which you pay in advance, the payment data you provide during the order process (including name, address, bank and card information, currency and transaction number) and information about the contents of your order will be transferred to the provider pursuant to Art. 6(1)(b) GDPR. The transfer of your data in this case is solely for the purpose of payment processing with the provider and only to the extent necessary for this.

If you select a payment method for which we provide goods or services in advance, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address, telephone number, and, if applicable, data for an alternative means of payment).

In such cases, in order to safeguard our legitimate interest in determining your ability to pay, we transmit these data to the provider for the purpose of a credit check pursuant to Art. 6(1)(f) GDPR. The provider checks—based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experience)—whether the payment option you selected can be granted with regard to payment and/or default risks.

The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data are among, but not limited to, the factors included in the calculation of the score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.

8) Web Analytics Services

- Web Analytics with Matomo

This website uses Matomo (formerly Piwik), an open-source web analytics platform that enables us to statistically analyze website traffic. Matomo helps us understand how visitors use our website, improve our online services, and continuously optimize the usability of our online shop.

Matomo is hosted on our own server at market-trader.de/matomo (self-hosting). The collected analytics data is processed on our own server infrastructure. This Matomo integration does not transmit analytics data to Google or to the provider of the Matomo Cloud service.

The following information may be collected and processed as part of our website analytics:

- Pages visited and content viewed
- Date and time of page visits
- Referring website URLs
- Browser and operating system
- Device information and screen resolution
- Approximate geographical location
- Visit duration and user interactions
- Technically transmitted IP address
- Returning visits identified through cookies

Your IP address is technically transmitted when communicating with our server. Any shortening or masking of the IP address depends on the privacy settings configured in our Matomo installation.

Matomo uses cookies that are stored on your device and enable statistical analysis of website usage. These include the following cookies:

_pk_id:
This cookie is used to recognize returning visitors and enables statistical analysis of website visits. The default storage period is 13 months.

_pk_ses:
This cookie is used to temporarily associate individual page views with a visitor session. The default storage period is 30 minutes.

The actual cookie retention periods may differ depending on the configuration of our Matomo installation. The retention period of collected analytics data depends on the privacy settings configured in our Matomo installation.

All processing activities described above, in particular the storage and access of tracking cookies on your device, take place exclusively with your explicit consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Without your consent, Matomo will not be activated for visitor analytics. No Matomo tracking cookies will be set and no tracking requests will be sent to Matomo.

You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please open the cookie consent tool using the "Cookie Settings" link in the footer of our website and disable the "Tracking and Performance" category.

After withdrawing your consent, no further Matomo tracking requests will be made. Previously stored Matomo tracking cookies will be removed from your device where technically possible. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Further information about Matomo is available on the official website at https://matomo.org/.

- Internal Web Analytics (Market-Trader Analytics)

In addition to Matomo, we use our own web analytics software ("Market-Trader Analytics") to statistically analyze website usage and continuously improve our online services.

Our internal analytics system operates through our own application at market-trader.de/analytics.php. The collected analytics data is stored and analyzed in our analytics database.

The following information is processed as part of our website analytics:

- Pages visited and content viewed
- Date and time of page visits
- Referring website URLs
- Visitor IP address
- Browser and operating system
- Country of origin, where technically available
- Visitor and session identifiers
- Information about JavaScript usage

The visitors IP address is stored in our analytics database. IP addresses are currently not automatically anonymized.

Our internal analytics system uses the following cookies:

mt_sid:
This cookie contains a randomly generated visitor identifier. It is used to associate related page views with a visitor and to statistically analyze returning visits. The storage period is 365 days.

mt_js:
This cookie is used to determine whether website analytics can be executed through JavaScript. The storage period is 365 days.

The collected analytics data is stored in our database. The intended retention period is [INSERT RETENTION PERIOD]. After this period, the data will be deleted.

Data processing takes place exclusively with your explicit consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Without your consent, our optional visitor analytics system is not activated during normal website visits. No corresponding tracking cookies are set and no analytics requests are performed.

You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please open the cookie consent tool using the "Cookie Settings" link in the footer of our website and disable the tracking category.

After withdrawal, no further tracking requests will be performed through our optional web analytics system. Previously stored tracking cookies will be removed from your device where technically possible.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

9) Site Functionality

FontAwesome

This site uses web fonts from the following provider to ensure uniform presentation of fonts: Fonticons, Inc., 710 Blackhorn Dr, Carl Junction, 64834, MO, USA

When a page is called up, your browser loads the required web fonts into its cache to display texts and fonts correctly and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider in this process.

The processing of personal data in the course of establishing a connection to the font provider is carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

For transfers of data to the USA, the provider relies on the European Commission’s standard contractual clauses, which are intended to ensure compliance with the European level of data protection.

10) Tools and Miscellaneous

Cookie Consent Tool

This website uses a “Cookie Consent Tool” to obtain effective user consents for cookies and cookie-based applications requiring consent. The “Cookie Consent Tool” is displayed to users upon page access in the form of an interactive user interface through which consents for certain cookies and/or cookie-based applications can be granted by ticking checkboxes. By using the tool, all consent-required cookies/services are only loaded if the respective user has granted the corresponding consents by ticking the boxes. This ensures that such cookies are only set on the user’s device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our online presence.

An additional legal basis for processing is Art. 6(1)(c) GDPR. As the controller, we are legally obliged to make the use of non-essential cookies dependent on the respective user’s consent.

Where required, we have concluded a data processing agreement with the provider, ensuring the protection of our site visitors’ data and prohibiting unauthorised disclosure to third parties.

Further information on the operator and configuration options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

11) Rights of the Data Subject

11.1 Applicable data protection law grants you the following rights against the controller with regard to the processing of your personal data (rights of access and intervention), whereby reference is made to the stated legal basis for the respective conditions of exercise:

11.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

12) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and—if applicable—additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

If statutory retention periods exist for data that are processed within the framework of legal or quasi-legal obligations on the basis of Art. 6(1)(b) GDPR, such data will be routinely deleted after the retention periods have expired, provided they are no longer required for the performance of the contract or the initiation of a contract and/or there is no legitimate interest on our part in further storage.

When processing personal data on the basis of Art. 6(1)(f) GDPR, these data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

When processing personal data for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, these data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information in this policy regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.