Privacy Policy
1. Data Controller
2. Overview of Data Processing
This privacy policy informs you about what personal data we collect, how we use it, and what rights you have. Personal data is any data that can be used to personally identify you.
3. Data Collection When Visiting Our Website
When you access our website, the following data is automatically collected:
- IP address (anonymized)
- Date and time of request
- Browser type and version
- Operating system
- Referrer URL
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technical provision and security)
Storage duration: 7 days
4. Registration and User Account
During registration, we collect:
- Email address
- Password (stored encrypted)
- Name (optional)
- Company data (optional)
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Storage duration: Until account deletion
5. Payment Processing
Stripe
For payment processing, we use Stripe (Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA).
The following data is transmitted to Stripe:
- Payment information (credit card data is entered directly at Stripe)
- Billing address
- Email address
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Stripe is certified under the EU-US Data Privacy Framework.
Privacy policy: https://stripe.com/de/privacy
6. Hosting and Infrastructure
OVHcloud (Dedicated Server)
Our website is hosted on a dedicated server provided by OVHcloud. The provider is OVH Groupe SAS, 2 Rue Kellermann, 59100 Roubaix, France.
The server processes:
- Usage data for service provision
- Authentication data
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable hosting)
All data is stored and processed exclusively within the European Union.
Data protection policy: https://www.ovhcloud.com/en/personal-data-protection/
7. Third-Party Services for Core Functions
AI Service Providers
For AI-powered analysis of your product images, generation of listing texts, deal descriptions, and other automated content, we use APIs from third-party AI service providers. These may include, but are not limited to: OpenAI (OpenAI, LLC, San Francisco, USA), Anthropic (Anthropic, PBC, San Francisco, USA), Google (Google LLC, Mountain View, USA), xAI (xAI Corp., USA), DeepSeek (DeepSeek, Hangzhou, China), Mistral (Mistral AI, Paris, France), Meta (Meta Platforms, Inc., Menlo Park, USA), Cohere (Cohere Inc., Toronto, Canada), and other providers. The Provider reserves the right to change, add, or replace AI service providers at any time without prior notice.
Transmitted data:
- Product texts, images, and inventory data for analysis and content generation
- No personal data is transmitted to AI providers
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Where applicable, Data Processing Agreements (DPA) in accordance with Art. 28 GDPR have been concluded with AI service providers. For US-based providers, EU-US Data Privacy Framework certification or Standard Contractual Clauses (SCCs) apply where available. For providers in other jurisdictions, appropriate safeguards under Art. 46 GDPR are ensured.
Privacy policies of the respective providers apply
eBay API
For eBay integration, we use the official eBay API.
Transmitted data:
- Product data for listing creation
- OAuth token for authorization
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Privacy policy: eBay Datenschutzerklärung
Amazon SP-API
For Amazon integration, we use the official Amazon Selling Partner API.
Transmitted data:
- Product data for listing creation
- API credentials for authorization
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Amazon is certified under the EU-US Data Privacy Framework.
Privacy policy: Amazon Datenschutzerklärung
Kaufland API
For Kaufland integration, we use the official Kaufland Marketplace API.
Transmitted data:
- Product data for listing creation and order management
- API key and HMAC signature for authorization
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Privacy policy: Kaufland Datenschutzerklärung
Otto Market API
For Otto Market integration, we use the official Otto Market API.
Transmitted data:
- Product data for listing creation and order management
- OAuth credentials for authorization
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Privacy policy: Otto Datenschutzerklärung
8. Analytics and Tracking (consent required)
Google Analytics 4
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited. Google Analytics is only activated when you give your consent in the cookie banner.
Collected data:
- IP address (anonymized)
- Device information
- Usage behavior on our website
Legal basis: Art. 6(1)(a) GDPR (consent)
Google is certified under the EU-US Data Privacy Framework.
Facebook Pixel (Meta)
We use the Facebook Pixel from Meta Platforms Ireland Limited. The pixel is only activated when you give your consent in the cookie banner.
Collected data:
- IP address
- Browser information
- Visited pages
- Interactions with our Facebook ads
Legal basis: Art. 6(1)(a) GDPR (consent)
We are jointly responsible with Meta for data processing (Art. 26 GDPR).
Meta is certified under the EU-US Data Privacy Framework.
Privacy policy: https://www.facebook.com/about/privacy/
9. Cookies
Our website uses cookies. Cookies are small text files stored on your device.
Technically Necessary Cookies
These cookies are required for website operation:
- Session cookie for login
- Security cookies
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
Analytics Cookies (optional)
These cookies are only set with your consent:
- Google Analytics cookies
- Facebook Pixel cookies
Legal basis: Art. 6(1)(a) GDPR (consent)
You can revoke your consent at any time via our cookie banner or browser settings.
10. Contact
When you contact us by email or contact form, we process:
- Your email address
- Your name (if provided)
- The content of your message
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding)
Storage duration: Until your inquiry is resolved, maximum 3 years
11. Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 DSGVO): You can request information about your stored data
- Right to rectification (Art. 16 DSGVO): You can request correction of incorrect data
- Right to erasure (Art. 17 DSGVO): You can request deletion of your data
- Right to restriction (Art. 18 DSGVO): You can request restriction of processing
- Data portability (Art. 20 DSGVO): You can request transfer of your data
- Right to object (Art. 21 DSGVO): You can object to processing
- Right to withdraw (Art. 7 Abs. 3 DSGVO): You can withdraw your consent at any time
To exercise your rights, contact us at: info@marketplacy.com
12. Special Right to Object
Objection to direct marketing: If we process your data for direct marketing, you can object at any time without giving reasons.
Objection to processing based on legitimate interests: If we process your data based on legitimate interests, you can object if there are grounds relating to your particular situation.
13. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
E-Mail: mailbox@datenschutz-berlin.de
14. SSL/TLS Encryption
Our website uses SSL/TLS encryption for secure data transmission. You can recognize an encrypted connection by "https://" in your browser's address bar.
15. Changes to This Privacy Policy
We may update this privacy policy as needed. The current version is always available on this page. In case of significant changes, we will inform you by email or through a notice on our website.
Last updated: March 2026