Privacy Policy

1. Data Controller

2. Overview of Data Processing

This privacy policy informs you about what personal data we collect, how we use it, and what rights you have. Personal data is any data that can be used to personally identify you.

3. Data Collection When Visiting Our Website

When you access our website, the following data is automatically collected:

• IP address (anonymized)
• Date and time of request
• Browser type and version
• Operating system
• Referrer URL

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technical provision and security)

Storage duration: 7 days

4. Registration and User Account

During registration, we collect:

• Email address
• Password (stored encrypted)
• Name (optional)
• Company data (optional)

Legal basis: Art. 6(1)(b) GDPR (contract performance)

Storage duration: Until account deletion

5. Payment Processing

Stripe

For payment processing, we use Stripe (Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA).

The following data is transmitted to Stripe:

• Payment information (credit card data is entered directly at Stripe)
• Billing address
• Email address

Legal basis: Art. 6(1)(b) GDPR (contract performance)

Stripe is certified under the EU-US Data Privacy Framework.

Privacy policy: https://stripe.com/de/privacy

6. Hosting and Infrastructure

OVHcloud (Dedicated Server)

Our website is hosted on a dedicated server provided by OVHcloud. The provider is OVH Groupe SAS, 2 Rue Kellermann, 59100 Roubaix, France.

The server processes:

• Usage data for service provision
• Authentication data

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable hosting)

All data is stored and processed exclusively within the European Union.

Data protection policy: https://www.ovhcloud.com/en/personal-data-protection/

7. Third-Party Services for Core Functions

8. Analytics and Tracking (consent required)

9. Cookies

Our website uses cookies. Cookies are small text files stored on your device.

Technically Necessary Cookies

These cookies are required for website operation:

• Session cookie for login
• Security cookies

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

Analytics Cookies (optional)

These cookies are only set with your consent:

• Google Analytics cookies
• Facebook Pixel cookies

Legal basis: Art. 6(1)(a) GDPR (consent)

You can revoke your consent at any time via our cookie banner or browser settings.

10. Contact and Inquiry Forms

When you contact us by email, via the contact form or via the Managed Content inquiry form, we process:

• Your email address
• Your name (if provided)
• The content of your message
• For the Managed Content inquiry form additionally: the link to your social media account, your industry, information on existing material and the requested package
• For the "Order content" form in your account additionally: the product the order is for, the content package you selected and any notes you add — processed the same way as the forms above, forwarded via our n8n automation instance to Telegram or e-mail.

Form submissions are sent to our own automation instance (n8n, hosted on infrastructure in Germany) and forwarded from there to us as a notification. For this notification we use the messenger Telegram (Telegram FZ-LLC, Dubai), which transfers the form content to a third country without an EU adequacy decision. If you prefer not to, email us at info@marketplacy.com instead; processing then stays within our own systems.

Processing by production partners

For Managed Content we have videos and carousels produced by production partners. For this we pass on product data and raw material you provide to these partners. All partners are located in the EU and bound by a data processing agreement under Art. 28 GDPR.

We use Google reCAPTCHA to protect these forms from spam and automated abuse. It processes your IP address and other usage data and is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on the legal basis of Art. 6(1)(f) GDPR (our legitimate interest in preventing spam). See Google's privacy policy: https://policies.google.com/privacy.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding); for the transfer to Telegram your consent under Art. 6(1)(a), Art. 49(1)(a) GDPR, given when you submit the form

Storage duration: Until your inquiry is resolved, maximum 3 years

11. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 DSGVO): You can request information about your stored data
• Right to rectification (Art. 16 DSGVO): You can request correction of incorrect data
• Right to erasure (Art. 17 DSGVO): You can request deletion of your data
• Right to restriction (Art. 18 DSGVO): You can request restriction of processing
• Data portability (Art. 20 DSGVO): You can request transfer of your data
• Right to object (Art. 21 DSGVO): You can object to processing
• Right to withdraw (Art. 7 Abs. 3 DSGVO): You can withdraw your consent at any time

To exercise your rights, contact us at: info@marketplacy.com

12. Special Right to Object

Objection to direct marketing: If we process your data for direct marketing, you can object at any time without giving reasons.

Objection to processing based on legitimate interests: If we process your data based on legitimate interests, you can object if there are grounds relating to your particular situation.

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

14. SSL/TLS Encryption

Our website uses SSL/TLS encryption for secure data transmission. You can recognize an encrypted connection by "https://" in your browser's address bar.

15. Changes to This Privacy Policy

We may update this privacy policy as needed. The current version is always available on this page. In case of significant changes, we will inform you by email or through a notice on our website.