← Back to home

Privacy Policy

1. Controller

Till Schwalenberg
Ohmstraße 8
24537 Neumünster
Germany
Email: ankauf@matrastcg.de

2. Purpose and legal basis of data processing

I process personal data submitted to me via the contact form on this website or by email for the following purposes:

• Processing buying enquiries and communication (Art. 6(1)(b) GDPR, performance of a contract or pre-contractual measures)
• Handling the purchase including shipping, valuation and payment (Art. 6(1)(b) GDPR)
• Accounting and tax obligations (Art. 6(1)(c) GDPR, legal obligation)

3. Contact form

When using the contact form, the following data is collected:

• Name (required)
• Email address (required)
• Type of collection (Yu-Gi-Oh!, Magic or Pokémon)
• Description of the collection (optional)
• Estimated collection value (required)
• Questions or comments (optional)

The data is transmitted encrypted via HTTPS/SSL and used solely to process your enquiry.

4. Further data processed

• Return address (if provided)
• Payment information (PayPal address or IBAN/account holder)
• Details about the collection and valuation results

5. Obligation to provide data

Providing a name and email address is required to process a buying enquiry. Without this information the enquiry cannot be processed. The other details are voluntary and serve to give a better estimate.

6. Disclosure of data

Data is only disclosed to third parties insofar as this is necessary for the performance of the contract:

• Shipping provider: Deutsche Post / DHL Group (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn) for sending labels and returns. Address data and shipment information are transmitted.
• Payment provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, for PayPal payouts. Further information is available in PayPal's privacy policy. With PayPal payments, a transfer of data to the USA cannot be ruled out. PayPal has committed to the EU-US Data Privacy Framework.
• To tax advisors or tax authorities, where legally required

7. Hosting and server log files

This website is hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

When the website is accessed, the following information is automatically stored in server log files:

• IP address of the requesting device
• Date and time of access
• Page / URL accessed
• Browser and operating system used

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Processing is necessary to ensure the technical functionality and security of the website. The log files are automatically deleted after 7 days.

8. Encryption

For security reasons this website uses SSL/TLS encryption (recognisable by "https://" and the lock symbol in your browser). This encrypts all data transmitted between your browser and the server.

9. Storage period

Personal data is only stored for as long as necessary to handle the purchase and to meet statutory retention obligations (generally 6 to 10 years under the German Commercial Code and Fiscal Code). After this period the data is deleted.

10. Data security

I use technical and organisational measures to protect the processed data against loss, destruction, access and alteration by unauthorised persons. These include encrypted data transmission, regular backups and access restrictions.

11. Automated decision-making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

12. Rights of data subjects

Under the GDPR you have the following rights:

• Access to the stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal email to ankauf@matrastcg.de is sufficient. I will process your request as quickly as possible.

Competent supervisory authority: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, Holstenstraße 98, 24103 Kiel, www.datenschutzzentrum.de

13. Cookies and tracking

This website uses no cookies, no tracking and no analytics tools. No data is passed to third parties for advertising purposes.