Privacy policy
1. Privacy policy
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any information by which you can be personally identified.
Detailed information regarding data protection can be found in our Privacy Policy set out below.
Data Collection on this Website
Who is responsible for data collection on this website?
The processing of data on this website is carried out by the website operator.
The operator's contact details can be found in the section entitled "Information about the Data Controller" within this Privacy Policy.
How do we collect your data?
Some data is collected when you provide it to us.
This may include, for example, information that you enter into a contact form.
Other data is collected automatically, or after you have given your consent, when you visit this website through our IT systems.
This mainly includes technical data such as:
Internet browser
Operating system
Time of page access
This data is collected automatically as soon as you access this website.
What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors.
Other data may be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right at any time to obtain, free of charge, information about:
the origin of your stored personal data;
the recipients of your personal data; and
the purpose for which your personal data is processed.
You also have the right to request the correction or deletion of your personal data.
Where you have given your consent to data processing, you may withdraw that consent at any time with effect for the future.
Furthermore, under certain circumstances, you have the right to request restriction of the processing of your personal data.
You also have the right to lodge a complaint with the competent supervisory authority.
Should you have any questions regarding data protection, you may contact us at any time.
Analytics Tools and Third-Party Services
When visiting this website, your browsing behaviour may be analysed statistically.
This is carried out primarily through analytics programmes.
Detailed information about these analytics programmes can be found in this Privacy Policy.
2. Hosting
We host the content of our website with the following provider:
Vercel Inc.
340 S Lemon Ave #4133
Walnut, CA 91789
USA
Vercel also processes your data in the USA, among other places. As a legal basis for data processing by recipients based in third countries, Vercel relies on Standard Contractual Clauses (Article 46(2) and (3) GDPR). Through these clauses, Vercel commits to maintaining the European level of data protection when processing your data, even where that data is stored or processed in the USA.
3. General Information and Mandatory Information
Data Protection
The operators of this website take the protection of your personal data very seriously.
We process your personal data confidentially and in accordance with the applicable data protection legislation, including the General Data Protection Regulation (GDPR), and this Privacy Policy.
Whenever you use this website, various types of personal data are collected.
Personal data means any information by which you can be personally identified.
This Privacy Policy explains:
which personal data we collect;
how we collect it;
why we process it; and
for what purposes it is used.
Please note that data transmission over the Internet (for example, communication by email) may be subject to security vulnerabilities.
Complete protection of data against access by third parties cannot be guaranteed.
Information about the Data Controller
The Data Controller responsible for processing personal data on this website is:
Memory Card – Cards & Collectibles
Jasmin Nitz
Brucknerstrasse 31a, 22083 Hamburg, Germany
Telephone:
+49 176 42146890
Email: support@memorycardtcg.com
The Data Controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (such as names, email addresses or similar information).
Data Retention
Unless a more specific retention period has been stated within this Privacy Policy, your personal data will remain with us until the purpose for processing no longer applies.
If you exercise your legitimate right to erasure or withdraw your consent to processing, your personal data will be deleted unless we are legally entitled or obliged to retain it for other lawful reasons (for example, retention obligations under tax or commercial law).
In such cases, deletion will take place once those legal grounds no longer apply.
Legal Basis for Data Processing
Where you have given your consent to the processing of your personal data, we process your personal data on the basis of Article 6(1)(a) GDPR and, where special categories of personal data pursuant to Article 9(1) GDPR are processed, on the basis of Article 9(2)(a) GDPR.
Where you have expressly consented to the transfer of personal data to third countries, processing is additionally carried out on the basis of Article 49(1)(a) GDPR.
Where you have consented to the storage of cookies or to access information stored on your device (for example through device fingerprinting), processing is also carried out pursuant to Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TTDSG).
You may withdraw your consent at any time with future effect.
Where your data is required for the performance of a contract or in order to take steps prior to entering into a contract, we process your data pursuant to Article 6(1)(b) GDPR.
Where processing is necessary to comply with a legal obligation, we process your data pursuant to Article 6(1)(c) GDPR.
Processing may also be carried out on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR.
The specific legal basis applicable in each individual case is explained in the relevant sections of this Privacy Policy.
Recipients of Personal Data
As part of our business activities, we cooperate with various external service providers.
In certain cases, it is necessary to transfer personal data to these external parties.
We only disclose personal data where:
this is necessary for the performance of a contract;
we are legally obliged to do so;
we have a legitimate interest pursuant to Article 6(1)(f) GDPR; or
another legal basis permits such disclosure.
Where we use data processors, personal data is transferred solely on the basis of a valid Data Processing Agreement (DPA).
Where joint processing takes place, a Joint Controller Agreement pursuant to Article 26 GDPR is concluded.
Withdrawal of Your Consent
Many data processing operations are only possible with your explicit consent.
You may withdraw any consent you have previously given at any time.
Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal took effect.
Right to Object (Article 21 GDPR)
Where your personal data is processed on the basis of Article 6(1)(e) or Article 6(1)(f) GDPR, you have the right, at any time, to object to the processing of your personal data on grounds relating to your particular situation.
This also applies to profiling based on those provisions.
The applicable legal basis for the processing can be found in this Privacy Policy.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where processing is required for the establishment, exercise or defence of legal claims (Article 21(1) GDPR).
Right to Object to Direct Marketing
Where your personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes.
This also applies to profiling where it is related to direct marketing.
If you object, your personal data will no longer be used for direct marketing purposes (Article 21(2) GDPR).
Right to Lodge a Complaint
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority.
This applies in particular to the supervisory authority of:
your habitual place of residence;
your place of work; or
the place of the alleged infringement.
This right is without prejudice to any other administrative or judicial remedy available to you.
Right to Data Portability
You have the right to receive personal data that we process automatically on the basis of your consent or in fulfilment of a contract in a structured, commonly used and machine-readable format.
You also have the right to request that such data be transmitted directly to another data controller, where technically feasible.
Right of Access, Rectification and Erasure
Within the limits of the applicable legal provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, including:
its origin;
its recipients; and
the purpose of processing.
You also have the right to request the rectification or erasure of your personal data.
Should you have any questions regarding your personal data, you may contact us at any time.
Right to Restriction of Processing
You have the right to request restriction of the processing of your personal data.
You may contact us at any time to exercise this right.
The right to restriction applies in particular in the following circumstances:
where you contest the accuracy of your personal data while we verify its accuracy;
where processing is unlawful and you request restriction instead of erasure;
where we no longer require your personal data, but you require it for the establishment, exercise or defence of legal claims;
where you have objected pursuant to Article 21(1) GDPR and it has not yet been determined whether our legitimate grounds override yours.
Where processing has been restricted, your personal data may, apart from storage, only be processed:
with your consent;
for the establishment, exercise or defence of legal claims;
to protect the rights of another natural or legal person; or
for important reasons of public interest recognised by the European Union or a Member State.
SSL / TLS Encryption
For security reasons and to protect the transmission of confidential content—such as orders or enquiries that you send to us—this website uses SSL or TLS encryption.
You can recognise an encrypted connection when your browser's address bar changes from http:// to https://, and a padlock icon appears in your browser.
Where SSL or TLS encryption is enabled, any data transmitted to us cannot be read by third parties.
4. Data Collection on this Website
Cookies
Our website uses so-called cookies.
Cookies are small data files that are stored on your device and do not cause any damage.
They are either stored temporarily for the duration of your visit (session cookies) or permanently on your device (persistent cookies).
Session cookies are automatically deleted once you leave our website.
Persistent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your web browser.
Cookies may originate from us (first-party cookies) or from third-party providers (third-party cookies).
Third-party cookies enable the integration of certain third-party services into our website, for example payment processing services.
Cookies perform a variety of functions.
Many cookies are technically necessary because certain website features would not function without them (for example, the shopping basket or the display of embedded videos).
Other cookies may be used to analyse user behaviour or for advertising purposes.
Cookies that are required to carry out electronic communications, provide functions requested by you (such as the shopping basket), or optimise the website (for example, audience measurement) are processed on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR, unless another legal basis applies.
The website operator has a legitimate interest in storing technically necessary cookies to ensure the technically flawless and optimised provision of its services.
Where consent has been requested for the storage of cookies or similar recognition technologies, processing takes place exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TTDSG.
You may withdraw your consent at any time with future effect.
You can configure your browser to:
notify you when cookies are set;
allow cookies only in individual cases;
block cookies in specific cases or generally; or
automatically delete cookies when your browser is closed.
Please note that disabling cookies may restrict the functionality of this website.
Details of the cookies and services used on this website are provided within this Privacy Policy.
Google Analytics
We use Google Analytics 4 to analyse the use of our website.
The information collected is used to improve our website and optimise our marketing activities.
Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google processes website usage data on our behalf and is contractually obliged to implement appropriate measures to safeguard the security and confidentiality of the processed data.
During your visit, Google Analytics may collect, among other things:
Pages visited
Orders, including order value and purchased products
Completion of website goals (such as contact enquiries or newsletter subscriptions)
Your behaviour on the website (for example, time spent on pages, clicks and scrolling behaviour)
Your approximate location (country and city)
Your IP address (stored only in anonymised form so that it cannot be directly attributed to you)
Technical information such as browser type, internet service provider, device type and screen resolution
The source from which you accessed our website (for example, another website or advertising campaign)
Personal information such as your name, postal address or contact details is never transmitted to Google Analytics.
The collected data may be transferred to Google servers located in the United States.
Please note that the United States may not provide a level of data protection equivalent to that available within the European Union.
Google Analytics stores cookies in your browser for up to two years following your most recent visit.
These cookies contain a randomly generated user ID that enables recognition of returning visitors.
The collected information is linked to this anonymous user ID, allowing pseudonymised user profiles to be created.
User-related data is automatically deleted after 14 months.
Aggregated statistical data may be retained indefinitely.
If you do not wish your data to be collected, you can prevent this by installing the official Google Analytics browser add-on or by rejecting analytics cookies via our Cookie Consent settings.
TikTok Pixel
We use TikTok Pixel on our website for conversion tracking and advertising performance measurement.
Within the European Economic Area, this service is provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin D02 T380, Ireland.
TikTok may also process your personal data on servers located in the United States.
Please note that, according to the current case law of the Court of Justice of the European Union, an equivalent level of data protection in the United States cannot always be guaranteed.
This may result in risks relating to the security and lawfulness of data processing.
Where personal data is transferred to countries outside the European Union, TikTok relies on the European Commission's Standard Contractual Clauses (SCCs) pursuant to Article 46 GDPR.
These contractual safeguards are intended to ensure that your personal data continues to receive a level of protection equivalent to that required under European data protection law.
Further information regarding the Standard Contractual Clauses and TikTok's processing of personal data can be found in TikTok's Privacy Policy.
Contact Form
If you submit an enquiry via our contact form, the information you provide, together with your contact details, will be stored for the purpose of processing your enquiry and responding to any follow-up questions.
We will not disclose this information without your consent.
Where your enquiry relates to the performance of a contract or pre-contractual measures, processing is carried out pursuant to Article 6(1)(b) GDPR.
In all other cases, processing is based either on our legitimate interest in handling enquiries efficiently pursuant to Article 6(1)(f) GDPR or on your consent pursuant to Article 6(1)(a) GDPR, where consent has been requested.
Your data will remain with us until:
you request its deletion;
you withdraw your consent; or
the purpose for processing no longer applies (for example, once your enquiry has been fully resolved).
Mandatory statutory retention periods remain unaffected.
Contact by Email or Telephone
If you contact us by email, telephone or fax, your enquiry, together with any personal data arising from it (such as your name and the content of your enquiry), will be stored and processed for the purpose of handling your request.
We will not disclose this information without your consent.
Processing is carried out pursuant to:
Article 6(1)(b) GDPR, where necessary for contractual or pre-contractual purposes;
Article 6(1)(f) GDPR, where based on our legitimate interest in responding efficiently to enquiries; or
Article 6(1)(a) GDPR, where processing is based on your consent.
Your personal data will be retained only for as long as necessary to process your enquiry or as required by applicable statutory retention obligations.
5. Social Media
Instagram
This website incorporates features provided by Instagram, a service operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
When the Instagram feature is activated, a direct connection is established between your device and Instagram's servers.
Instagram thereby receives information that you have visited this website.
If you are logged into your Instagram account, clicking the Instagram button allows you to link the content of this website to your Instagram profile.
As a result, Instagram may associate your visit to this website with your user account.
Please note that, as the website operator, we have no knowledge of the content of the data transmitted to Instagram or how Instagram uses that data.
Where your consent has been obtained, the use of this service is based on Article 6(1)(a) GDPR and Section 25 TTDSG.
You may withdraw your consent at any time.
Where no consent has been obtained, processing is based on our legitimate interest in maintaining the broadest possible visibility on social media platforms pursuant to Article 6(1)(f) GDPR.
Where personal data is collected on our website and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited act as Joint Controllers within the meaning of Article 26 GDPR.
This joint responsibility is limited solely to the collection of data and its transmission to Meta.
Any subsequent processing carried out by Meta is the sole responsibility of Meta.
The respective obligations have been set out in a Joint Controller Agreement.
Further information is available in Meta's Privacy Policy.
Transfers of personal data to the United States are based on the European Commission's Standard Contractual Clauses (SCCs).
6. Newsletter
Newsletter Subscription
If you subscribe to our newsletter, we require your email address together with information that enables us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter.
No further data is collected unless you provide it voluntarily.
Your data will be used exclusively for sending the requested newsletter and will not be disclosed to third parties.
The processing of the data entered into the newsletter subscription form is carried out solely on the basis of your consent pursuant to Article 6(1)(a) GDPR.
You may withdraw your consent at any time by clicking the "Unsubscribe" link included in every newsletter.
Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
Your data will remain stored until you unsubscribe from the newsletter or until the purpose of processing no longer applies.
Following your unsubscribe request, your email address may be retained on a suppression list (blacklist) to ensure that you do not receive future newsletters.
This processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR.
You may object to this processing where your interests override our legitimate interests.
7. Plugins and Third-Party Tools
YouTube
This website embeds videos provided by YouTube, a service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit a page containing embedded YouTube videos, a connection is established with YouTube's servers.
YouTube is informed which pages of our website you have visited.
YouTube may also store cookies on your device or use comparable technologies, such as device fingerprinting, in order to recognise visitors.
This information may be used to:
compile video statistics;
improve user experience; and
prevent fraudulent activities.
If you are logged into your YouTube account, YouTube may associate your browsing behaviour directly with your personal profile.
You can prevent this by logging out of your YouTube account before visiting our website.
The use of YouTube is based on our legitimate interest in presenting our online content in an attractive and user-friendly manner pursuant to Article 6(1)(f) GDPR.
Where consent has been obtained, processing is carried out solely on the basis of Article 6(1)(a) GDPR and Section 25 TTDSG.
You may withdraw your consent at any time.
Further information is available in Google's Privacy Policy.
8. Review Platform
Trustpilot
We use the review platform Trustpilot A/S, Pilestræde 58, 5th Floor, 1112 Copenhagen, Denmark.
Where you consent during the ordering process, you may receive an invitation by email to review your purchase.
For this purpose, the following information may be processed:
Your name
Email address
Order number
The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR.
Further information regarding Trustpilot's processing of personal data and your rights can be found in Trustpilot's Privacy Policy.
International Data Transfers
Please note that your personal data may be transferred to, stored in and processed in countries outside your country of residence.
Your personal data may also be processed by our employees, service providers and business partners located in those countries.
Where personal data is transferred outside the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms, including:
the European Commission's Standard Contractual Clauses (SCCs);
equivalent transfer mechanisms approved under UK data protection law; or
transfers to countries that have been recognised by the relevant authorities as providing an adequate level of data protection.
Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy at any time to ensure that it remains compliant with current legal requirements or to reflect changes to our services.
The version published on this website at the time of your visit shall apply.
Contact
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:
Memory Card – Cards & Collectibles
Email:
support@memorycardtcg.com
---
Quellen: https://www.e-recht24.de und teilweise erstellt mit dem Datenschutz Generator von AdSimple.