Privacy Policy

Cakmak Digital, Inhaber (sole proprietor) Seydhan Cakmak
Auf dem Paß 10, 27711 Osterholz-Scharmbeck, Germany
E-mail: info@grandline-market.de

When our website is accessed, our hosting provider automatically records information in server log files (e.g. IP address, date/time, page requested, browser type). This serves the technical provision, security and stability of the site.

Legal basis: Art. 6(1)(f) GDPR (DSGVO) (legitimate interest in secure operation).

Our website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Data may be transferred to the USA in the process; the transfer takes place on the basis of the EU standard contractual clauses. Legal basis: Art. 6(1)(f) GDPR.

Account, order and content data are stored in a PostgreSQL database provided by Supabase. The database is located in the EU region (Frankfurt, Germany). Legal basis: Art. 6(1)(b) and (f) GDPR.

When you register, we process the data you provide (name, user name, e-mail address, password in encrypted form, country). We use this data to provide the account and to process orders.

Legal basis: Art. 6(1)(b) GDPR (contract/steps prior to entering into a contract).

We use Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland) to process payments. When you place an order, the payment data is entered directly on Stripe’s secured pages; we do not store complete card details ourselves. To perform the contract we process order and delivery data (name, address, e-mail, items purchased).

Legal basis: Art. 6(1)(b) GDPR. Stripe’s privacy notice: stripe.com/privacy.

We use exclusively technically necessary cookies, in particular a session/login cookie (NextAuth) to keep you signed in, as well as local storage of your theme setting. No tracking takes place and no data is passed on for advertising purposes.

Legal basis: Art. 6(1)(f) GDPR and § 25 Abs. 2 TDDDG (German Telecommunications Digital Services Data Protection Act; technically necessary). Details under Cookie notice.

We store personal data only for as long as is necessary for the purposes stated or as long as statutory retention periods (e.g. under commercial or tax law) apply. The data is erased thereafter.

You have the right of access (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object (Art. 21 GDPR). Please contact us at the address given above.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the Landesbeauftragte für den Datenschutz Niedersachsen (the data protection supervisory authority of Lower Saxony).