Privacy Policy

Cakmak Digital, Inhaber (sole proprietor) Seydhan Cakmak
Auf dem Paß 10, 27711 Osterholz-Scharmbeck, Germany
E-mail: info@grandline-market.de

When our website is accessed, our hosting provider automatically records information in server log files (e.g. IP address, date/time, page requested, browser type). This serves the technical provision, security and stability of the site.

Legal basis: Art. 6(1)(f) GDPR (DSGVO) (legitimate interest in secure operation).

Our website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Data may be transferred to the USA in the process; the transfer takes place on the basis of the EU standard contractual clauses. Legal basis: Art. 6(1)(f) GDPR.

Account, order and content data are stored in a PostgreSQL database provided by Supabase. The database is located in the EU region (Frankfurt, Germany). Legal basis: Art. 6(1)(b) and (f) GDPR.

When you register, we process the data you provide (name, user name, e-mail address, password in encrypted form, country). We use this data to provide the account and to process orders.

Legal basis: Art. 6(1)(b) GDPR (contract/steps prior to entering into a contract).

We use Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland) to process payments. When you place an order, the payment data is entered directly on Stripe’s secured pages; we do not store complete card details ourselves. To perform the contract we process order and delivery data (name, address, e-mail, items purchased).

Legal basis: Art. 6(1)(b) GDPR. Stripe’s privacy notice: stripe.com/privacy.

We send this shop’s emails — order confirmations, messages about your order, password resets and, if you have subscribed to it, the newsletter — through the service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). For this purpose Resend processes your email address and the content of the respective message on our behalf. Data may be transferred to the USA in the process; the transfer takes place on the basis of the EU standard contractual clauses.

Legal basis: Art. 6(1)(b) GDPR for messages about your account and order, Art. 6(1)(a) GDPR for the newsletter. Resend’s privacy notice: resend.com/legal/privacy-policy.

You only receive the newsletter if you have expressly subscribed to it (double opt-in): after signing up we send you an email with a confirmation link, and the subscription only takes effect once you click it. For this we store your email address, the time of sign-up and confirmation, the language of the page you signed up on and the personal voucher code you receive as a thank-you. For delivery we keep the addresses of confirmed subscribers as a contact list at Resend (see section 7).

The links in the newsletter carry a label for the respective issue (not for you as a person), so that a visit can be recognised as coming from the newsletter.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 7 Abs. 2 Nr. 2 UWG). You can withdraw it at any time with effect for the future: via the unsubscribe link in every newsletter, in your account under “Settings” or by sending us a message. After unsubscribing you no longer receive the newsletter; your address remains marked as unsubscribed so that it is not contacted again by mistake (Art. 6(1)(f) GDPR).

We use technically necessary cookies without consent: a session/login cookie (NextAuth) to keep you signed in, as well as local storage of your theme setting and of your cookie choice. Legal basis: Art. 6(1)(f) GDPR and § 25 Abs. 2 TDDDG (German Telecommunications Digital Services Data Protection Act; technically necessary).

Only if you click “Accept” in the cookie banner do we use Google Ads conversion measurement. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It tells us whether a purchase from us followed a click on one of our ads on Google. For this, your browser loads a script from Google that sets the cookies _gcl_au and _gcl_aw; after a purchase we transmit the order amount, the currency and the order number to Google. We do not pass on your name, address or email address. Without consent, none of this is loaded.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25 Abs. 1 TDDDG). You can withdraw it at any time with effect for the future via “Cookie settings” at the bottom of every page; the Google Ads cookies are then deleted, otherwise they are stored for up to 90 days. Google may also process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR). More in Google’s privacy policy: policies.google.com/privacy.

Details under Cookie notice.

We store personal data only for as long as is necessary for the purposes stated or as long as statutory retention periods (e.g. under commercial or tax law) apply. The data is erased thereafter.

You have the right of access (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object (Art. 21 GDPR). Please contact us at the address given above.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the Landesbeauftragte für den Datenschutz Niedersachsen (the data protection supervisory authority of Lower Saxony).