Privacy policy

1. Data controller

The party responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

Artsemi Mikhal

Alter Postweg 138

28207 Bremen

Email: info@pokepreis.de

(hereinafter "Provider")

2. Competent supervisory authority

Right to lodge a complaint with the supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent authority is: The State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen, Arndtstraße 1, 28203 Bremen, Germany.

3. General principles of data processing

The Provider processes users' personal data exclusively in compliance with applicable data protection regulations, in particular the GDPR and the German Federal Data Protection Act (BDSG).

Personal data is only processed to the extent necessary to provide the platform, to fulfil a contract or to comply with a legal obligation.

4. Categories of data processed

Depending on the use of the platform, in particular the following data is processed:

• Master data (e.g. username, email address)
• Usage data (e.g. collections, interactions, app usage)
• Contract and payment data for premium use
• Technical data (e.g. IP address, device and browser information)

5. Purpose of data processing

Processing takes place for the following purposes:

• Providing and operating the platform
• User registration and account management
• Management of digital collections
• Provision of paid premium services
• Ensuring IT security and system stability
• Further development and optimisation of the platform

6. Legal bases for processing

Personal data is processed in particular on the basis of:

• Art. 6 (1) (b) GDPR (performance of a contract)
• Art. 6 (1) (f) GDPR (legitimate interest in secure and functional operation)
• Art. 6 (1) (a) GDPR (consent), where required

7. Registration and user account

Registration is required to create a digital collection. The data collected during registration is used exclusively to manage the user account and to provide the available features.

8. Image recognition feature

When using the image recognition feature, users may upload images of trading cards or capture them via the camera.

Uploaded images are processed exclusively for the purpose of automated card recognition. Any further use or permanent storage only takes place to the extent necessary for the feature.

9. Payment processing via Stripe

For the processing of paid premium services, the Provider uses the payment service Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

As part of the payment process, personal data such as name, email address, payment amount and payment information is transmitted directly to Stripe.

The Provider itself does not store full payment data such as credit card or bank account details.

Processing takes place on the basis of Art. 6 (1) (b) GDPR (performance of a contract).

Further information about data processing by Stripe can be found in Stripe's privacy policy.

10. Cancellation requests ("Cancel subscription" page)

If you submit a cancellation of your paid offering via the "Cancel subscription" page, we process the data you provide (in particular first and last name, the email address linked to the account, an alternative email address for replies, and any voluntary remarks).

The purpose is to process your cancellation and, if necessary, to contact you for clarification. The legal basis is Art. 6 (1) (b) GDPR insofar as it concerns the performance or termination of the contractual relationship, and otherwise Art. 6 (1) (f) GDPR (handling of customer service requests).

The transmission takes place by email to info@pokepreis.de via the website's technical email dispatch (SMTP). To limit abuse, technical information such as the IP address may be processed to a limited extent (Art. 6 (1) (f) GDPR).

The data is retained only for as long as necessary to process the cancellation or to comply with statutory retention obligations.

11. Cookies and similar technologies

Pokepreis uses cookies and comparable technologies that are technically necessary for the operation of the platform.

Optional cookies for analytics or convenience are only used with prior consent.

12. Web analytics (PostHog)

To analyse the use of our website we use the web analytics service PostHog (PostHog, Inc.) — exclusively after your prior consent. Data is processed via PostHog's EU infrastructure (eu.i.posthog.com), so the collected data is processed within the European Union.

We record in particular the pages visited, time spent, approximate origin (country), device and browser used, as well as certain usage events (e.g. registration, starting a subscription checkout, use of the AI card recognition). Logged-in users are assigned a pseudonymous identifier so that returning visitors can be distinguished from new ones.

For this purpose, cookies or comparable technologies (localStorage) are stored on your device. This processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. No analytics takes place without consent.

You can withdraw your consent at any time with effect for the future by adjusting your cookie settings. Further information can be found in PostHog's privacy policy.

13. eBay Partner Network (Affiliate)

We participate in the eBay Partner Network (EPN), an affiliate program operated by eBay Partner Network, Inc. On the card detail pages we display offers from eBay and link to them using a partner identifier (campaign ID).

If you click such a link and make a purchase, eBay may pay us a commission. This does not result in any additional costs for you.

When you click an eBay partner link, you are redirected to eBay. There, eBay independently sets cookies in order to attribute the purchase for the commission. We have no influence over this data processing by eBay; eBay's privacy policy applies.

Merely displaying the offers on our site does not transmit any personal data to eBay beyond a normal page visit. Data is only transmitted to eBay once you actively click a partner link. The legal basis for the integration is our legitimate interest in financing the service (Art. 6(1)(f) GDPR).

14. Recipients of personal data

Personal data is only passed on to third parties where this is necessary for the performance of a contract, where there is a legal obligation, or where the user has given their consent.

15. Retention period

Personal data is only stored for as long as necessary for the respective purposes or for as long as statutory retention obligations exist.

16. Rights of data subjects

Users have the right to:

• Access in accordance with Art. 15 GDPR
• Rectification in accordance with Art. 16 GDPR
• Erasure in accordance with Art. 17 GDPR
• Restriction of processing in accordance with Art. 18 GDPR
• Data portability in accordance with Art. 20 GDPR
• Objection to processing in accordance with Art. 21 GDPR

17. Changes to this privacy policy

The Provider reserves the right to adjust this privacy policy where this is required due to legal or technical changes.