Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

ImpaTechs IT-Services & Consulting
Oberhausenerstr. 66
45476 Mülheim an der Ruhr
Germany
Email: info@ubuntumarket.de

2. Collection and Processing of Personal Data

We collect personal data when you register on our platform, place an order, or contact us. This data includes in particular:

• Name and email address (upon registration and ordering)
• Delivery address and payment information (for orders)
• IP address and device data (automatically upon page visit)
• Communication data (when contacting via the messaging system)

3. Legal Bases for Processing

Your data is processed on the basis of the following legal grounds in accordance with Art. 6 GDPR:

• Art. 6 (1) lit. b GDPR – Contract performance (e.g., order processing)
• Art. 6 (1) lit. a GDPR – Consent (e.g., newsletter)
• Art. 6 (1) lit. c GDPR – Legal obligation (e.g., tax law)
• Art. 6 (1) lit. f GDPR – Legitimate interest (e.g., IT security)

4. Disclosure to Third Parties

Your personal data is only disclosed to third parties to the following extent:

• To shipping service providers (DHL, UPS, DPD) for the delivery of your order
• To payment service providers (PayPal, Stripe) for payment processing
• To tax advisors or authorities, where required by law

Data is not disclosed for advertising purposes without your express consent.

4a. Payment Processing & Joint Controllership

Ubuntu Market facilitates payments between customers and vendors. For card payments, processing is carried out via Stripe Connect: the charge is created on the respective vendor's Stripe account, and the vendor is the merchant of record. The payment service provider is Stripe Payments Europe Ltd.; card data is processed by Stripe on the vendor's own Stripe account and is not stored or processed by Ubuntu Market. Ubuntu Market does not hold, escrow, or possess the customer's payment at any time — the customer's payment flows directly to the respective vendor, with a 8% application fee (platform commission) automatically deducted by Stripe and routed to Ubuntu Market. For bank transfer, the payment is made to the platform operator's account on behalf of the vendors and forwarded to the respective vendors.

For the processing of order and customer data necessary to fulfil a purchase contract, Ubuntu Market and the respective vendor are joint controllers within the meaning of Art. 26 GDPR. Ubuntu Market processes customer data (name, delivery address, email, ordered items) to operate the marketplace and facilitate the transaction, and transmits this data to the respective vendor so they can fulfil the order. The vendor is responsible for its own processing of customer data in fulfilment of the order and for complying with its own information obligations under Art. 13/14 GDPR. The respective vendor's contact details are shown on the vendor's profile and at checkout.

5. Cookies

Our website uses cookies. Technically necessary cookies are set on the basis of Art. 6 (1) lit. f GDPR. For optional cookies (e.g., analytics cookies), we obtain your consent in accordance with Art. 6 (1) lit. a GDPR. You can disable cookies in your browser settings at any time.

6. Storage Duration

We store your personal data only for as long as is necessary for the respective purposes or as long as statutory retention periods apply. Order data is retained for 10 years in accordance with § 147 AO (Tax Code) and § 257 HGB (Commercial Code).

7. Your Rights

You have the right to:

• Access to your stored data (Art. 15 GDPR)
• Rectification of incorrect data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)

To exercise your rights, contact: info@ubuntumarket.de

8. Right to Complain

You have the right to lodge a complaint with the competent data protection supervisory authority. The competent authority in Germany is the State Data Protection Commissioner of your federal state as well as the Federal Commissioner for Data Protection and Freedom of Information (BfDI).