Thank you for visiting the Giant Card Store of of Olli-Baba Trading Cards GmbH. We are committed to protecting your personal information and complying with the applicable German data protection laws. This privacy policy explains how we collect, use, and protect your personal data when you use our online shop. Please read this policy carefully to understand how we handle your information.

1. Controller

The controller for the processing of personal data on the Giant Card Store of of Olli-Baba Trading Cards GmbH is: Olli-Baba Trading Cards GmbH Firat Babayigit Maxstr. 45 45127 Essen If you have any questions or concerns about your personal data, you can contact us using the above-mentioned contact details.

2. Collection and Use of Personal Data

We collect and use personal data to provide you with a personalized and efficient online shopping experience. The types of personal data we collect may include, but are not limited to: Name, title, and contact information (such as address, email address, and phone number) Account login credentials (username and password) Payment information (such as credit card details) Order history and preferences
We use your personal data for the following purposes:

Processing and fulfilling your orders Managing and maintaining your customer account Providing customer support and resolving issues Communicating with you about your orders, updates, and promotions Analyzing and improving our products, services, and website Complying with legal obligations

3. Legal Basis for Data Processing

We process your personal data on the following legal bases: Performance of a contract: We process your personal data to fulfill our contractual obligations, such as processing your orders and delivering products. Compliance with legal obligations: We may process your personal data to comply with legal requirements, such as tax or accounting obligations. Legitimate interests: We may process your personal data based on our legitimate interests, such as improving our services, preventing fraud, and ensuring the security of our website. Consent: In certain cases, we may rely on your consent to process your personal data. If we do, we will obtain your consent before processing your data and provide you with the right to withdraw your consent at any time.

4. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the nature and sensitivity of the personal data, the purposes for which we process it, and any applicable legal requirements.

5. Data Security

We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. We regularly review our security procedures and ensure that our staff are trained in handling personal data securely. However, please be aware that no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Disclosure and Transfer

We may disclose your personal data to third parties only in accordance with applicable data protection laws. This may include: Service providers: We may engage trusted third-party service providers to perform certain functions or services on our behalf, such as payment processing, shipping, and IT support. These service providers will have access to your personal data only to the extent necessary to perform their functions. Legal requirements: We may disclose your personal data if required to do so by law or in response to a valid legal request, such as a court order or government inquiry. We do not transfer your personal data to countries outside the European Economic Area (EEA) unless adequate safeguards are in place to protect your data, such as using standard contractual clauses approved by the European Commission.

7. Your Rights

You have certain rights regarding your personal data under applicable data protection laws. These rights may include:

Right to access: You have the right to request access to your personal data that we hold and receive a copy of the information we process about you.

Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you.

Right to erasure: You have the right to request the deletion of your personal data under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.

Right to restrict processing: You have the right to request the restriction of processing of your personal data in certain situations, such as when you contest the accuracy of the data or the lawfulness of processing.

Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller.

Right to object: You have the right to object to the processing of your personal data on grounds relating to your particular situation. We will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.

Right to withdraw consent: If we rely on your consent as the legal basis for processing your personal data, you have the right to withdraw your consent at any time.

To exercise your rights or if you have any questions or concerns about the processing of your personal data, please contact us using the contact details provided.

8. Changes to the Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices and legal requirements. The updated version will be posted on our website with a revised effective date. Last Updated: [13.07.2023] Please note that this privacy policy applies solely to the online shop Giant Card Store of Olli-Baba Trading Cards GmbH and does not cover any third-party websites linked to our website.