AlphaTradingCardGames.com & BX Digital Trading LTD collects, process, and use your personal data in compliance with strict Cyprus and European data protection regulations. Apart from certain particulars required to offer you our services, you may determine which information to provide.
On our website, we use, as far as possible, secure transmission technologies, e.g. TLS encryption. However, data transfer on the Internet, especially communication via e-mail, may involve security gaps. Complete data protection against access of third parties is not possible.
By using the website www.AlphaTradingCardGames.com (hereafter: online platform), but at the latest when registering as a user, you grant your consent to the collection, processing, and use of the entered personal data by the AlphaTradingCardGame & BX Digital Trading LTD as a responsible entity on their servers. Please note that the data transmitted by you as part of the use of the website are processed and saved by means of an EDP system. It is understood that we treat your personal data strictly and confidentially.
Personal data, i.e. specific data about the personal or factual circumstances of a particular or identifiable natural person, are only collected as far as necessary for the performance of the contract and for the provision of contractual services. The collection of data is carried out exclusively to the extent provided by you.
The processing of personal data may consist of saving, changing, transmitting, blocking, and deleting these data. Any personal data are only saved by us as long as this is necessary for the respective specified purpose or we are obligated by law to save this information.
Already when visiting our website, your information may also be saved to the server when having access (e.g. date, time, pages visited). This data is not considered personal data, but they are anonymized, for example, the name of the Internet provider, type of Internet browser, and pages visited on the website. These data are used for statistical purposes only and to improve our services. By accessing the site, data may also be saved on your computer. These data are called “cookies” and they facilitate the use of the website. However, you have the option to deactivate this function in your web browser. This may result in limitations when using our website.
The user’s personal data will not be transmitted to any third party. Exempt from this are only the service partners of the AlphaTradingCardGames.com & BX Digital Trading LTD needed for the completion of the contractual relationship, e.g. providers of payment services (such as e.g. PayPal) as well as a transmission of data to authorities within our legal obligations. In these cases, the provisions of the General Data Protection Regulation Act (GDPR) will be strictly observed, the data transfer will be restricted in any event to a minimum extent.
You shall be entitled to the right of withdrawal of the consent with effect for the future at all times and without limitations. The contact data for exercising the withdrawal may be found in the About us section of our website.
You have the right to information free of charge on your stored personal data as well as to the correction, deletion, or blocking thereof, as far as personal data are concerned for the purposes of the GDPR. In order to contact us, please use the contact data to be found in the About us section of our website.
2 Controller
Controller for the purposes of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act is
Address:
Phone Number:
E-Mail:
AlphaTradingCardGames.Com & BX Digital Trading LTD
VAT identification number: pursuant to art. 27a Value added tax act
CY10430850I
Responsible for the content for the purposes of art. 55 (2) RStV (Interstate Broadcasting Treaty):
Christos Georgiou Milou 10 Paphos, 8027 Cyprus
3 General information on data processing
In general, the processing of personal data is only done to the extent necessary for the provision of a functional website including contents and services. Regular processing of data is only done upon the consent of the data subject. As an exception, the processing of data is done without the consent of the data subject if this is not possible for practical reasons and the processing of data is permitted by legal provisions.
Art. 6 (1) point (a) GDPR serves as the legal basis for the processing of personal data in so far as the consent of the data subject has been obtained for the processing of personal data.
Art. 6 (1) point (b) GDPR serves as the legal basis for the processing of personal data insofar as this is necessary for the performance of a contract to which the data subject is a contractual party. This also applies to processing necessary for the implementation of pre-contractual measures.
Art. 6 (1) point (c) GDPR serves as the legal basis for the processing of personal data insofar as the processing of personal data is necessary for the performance of a legal obligation to which the company is subject.
Art. 6 (1) point (f) GDPR serves as the legal basis for the processing of personal data insofar as this is necessary for the processing for the protection of a legitimate interest of the company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest.
The personal data of the data subject will be deleted or blocked as soon as the purpose of the data storage is no longer applicable. Storage beyond this purpose can be done if this is required by relevant national or European regulations. Blocking or deleting of the data is also done when a retention period prescribed by the aforementioned regulations expires unless further storage of data is required for the conclusion or performance of a contract.
4 Use of the website
With each visit to the website, the system automatically records data and information from the computer system of the calling computer.
The following data are collected:
IP address
Time and date of the access
Time zone difference with Greenwich Mean Time (GMT)
Contents of the website
Access status (HTTP status)
Data volume transferred
Web browser
Browser language and version
Operating system
The website from which you entered this website
The data are saved in the log files of the system. Storage of this data together with other personal user data does not take place.
The legal basis for this is art. 6 (1) point f GDPR.
The collection and temporary storage of the IP address are necessary to enable the presentation of the website on your device. For this, your IP address has to be saved for the duration of your visit to the website. An analysis of these data for marketing purposes does not take place.
The data are deleted when the respective session is ended. If these data are saved in log files, this is done at the latest after seven days. Storage beyond this is possible. In this case, the users’ IP addresses are deleted or alienated so that they can no longer be assigned to the calling client.
The collection of data for the availability of the website and the storage of data in log files for the availability of the website is absolutely necessary. Therefore, there is no possibility of appeal.
5 Registration
The website offers users to register by entering personal data. For this, the data is entered into an input mask, then transmitted and saved. A transfer to a third party does not take place. The following data is collected:
1. Name (first name, surname) 2. Home address (street, house number, postal code, country) 3. E-mail address 4. Time and date of the registration
Commercial users are also required to enter the company name, the VAT ID, and the phone number. Where applicable, a tax statement is required pursuant to section 22f (1) sentence 2 VAT Act. Users who use our platform as non-commercial sellers are required to enter their birth date in addition to the above-mentioned data.
During the registration process, the user’s consent for the processing of these data is obtained with reference to the privacy policy.
The legal basis for this, upon consent of the user, is art. 6 (1) point (a) GDPR. If the registration serves the performance of a contract to which the user is a contractual party or serves the implementation of pre-contractual measures, art. 6 (1) point (b) GDPR is an additional legal basis for the processing of data. As far as we are obliged to process data of commercial users and private sellers, the legal basis is art. 6 (1) point (c).
The registration of the user is required to set up a customer account. It serves to identify the user and to perform the user contract via the service. The data entered by commercial users or private sellers are collected for the fulfillment of our legal obligations to the financial authorities.
The data will be deleted as soon as it is no longer required for the fulfillment of the purpose for which they were collected. This is the case during the registration process for the performance of a contract or the implementation of pre-contractual measures if the data is no longer required for the implementation of the contract. Even after the conclusion of the contract, it may be required to save the personal data of the contractual partner to meet contractual or legal obligations.
Data subjects may modify at any time the user data (except their name and birthday) in their user profile under www.alphatradingcardgames.com/my-Account. Where the data is required for the performance of a contract or the implementation of pre-contractual measures, an advance deleting of data is only possible in so far as the deletion is not barred by contractual or legal obligations. If the recorded name or birthday is incorrect, please reach out to our customer support team to correct the data.
6 Use of the online marketplace
To use the online marketplace, inventory data (e.g. names and addresses as well as contact data of users, user names of authorized users) and contract data (e.g. services used, names of contact persons, payment information) are processed as well as the IP address and the time of the respective user intervention, the user ID and the accessed URLs. This data is stored in the log files of our system. Apart from that, data of third parties entered by the user are processed.
The legal basis for the processing of data upon the consent of the user is art. 6 (1) point (a) GDPR. The consent is obtained upon the conclusion of the contract.
An additional legal basis for the processing of data is art. 6 (1) point (b) GDPR, as the processing of the specified data serves to perform a contract to which the user is a contractual party or to implement pre-contractual measures.
Furthermore, the processing is done to improve our services for the benefit of the analysis, optimization, and economic operation of our website for the purposes of art. 6 (1) point (f) GDPR.
Purpose of the processing
1. of the inventory data (e.g. names and addresses as well as user contact data) and contract data (e.g. services used, names of contact persons, payment information) are for the implementation of the contract as well as billing purposes. 2. of user names and the entries of the respective users to ensure the access authorization of the service. 3. of the IP address, time of the respective user intervention as well as accessed URLs is done to optimize our services and to continually improve the user experience. 4. of third-party data entered by the user is the implementation of the contract and the provision of the contracted services.
The data will be deleted as soon as they are no longer required for the fulfillment of the purpose for which they were collected. This is the case for the data collected during the registration process for the performance of a contract or the implementation of pre-contractual measures if the data is no longer required for the implementation of the contract. Even after the conclusion of the contract, it may be required to save the personal data of the contractual partner to meet contractual or legal obligations (especially fiscal retention periods).
Data subjects may modify or delete the saved data at any time. Where the data is required for the performance of a contract or the implementation of pre-contractual measures, an advance deleting of data is only possible in so far as the deletion is not barred by contractual or legal obligations. In particular, the notice periods of current contracts shall remain unaffected.
7 Payments and Payment Service Providers
If you are redirected to the website of a payment service provider for a payment transaction, the data entered by you will be processed directly by the payment service provider. The Privacy Policy of the respective payment service provider applies.
Payments through PayPal as well as credit card payments are processed by payment service provider Braintree. Braintree is a service of PayPal, PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg. For these payments, you will be immediately redirected to the Braintree user interface where the payment will be processed. The data to be entered there will not be collected, processed, or stored by us. For this data, only the Braintree privacy policy applies, which you can find at https://www.braintreepayments.com/de/legal/braintree-privacy-policy as well as further privacy statements if applicable.
Art. 6 (1) point (a) GDPR is the legal basis for the processing of payment data by the user upon consent from the user.
Additionally, art. 6 (1) point (b) GDPR serves as the legal basis for the processing of personal data, insofar are this data is required for the fulfillment of a contract
The collection of data is done solely for the fulfillment of the contract.
The data will be deleted as soon as it is no longer required for the fulfillment of the contract for which it was collected. This is the case for personal data if the respective contractual relationship with the person concerned was terminated. A contractual relation is considered terminated if the person concerned can no longer be considered a client (e.g., by deleting the account).
The person concerned may at any time withdraw consent to the processing of personal data. Any obligation needed to fulfill the contracts remains unaffected by this.
