Privacy Policy

1. Controller

The controller responsible for data processing on this website is Dedrev Online Shops UG (haftungsbeschränkt), Stubaier Str. 46, 70327 Stuttgart, Deutschland, email: [email protected].

You can reach our data protection contact at the address above.

2. Categories of data we process

Account data (email address, hashed password, Steam ID where you connect Steam), profile and preference settings (display currency, language), usage and log data (IP address, browser type, timestamps), portfolio and watchlist data you create, and billing data processed by our payment providers.

We do not knowingly collect special categories of personal data (Art. 9 GDPR).

3. Purposes and legal bases

Providing the service and your account: performance of a contract (Art. 6 (1) (b) GDPR).

Processing payments and managing subscriptions (Free / Pro / Elite): performance of a contract (Art. 6 (1) (b) GDPR).

Security, abuse prevention and operating the platform: legitimate interests (Art. 6 (1) (f) GDPR).

Optional analytics and marketing cookies: your consent (Art. 6 (1) (a) GDPR, § 25 (1) TTDSG), revocable at any time.

4. Recipients and processors

We use the following processors under Art. 28 GDPR: Stripe and PayPal (payment processing), Steam / Valve (OAuth login when you connect Steam, plus skin images served from Steam's image CDN via Cloudflare — your browser fetches them directly when viewing items), Hetzner Online GmbH (hosting in Germany) and our email delivery provider. Our usage analytics is self-hosted (cookieless Umami on our own servers), so it is not shared with any third-party analytics provider.

A full, current list of cookies and third parties — by category, with provider, purpose and retention — is shown on our Cookie Policy, which is fed from the same registry as our consent banner.

5. Transfers to third countries

Where a processor transfers data outside the EU/EEA (e.g. Stripe, PayPal), the transfer is safeguarded by EU Standard Contractual Clauses and/or an adequacy decision of the European Commission.

6. Retention

We keep account data for as long as your account exists. After deletion we erase or anonymise data unless statutory retention periods (e.g. tax and commercial law, up to 10 years) require otherwise.

7. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR).

Where processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise any of these rights, contact us at [email protected].

8. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your residence, place of work or the place of the alleged infringement.