Your business data is the foundation of your company. Here you can find out which personal data we process, what we use it for and what rights you have. This English version is provided for convenience only; the German version is legally binding.
Last updated: [DATE]The controller responsible for processing personal data in connection with the ResellDesk website and services is:
Jeremy LebkücherResellDesk is a web-based software platform for the central management and organisation of reselling business processes.
Personal data is any information that can be used to identify you personally – such as your name, email address or IP address. We only process this data where one of the following legal bases applies:
Storing information on your device or accessing it is additionally based on Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
This website and the ResellDesk platform are operated on servers in Germany. Our hosting provider is:
netcup GmbHnetcup processes all data generated when visiting the website and using the platform solely on our behalf and in accordance with our instructions. We have concluded a data processing agreement with netcup pursuant to Art. 28 GDPR. Further information can be found in netcup’s privacy policy at netcup.com. The legal basis is our legitimate interest in providing our services reliably and securely (Art. 6(1)(f) GDPR) and, for the platform, the performance of a contract (Art. 6(1)(b) GDPR).
When you visit our website, your browser automatically transmits information that is stored in server log files:
We need this data to provide the website technically, detect errors and ensure the security of our systems (Art. 6(1)(f) GDPR). This data is not combined with other data sources. Log files are deleted after [NUMBER] days unless they are needed to investigate a security incident.
Data is transmitted via an encrypted SSL/TLS connection, recognisable by “https://” and the padlock symbol in your browser’s address bar.
ResellDesk only uses technically necessary cookies and comparable browser storage technologies. They are required for logging in and operating the platform – for example, to keep you logged in after you sign in.
We do not use analytics, tracking or marketing cookies.
The legal basis for technically necessary cookies is Section 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(b) or (f) GDPR. Consent is not required for these.
[LIST OF COOKIES / BROWSER STORAGE ENTRIES ACTUALLY SET – AFTER REVIEW BY THE DEVELOPER: name, purpose, duration]
To use ResellDesk, you create a personal account. In doing so, we process:
We need this data to provide your account, bill your plan and give you access to your data from any device (Art. 6(1)(b) GDPR). We also send you service-related emails, for example to confirm your account, about invoices or about important changes.
Instead of using your email address, you can also sign up and log in with your existing Google, Apple or Microsoft account. This option is voluntary; signing up by email is always available.
If you choose one of these providers, you will be redirected to its login page. After you log in and confirm, the provider sends us your name, email address and a unique account ID. With Apple, you can share an anonymised relay address instead of your real email address. We do not receive your password for the respective provider. The provider learns that you are logging in to ResellDesk.
We use this data solely to create your account and log you in (Art. 6(1)(b) GDPR). The providers are:
A transfer of personal data to the respective parent companies in the USA cannot be ruled out. Such transfers are based on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, provided the respective company is certified under it. For details of the data the providers process themselves, please refer to their privacy notices.
In ResellDesk, you manage items, purchases, inventory, sales, shipping, returns, receipts and reports. We store this data centrally on our server infrastructure in Germany so that you can access it at any time via your account (Art. 6(1)(b) GDPR).
After a sale on a supported marketplace, ResellDesk provides the user with the link to the shipping label generated by the respective marketplace in the dashboard.
The user can use this link to open, download or print the shipping label.
Shipping labels are created by the respective marketplace. ResellDesk does not operate its own buyer management and does not create its own shipping documents.
The legal basis for providing this is the performance of our contract with you (Art. 6(1)(b) GDPR).
For reports and insights, ResellDesk analyses only your own business data. There is no automated decision-making within the meaning of Art. 22 GDPR that produces legal effects concerning you. You make all decisions yourself.
When you connect a marketplace account (e.g. Vinted, eBay or Kleinanzeigen) to ResellDesk, we exchange data with the marketplace via the respective connection – such as listings, item status and sales information as well as the links to the shipping labels generated by the marketplace (see section 07). We store the required credentials or access tokens in encrypted form.
A connection is only established if you set it up yourself, and serves the performance of the contract (Art. 6(1)(b) GDPR). You can disconnect it in your account at any time. Data processing on the marketplaces themselves is governed by their own privacy policies.
We process payment for your plan via Stripe, a service of Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (“Stripe”).
You enter your payment details – for example card number or bank details – directly with Stripe. We only receive the information we need for billing, such as payment status, amount and the last digits of your payment method. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR); for fraud prevention, Stripe also processes data on the basis of legitimate interests (Art. 6(1)(f) GDPR).
Stripe may transfer data to Stripe, Inc. in the USA. Stripe is certified under the EU-US Data Privacy Framework. Further information: stripe.com/privacy.
If you contact us by email or via our contact form at reselldesk.de/contact, we store your details (e.g. name, email address and the content of your message) in order to process your request. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract, otherwise our legitimate interest in responding (Art. 6(1)(f) GDPR). We delete the data once your request has been fully processed and no retention obligations apply.
We only store personal data for as long as is necessary for the respective purpose or as required by statutory retention obligations.
Your account and business data are generally stored for the duration of your contract with ResellDesk. Before the contract ends, you can back up your data using the available export functions.
After the contract ends, your account and business data will be deleted within 30 days, unless statutory retention obligations or other legal reasons prevent deletion.
Invoices and billing records that ResellDesk must retain due to its own legal obligations are stored for the prescribed period. They are deleted once these periods have expired.
You have the following rights regarding your personal data:
To exercise your rights, simply send an email to [Official ResellDesk contact address].
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible is in particular that of the German federal state in which we are based: [STATE DATA PROTECTION AUTHORITY].
We use technical and organisational measures to protect your data against loss, manipulation and unauthorised access – including encrypted connections, encrypted storage of access tokens and access restrictions. We continuously adapt these measures to the state of the art.
We update this privacy policy when our services or legal requirements change. The version published here applies.