Privacy Policy

1. Data Controller

Christian Walter
MonkyCards — Digital Collectible Cards
Im Oberfeld 13, 88433 Alberweiler, Germany
Email: info@monkycards.de

This Privacy Policy applies to the MonkyCards website and all related services. It is governed by the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

2. Hosting — IONOS

MonkyCards is hosted by:
1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany
Privacy policy: ionos.de/terms-gtc/datenschutzerklaerung

When you visit our site, your browser automatically transmits technical data to our server — including your IP address, browser type, operating system, referring URL, and the date and time of your visit. This data is stored in server log files. Our servers are located in Germany; no data is transferred outside the EU for hosting purposes.

Legal basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest in operating and securing the website).

3. User Accounts

Creating an account is required to use MonkyCards. We collect the following information:

• Name
• Email address
• Password (stored in encrypted form — we cannot access it)
• Purchase history
• Digital card collection

Legal basis: Art. 6 Para. 1 lit. b GDPR (performance of a contract).

4. Purchasing Digital Cards

When you make a purchase, we process your billing information. Full payment details (such as card numbers) are handled exclusively by our payment providers — we do not store this data.

Legal basis: Art. 6 Para. 1 lit. b GDPR.

5. Payment Providers

Stripe: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland.
Privacy policy: stripe.com/privacy

PayPal: PayPal (Europe) S.a r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.
Privacy policy: paypal.com privacy

Both providers may transfer data to the United States under EU Standard Contractual Clauses (Art. 46 Para. 2 lit. c GDPR) and the EU-U.S. Data Privacy Framework.

6. Newsletter and Email Communications

If you sign up for our newsletter, we store your email address and, optionally, your name to send you updates about MonkyCards. You may unsubscribe at any time using the link in every email.

Legal basis: Art. 6 Para. 1 lit. a GDPR (your consent).

7. Cookies

We use technically necessary cookies to ensure core functionality — for example, a session cookie to keep you logged in. With your consent, we may also use analytics cookies to better understand how MonkyCards is used.

You can manage or disable cookies at any time through your browser settings.

Legal basis: Art. 6 Para. 1 lit. f GDPR (necessary) / Art. 6 Para. 1 lit. a GDPR (optional).

8. Data Retention

We retain your account data for as long as your account remains active. Upon account deletion, your personal data will be removed within 30 days, unless we are legally required to retain certain records longer — for example, German tax law requires invoices to be kept for 10 years (§ 147 AO).

9. Your Rights Under GDPR

• Right of access (Art. 15) — request a copy of the data we hold about you
• Right to rectification (Art. 16) — have inaccurate data corrected
• Right to erasure (Art. 17) — request deletion of your data
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20) — receive your data in a structured format
• Right to object (Art. 21)
• Right to withdraw consent at any time (Art. 7 Para. 3 GDPR)

To exercise any of these rights, contact us at info@monkycards.de.

You also have the right to lodge a complaint with:
State Commissioner for Data Protection Baden-Wuerttemberg (LfDI)
P.O. Box 10 29 32, 70025 Stuttgart
baden-wuerttemberg.datenschutz.de

10. Information for US Residents

We do not sell your personal data to any third parties.

California residents (CCPA) have the right to know what data we hold, request deletion, opt out of data sales (which we do not engage in), and not be discriminated against for exercising their rights.

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut, and Utah have comparable rights under your respective state privacy laws. We honor all applicable US state privacy regulations. Contact us at info@monkycards.de — we will respond within 45 days.

11. Data Security

Your connection to MonkyCards is encrypted using SSL/TLS technology (indicated by the padlock icon and "https://" in your browser). We apply appropriate technical and organizational measures to protect your personal data.

12. Updates to This Policy

We may update this Privacy Policy from time to time — for example, when laws change or when we introduce new features. The latest version will always be available on this page. For significant changes, we will notify you directly.

Questions? info@monkycards.de