Privacy Policy

1) Introduction and Contact Details of the Controller
1.1 We are pleased that you visit our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data are all data by which you can be personally identified.
1.2 Controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Excellence, represented by Rami Abou, An der oberen alten Donau, 1210 Vienna, Austria, Tel.: +43 660 231 0978, E‑mail: office@marktclass.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website
2.1 When using our website for informational purposes only (i.e., you do not register or otherwise provide information), we collect only the data that your browser transmits to the site server (so‑called “server log files”). When you access our website, we collect the following data that are technically necessary for us to display the website:
•     visited website;
•     date and time of access;
•     amount of data transferred in bytes;
•     referrer (source from which you reached the site);
•     browser used;
•     operating system used;
•     IP address used (possibly in anonymized form).
Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used otherwise. However, we reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.
2.2 This website uses SSL/TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the prefix “https://” and the padlock symbol in your browser address bar.

3) Hosting & Content Delivery Network
For hosting our website and delivering page content we use a provider that performs its services itself or through selected subcontractors exclusively on servers within the European Union. All data collected on our website are processed on these servers. We have concluded a data processing agreement (DPA) with the provider to ensure the protection of visitor data and to prohibit unauthorized disclosure to third parties.

4) Contact
When you contact us (e.g., via contact form or e‑mail), personal data are collected. Which data are collected when using a contact form is indicated in the respective form. These data are stored and used exclusively for the purpose of answering your request and for the associated technical administration. The legal basis for processing these data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after final processing of your request. This is the case when the circumstances indicate that the matter has been finally resolved and provided no statutory retention obligations prevent deletion.

5) Data Processing When Opening a Customer Account
Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide them when opening a customer account. Which data are required for account creation can be seen from the input fields of the corresponding form on our website. Deletion of your customer account is possible at any time and can be requested by sending a message to the controller’s address given above. After deletion of your customer account, your data will be erased provided that all contracts concluded via the account have been fully processed, no statutory retention periods prevent deletion, and we do not have a legitimate interest in further storage.

6) Use of Customer Data for Direct Marketing
6.1 Newsletter subscription
If you subscribe to our e‑mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e‑mail address. Any additional data are voluntary and used to address you personally. We use the double opt‑in procedure for newsletter subscription: we will only send the newsletter after you have expressly confirmed your consent by clicking a confirmation link in a verification e‑mail. By activating the confirmation link you give your consent to the processing of your personal data pursuant to Art. 6(1)(a) GDPR. When registering for the newsletter we store the IP address assigned by your internet service provider (ISP) and the date and time of registration to be able to trace possible misuse. The data collected at registration are used exclusively for newsletter distribution. You can unsubscribe at any time via the link in the newsletter or by notifying the controller named above. After unsubscribing, your e‑mail address will be removed from our distribution list immediately, unless you have expressly consented to further use or a legal basis permits continued processing.
6.2 Newsletter to existing customers
If you provided your e‑mail address when purchasing goods or services, we may send you offers for similar goods or services by e‑mail on the basis of our legitimate interest in personalized direct marketing pursuant to Art. 6(1)(f) GDPR, unless you have objected. You have the right to object to such use at any time with future effect by notifying the controller named above. After receipt of your objection, marketing e‑mails will cease immediately. Only transmission costs according to basic tariffs may apply.

7 Order Processing
7.1 To the extent necessary for contract processing, delivery and payment purposes, the personal data we collect will be passed on to the commissioned shipping company and the commissioned credit institution in accordance with Art. 6(1)(b) GDPR.
If, under a corresponding contract, we owe you updates for goods with digital elements or for digital products, we will process the contact data you provided at the time of order in order to personally inform you as required by law under Art. 6(1)(c) GDPR. Your contact details will be used strictly for the purpose of notifications about updates owed by us and will be processed by us only to the extent necessary for that purpose.
For the processing of your order we also cooperate with the service provider(s) named below, who support us wholly or partly in the performance of concluded contracts. Certain personal data will be transmitted to these service providers as described below.
7.2 Use of payment service providers
• Stripe
This website offers one or more online payment methods of the following provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
If you choose a payment method of the provider where you pay in advance (e.g., credit card), your payment data provided during the ordering process (including name, address, bank and card information, currency and transaction number) and information about the contents of your order will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. The transfer of your data in this case is carried out exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
If you choose a payment method where the provider advances payment (e.g., invoice or installment purchase or direct debit), you will be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, e‑mail address, telephone number, and, if applicable, data on an alternative payment method).
To safeguard our legitimate interest in determining the creditworthiness of our customers, these data will be forwarded by us to the provider for a credit check pursuant to Art. 6(1)(f) GDPR. The provider checks, based on the personal data you provided and additional data (such as shopping cart, invoice amount, order history, payment experience), whether the selected payment option can be granted with regard to payment and/or default risks.
The credit report may contain probability values (so‑called score values). If score values are included in the credit decision, they are based on a scientifically recognized mathematical‑statistical procedure. Address data are included in the calculation of score values, among other factors.
You may object to this processing of your data at any time by notifying us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for contract‑compliant payment processing.

8 Web Analytics Services
1&1 IONOS WebAnalytics
This website uses the web analytics service of 1&1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.
Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms to read device and browser information), the service collects and stores pseudonymized visitor data, including device information such as IP address and browser details, to evaluate them for statistical analyses of usage behavior on our website and to create pseudonymized usage profiles. Among other things, this enables the analysis of movement patterns (so‑called heatmaps), which show the duration of page visits and interactions with page content (e.g., text input, scrolling, clicks and mouse‑overs). Pseudonymization generally excludes direct personal identifiability. No merging with clear personal data collected by other means takes place.
All processing described above, in particular reading or storing information on the device used, is carried out only if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with future effect by disabling this service in the cookie consent tool provided on the website.
We have concluded a data processing agreement with the provider to ensure the protection of visitor data and to prohibit unauthorized disclosure to third parties.

9 Site Functionalities
Google Translate
This website uses the translation service Google Translate via an API integration provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. To automatically display the translation into your chosen language, your browser connects to Google’s servers. Google uses cookies, which are text files stored on your computer and enable analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to a Google server and stored there; this may also involve transfer to servers of Google LLC in the USA.
All processing described above, in particular setting cookies to read information on the device used, is carried out only if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with future effect by disabling this service in the cookie consent tool provided on the website.
For data transfers to the USA, the provider has joined the EU‑US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
Further information on Google’s privacy practices can be found here: https://business.safety.google/intl/de/privacy/.

10 Rights of the Data Subject
10.1 Applicable data protection law grants you the following rights against the controller regarding the processing of your personal data (the legal basis for each right is indicated):
•     Right of access pursuant to Art. 15 GDPR;
•     Right to rectification pursuant to Art. 16 GDPR;
•     Right to erasure pursuant to Art. 17 GDPR;
•     Right to restriction of processing pursuant to Art. 18 GDPR;
•     Right to notification pursuant to Art. 19 GDPR;
•     Right to data portability pursuant to Art. 20 GDPR;
•     Right to withdraw consent pursuant to Art. 7(3) GDPR;
•     Right to lodge a complaint pursuant to Art. 77 GDPR.
10.2 Right to object
If we process your personal data on the basis of a balancing of interests, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation, with effect for the future. If you exercise your right to object, we will cease processing the personal data concerned. Further processing remains possible if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if processing serves the establishment, exercise or defense of legal claims.
If your personal data are processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; you may exercise this objection as described above. If you exercise your right to object, we will cease processing the personal data for direct marketing purposes.

11 Retention Period for Personal Data

The retention period for personal data is determined by the applicable legal basis, the purpose of processing and — where applicable — any statutory retention periods (e.g., commercial and tax retention obligations).
If personal data are processed on the basis of an explicit consent pursuant to Art. 6(1)(a) GDPR, the data will be stored until you withdraw your consent.
If statutory retention periods apply to data processed for contractual or contract‑related obligations on the basis of Art. 6(1)(b) GDPR, those data will be routinely deleted after the expiry of the retention periods, provided they are no longer required for contract performance or contract initiation and/or we do not have a legitimate interest in further retention.
Personal data processed on the basis of Art. 6(1)(f) GDPR will be retained until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Personal data processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR will be retained until you exercise your right to object under Art. 21(2) GDPR.
Unless otherwise stated in this privacy policy for specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

Copyright notice: This privacy policy was prepared by the specialist lawyers of IT‑Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de).

Version: 18.10.2025, 18:17:41