This is a translation. The Romanian version is legally binding.
Privacy policy
Version: August 2026
1. Controller
Krahn K Arno Norbert PFA — legal form: Romanian PFA (Persoană Fizică Autorizată)
EU VAT ID: RO29928150
Tax number / CUI: 7630421120011
Trading name: Team Krahn Market
Aleea Crisan Mircioiu 4, 400497 Cluj-Napoca, Romania
Email: akr@team-krahn.de
Phone: +40 737 307 677
2. Purpose of processing
We process personal data to provide the marketplace market.krahncloud.de: registration and login, listings, cart, orders, payment and payout, customer support, and the operation and security of the platform.
3. Data we process
- Account data (e.g. name, email, profile picture via the login provider)
- Seller data (shop name, descriptions, payout status)
- Order and delivery data (address, phone, order history)
- Payment-related data (via Stripe; we do not store full card details)
- Technical data (IP address, browser/device information, logs)
- Content you upload (e.g. product images)
4. Legal bases
- Art. 6(1)(b) GDPR – performance of a contract / pre-contractual measures
- Art. 6(1)(f) GDPR – legitimate interests (security, abuse prevention, platform operation)
- Art. 6(1)(c) GDPR – legal obligations (e.g. record retention)
- Art. 6(1)(a) GDPR – consent, where we obtain it separately
5. Processors and recipients
To provide the service we use, among others:
- Clerk – authentication and account management
- Stripe – payments, checkout and Connect payouts to sellers
- UploadThing – storage of images/uploads
- Resend – sending transactional emails
- Hosting / database – operation of the application and PostgreSQL
These providers process data on our behalf or as independent controllers (in particular Stripe for payment processing). Details can be found in their privacy policies.
6. Retention period
We store data only as long as necessary for the purposes stated or as required by statutory retention periods. Account data is typically kept until the account is deleted; order data longer where tax or commercial law obligations apply.
7. Your rights
Under the GDPR you have in particular the rights of access, rectification, erasure, restriction of processing, data portability and objection. You may also lodge a complaint with a data protection supervisory authority. Please send requests to akr@team-krahn.de.
8. Cookies / local storage
We use technically necessary cookies or local storage for login, session, cart and your chosen language. Without these functions the marketplace cannot be used properly.
9. Disclosure to sellers
When you place an order, the respective sellers receive the data required for delivery and performance of the contract (e.g. name, delivery address, contact details).
10. Seller data and tax reporting (DAC7)
For sellers we additionally process name or company name, address, contact details, tax identification number, date of birth for private individuals, VAT ID and register entry for businesses, as well as revenue and commissions earned through the platform. The legal basis is compliance with a legal obligation (Art. 6(1)(c) GDPR) under Directive (EU) 2021/514 (DAC7) and its implementation in Romania. We report this information annually to the Romanian tax administration (ANAF), which may pass it on to the tax authorities of other EU member states. We keep it for as long as required by law (under DAC7 five to ten years, depending on the member state). The name, address and contact details of business sellers are also published in the legal notice of their shop; for private sellers only name, city and contact email. Tax ID and date of birth are never published.
11. Reports of listings
If you report a listing, we process your email address and the details of your report in order to review it and inform you of our decision (Art. 6(1)(c) GDPR in conjunction with Art. 16 Digital Services Act). We do not disclose your identity to the seller concerned.
12. Updates
We may amend this policy if the service or the legal situation changes. The current version is always available at /datenschutz.