Privacy policy
Updated: 1 November 2026
1. Controller
The controller for personal data processed on tradingphase.de is Dean Moses Chibani, trading as Trading Phase, Georgstr. 6, 58636 Iserlohn, Germany. For privacy questions, contact contact@tradingphase.de.
2. Hosting and technical access data
Our website is hosted by goneo Internet GmbH, Dresdener Straße 18, 32423 Minden, Germany. Visiting the website involves processing technical data, including your IP address, access time, requested address, transferred data volume, response status, browser and operating system information, and, where transmitted, the referring page. This enables delivery of the website, troubleshooting and protection against misuse. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in operating a secure, reliable website.
Technical logs are retained only as long as needed for operation, troubleshooting or investigating specific security incidents, then deleted or anonymised. See goneo’s privacy information for provider information.
3. Contact form and email
When you contact us, we process your name, email address, selected topic and message to respond to your enquiry. Any details about cards, collections or asking prices are also used to handle your request. The form emails your details to contact@tradingphase.de. It does not create a separate contact database on this website. Hosting and email service providers technically assist with transmission and storage.
Enquiries about a potential purchase, sale or trade are processed under Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f) GDPR, based on our legitimate interest in responding to communications. Required fields are marked; the form cannot be submitted without them. Alternatively, you can email us directly.
We delete enquiries when they have been resolved and the data is no longer needed. Where statutory retention duties apply, or data is needed to establish, exercise or defend legal claims, it is retained to the extent necessary. The legal bases are Article 6(1)(c) or (f) GDPR respectively.
4. Form spam protection
The form uses a security check and a hidden verification field. It also derives a verification value from your IP address using a secret key to limit repeated submissions. The counter does not store the full IP address and expires after ten minutes. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in protecting the form and our inbox from automated misuse.
5. Cookies and embedded content
The website does not embed analytics or advertising services, social media feeds or externally loaded fonts. Images and game logos are served from our own web server. The language is selected through the page address.
For team login, WordPress uses technically necessary cookies to check login functionality, maintain sessions and, where applicable, remember the login language. Their duration depends on the session and selected login options. You can delete or block cookies in your browser, but login may then not work fully. Where device storage or access is strictly necessary for a function you expressly request, Section 25(2)(2) TDDDG applies. Subsequent processing relies on Article 6(1)(f) GDPR for secure website administration.
6. Instagram and external links
Instagram and, where present, marketplaces such as Cardmarket or eBay are provided as links. You leave this website for the relevant provider only when you open a link. The provider’s privacy information then applies, and processing outside the EU may occur. If you message us there, we use the information received to handle your request as described in Section 3. The platform operator separately remains responsible for its own processing.
7. Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Any consent given may be withdrawn at any time for the future. To exercise your rights, contact contact@tradingphase.de.
You may also complain to a data protection supervisory authority, particularly in your place of residence, work or the alleged infringement. The authority for North Rhine-Westphalia is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia. We do not use automated decision-making that produces legal or similarly significant effects.