Privacy Policy

2. Purposes and Legal Basis for Processing

We process your personal data under the following lawful bases and for the following specific purposes:

• Execution of Contract (Art. 6.1.b GDPR): Managing user registration, marketplace transactions, order tracking, order delivery, escrow service (Trustee), and dispute resolution.
• Legal Obligation (Art. 6.1.c GDPR): Compliance with tax, accounting, and anti-fraud/anti-money laundering regulations.
• Consent (Art. 6.1.a GDPR): Optional subscription to platform updates or newsletters (always with an explicit, unticked checkbox).

3. Data Recipients and Third-Party Sharing

To fulfill your purchases and shipments, your delivery information (recipient name, shipping address, and contact phone number) is transmitted strictly to the corresponding seller solely for dispatch and courier tracking purposes.

🔒 No Commercial Resale: We DO NOT sell, rent, or transfer your personal data to advertising brokers or external marketing agencies.

4. International Data Transfers

Our infrastructure relies on reputable cloud service providers committed to EU data protection standards:

• Supabase Inc. (Base de datos y autenticación cifrada, servidores ubicados en la Unión Europea / Data Privacy Framework).
• Vercel Inc. (Alojamiento y distribución de aplicaciones web con cláusulas contractuales tipo homologadas).
• Stripe / PayPal: (Proveedores de servicios de pago certificados bajo el estándar PCI-DSS Nivel 1).

International Transfers for Order Fulfillment (Art. 49.1.b GDPR): When a buyer orders items from a seller located outside the European Economic Area (such as in Peru, Mexico, Chile, Colombia, or the United States), recipient delivery data (name, shipping address, and contact phone number) is communicated to that seller solely to generate the shipping label and tracking. In accordance with Article 49(1)(b) of the GDPR, this cross-border transfer is legally authorized as strictly necessary for the performance of the marketplace contract requested by the user.

5. Age Restrictions and Protection of Minors

In accordance with Article 7 of the Spanish LOPDGDD and applicable contract law, EuropeTCG is strictly intended for individuals of legal age (18 years or older) capable of entering into binding marketplace contracts. We do not knowingly collect or process data from minors under 14 years of age without certified parental authorization. Any account found to belong to an unauthorized minor will be promptly terminated.

6. Data Retention Period

Personal information is retained while your user account is active. If you request account closure, personal identifiers will be securely erased, except where tax and commercial laws (such as General Tax Law in Spain) mandate preserving billing records and transactional histories for a statutory period of 5 years.

7. Your Rights and Right to Lodge a Complaint

You have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data at any time by emailing us at:

[email protected]