1. Controller / Data Controller

The entity responsible for processing your personal data (the "Controller") within the meaning of the EU General Data Protection Regulation (GDPR) and German data protection law is:

Company: gcodecloud GmbH

Address: Wilmersdorfer Straße 122–123, 10627 Berlin, Germany

Phone: +49 152 09421215

Email: info@gcodecloud.de

Website: https://3talk.de

2. Data Protection Officer

If you have any questions or concerns about data protection, you may contact our designated Data Protection Officer at:

Email: datenschutz@gcodecloud.de

Postal address: Data Protection Officer, gcodecloud GmbH, Wilmersdorfer Straße 122–123, 10627 Berlin, Germany

You may contact the Data Protection Officer at any time directly and confidentially.

3. What Personal Data We Collect

3.1 Data Provided Directly by You

When you use our platform, you may provide us with the following personal data:

• Name and contact details (first name, last name, email address, telephone number)
• Billing and delivery address
• Payment information (processed securely via third-party payment providers)
• Account login credentials (username, hashed password)
• Profile information and preferences
• Communications you send us (e.g. via contact forms, emails, or live chat)
• Seller registration data (business name, VAT number, bank details, identity verification)
• Product reviews, ratings, and user-generated content

3.2 Data Collected Automatically

When you visit our website, the following data is collected automatically by our servers or third-party tools:

• IP address (anonymised where technically feasible)
• Browser type and version
• Operating system
• Referral URL
• Date, time, and duration of your visit
• Pages and products viewed
• Clickstream data
• Cookie identifiers (see Section 9 for details)

3.3 Data from Third Parties

We may receive personal data from third parties in limited circumstances, such as:

• Payment service providers (transaction confirmation, fraud signals)
• Logistics partners (shipment tracking and delivery confirmation)
• Social login providers, if you choose to sign in via a social account

4. Legal Basis for Processing (Art. 6 GDPR)

Every processing activity we perform must rest on at least one legal basis under Article 6 GDPR. The legal bases we rely on are:

Performance of a contract (Art. 6(1)(b) GDPR): Processing your order, creating and managing your account, processing payments, and handling returns/refunds.

Legal obligation (Art. 6(1)(c) GDPR): Retaining tax-relevant records as required by German commercial and tax law (§ 147 AO, § 257 HGB).

Legitimate interests (Art. 6(1)(f) GDPR): Fraud prevention, platform security, improving our services, and direct marketing to existing customers (subject to your right to object).

Consent (Art. 6(1)(a) GDPR): Marketing emails and newsletters (where you have opted in), non-essential cookies, and analytics. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

5. Purposes of Processing

We process your personal data for the following purposes:

5.1 Providing Our Marketplace Service

• Creating and managing user accounts
• Processing purchases, payments, and refunds
• Facilitating communication between buyers and sellers
• Delivering orders and providing tracking information
• Handling customer service requests

5.2 Platform Security and Fraud Prevention

• Detecting and preventing fraudulent transactions
• Verifying seller identities (KYC obligations)
• Monitoring for abuse, spam, and policy violations
• Maintaining the integrity of user reviews and ratings

5.3 Legal Compliance

• Meeting tax reporting and record-retention obligations under German and EU law
• Responding to lawful requests from courts or regulatory authorities
• Enforcing our Terms and Conditions

5.4 Marketing and Communications (Consent-Based)

• Sending newsletters and promotional offers where you have opted in
• Personalising product recommendations
• Re-engaging lapsed customers via email (subject to your right to object)

5.5 Analytics and Service Improvement

• Understanding how users interact with the platform
• Measuring the effectiveness of marketing campaigns
• Improving user experience and platform performance

6. Who We Share Your Data With

We do not sell your personal data. We share it only where necessary, with the following categories of recipients:

6.1 Sellers on Our Platform

When you place an order, we share your delivery address and name with the relevant seller to fulfil your order. Sellers are themselves data controllers for the data they receive and are subject to their own obligations under GDPR.

6.2 Service Providers (Data Processors)

We engage third-party service providers who process data on our behalf under written data processing agreements (Art. 28 GDPR). These include:

• Payment processors (e.g. Stripe, PayPal, or similar) — payment data
• Logistics and shipping partners — delivery address and order details
• Cloud hosting and infrastructure providers — server-side data hosting
• Email and notification service providers — transactional and marketing emails
• Customer support software providers — support ticket content
• Analytics and performance monitoring tools — usage data (pseudonymised where possible)

6.3 Legal and Regulatory Authorities

We may disclose personal data to courts, police, or regulatory authorities where we are legally required to do so, or to protect our legal rights and those of third parties.

6.4 Business Transfers

If gcodecloud GmbH is involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

7. International Data Transfers

Our primary data hosting is within the European Economic Area (EEA). Where service providers are located outside the EEA (for example, in the United States), we ensure an adequate level of protection through one or more of the following mechanisms:

• European Commission adequacy decisions (Art. 45 GDPR)
• Standard Contractual Clauses (SCCs) approved by the European Commission (Art. 46(2)(c) GDPR)
• Binding Corporate Rules (Art. 47 GDPR) where applicable

You may request a copy of the relevant safeguards by contacting us at info@gcodecloud.de.

8. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes described in this policy or as required by law. Key retention periods are:

Account data: Retained for the duration of your account and for 3 years thereafter (limitation periods for contractual claims under § 195 BGB).

Transaction and invoicing records: 10 years from the end of the financial year, as required by § 147 AO (German Fiscal Code) and § 257 HGB (German Commercial Code).

Marketing consent records: 3 years from the date of consent or last interaction, to demonstrate compliance.

Server log files: 7 days for standard access logs; extended retention only in case of a confirmed security incident.

Support communications: 3 years from closure of the ticket.

9. Cookies and Similar Technologies

We use cookies and similar tracking technologies on 3talk.de. A cookie is a small text file placed on your device that helps us recognise you and personalise your experience.

9.1 Types of Cookies We Use

Strictly Necessary Cookies

These are essential for the platform to function and cannot be switched off. They include cookies for session management, shopping cart functionality, security tokens, and fraud prevention. No consent is required for these cookies.

Functional Cookies

These remember your preferences (e.g. language, currency, saved cart items). They are set based on your consent or our legitimate interest in providing a personalised experience.

Analytics Cookies

These help us understand how visitors interact with our site (e.g. pages visited, time spent, error messages). We use tools such as Google Analytics in anonymised/IP-shortened form. These require your consent.

Marketing and Tracking Cookies

These are used to deliver relevant advertisements and track the effectiveness of marketing campaigns. They require your explicit consent and can be managed via our cookie preference centre.

9.2 Managing Cookies

When you first visit 3talk.de, you will be presented with a cookie consent banner. You can:

• Accept all cookies
• Reject non-essential cookies
• Customise your preferences by category

You can update your preferences at any time via the cookie settings link in the website footer. You may also manage cookies through your browser settings; please note that disabling certain cookies may affect the functionality of our platform.

10. Your Rights Under GDPR

Under the GDPR, you have the following rights with respect to your personal data:

Right of access (Art. 15 GDPR): Request a copy of the personal data we hold about you.

Right to rectification (Art. 16 GDPR): Ask us to correct inaccurate or incomplete data.

Right to erasure / 'right to be forgotten' (Art. 17 GDPR): Request deletion of your data where it is no longer necessary for its original purpose, or where you have withdrawn consent, subject to legal retention obligations.

Right to restriction of processing (Art. 18 GDPR): Ask us to pause processing of your data in certain circumstances.

Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format and transmit it to another controller, where technically feasible.

Right to object (Art. 21 GDPR): Object to processing based on legitimate interests or for direct marketing purposes. You have an absolute right to object to direct marketing at any time.

Right to withdraw consent (Art. 7(3) GDPR): Withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal.

Right not to be subject to automated decision-making (Art. 22 GDPR): Where we use automated decision-making (including profiling) that produces significant effects, you have the right to request human review.

To exercise any of these rights, please contact us at: info@gcodecloud.de. We will respond within one calendar month as required by Art. 12 GDPR. No fee applies unless your request is manifestly unfounded or excessive.

11. Right to Lodge a Complaint

If you believe we have not processed your personal data in accordance with the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for gcodecloud GmbH in Berlin is:

Authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI)

Address: Friedrichstraße 219, 10969 Berlin, Germany

Phone: +49 30 13889-0

Email: mailbox@datenschutz-berlin.de

Website: https://www.datenschutz-berlin.de

You may also lodge a complaint with the supervisory authority of the EU member state where you reside, work, or where the alleged infringement took place.

12. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• TLS/SSL encryption for all data transmitted between your browser and our servers
• Encryption of sensitive data at rest (passwords stored as salted hashes)
• Access controls and role-based permissions for our staff
• Regular security assessments and penetration testing
• Incident response procedures aligned with Art. 33–34 GDPR breach notification requirements

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, inform affected individuals without undue delay.

13. Children's Privacy

3talk.de is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child under 16, please contact us immediately at info@gcodecloud.de and we will delete it promptly.

In Germany, consent for information society services can be given by persons aged 16 and over. For users under 16, parental or guardian consent is required in accordance with Art. 8 GDPR.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Post the revised policy on our website at https://3talk.de/page/privacy-policy
• Notify registered users by email or prominent in-platform notice at least 14 days before the changes take effect (for material changes)

We encourage you to review this policy periodically. Continued use of our platform after changes take effect constitutes acceptance of the updated policy, to the extent permitted by law.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact us:

By email: info@gcodecloud.de

By post: gcodecloud GmbH, Wilmersdorfer Straße 122–123, 10627 Berlin, Germany

By phone: +49 152 09421215

For data protection-specific enquiries (subject access requests, deletion requests, etc.), please use the subject line "Data Protection Request" to ensure your email reaches the correct team.

This Privacy Policy was prepared in accordance with Regulation (EU) 2016/679 (GDPR), the German Federal Data Protection Act (BDSG), and applicable EU guidance from the European Data Protection Board (EDPB).

© 2026 gcodecloud GmbH | 3talk.de