Privacy Policy
The protection of your personal data is important to us. Black Grading Service GmbH, Industriestraße 62, 67063 Ludwigshafen am Rhein, Germany, processes personal data exclusively in accordance with applicable data-protection legislation, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and, where applicable, the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG). Personal data means any information relating to an identified or identifiable natural person. We process such data only where necessary to provide and securely operate our websites, respond to enquiries, create and manage customer accounts, process orders, contracts, payments, submissions and grading or authentication services, communicate with customers, comply with legal obligations, pursue legitimate interests, or where you have provided your consent.
Depending on the purpose concerned, processing is carried out in particular on the basis of Article 6(1)(a) GDPR where you have given consent, Article 6(1)(b) GDPR where processing is necessary for the performance of a contract or for steps taken prior to entering into a contract, Article 6(1)(c) GDPR where processing is necessary for compliance with a legal obligation, and Article 6(1)(f) GDPR where processing is necessary for our legitimate interests, including the secure, stable and economically efficient operation of our services, prevention of fraud and abuse, and improvement of our services. Consent may be withdrawn at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
When you visit our websites, technically necessary information may be processed, including your IP address, date and time of access, pages or files accessed, referrer URL, browser type and version, operating system, device information and technical log or security information. Such information may be processed to deliver the website, maintain technical security, identify and prevent attacks and abuse, and diagnose technical errors.
Where cookies or comparable technologies are used to store information on your device or access information already stored on your device and consent is legally required, such technologies will generally be used only after you have provided your consent in accordance with Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR. Where storage or access is strictly necessary to provide a digital service expressly requested by you, it may be carried out without prior consent where permitted by law. You may change or withdraw consent at any time through the privacy or cookie settings provided on our website.
When you contact us, create a customer account, submit an order or item, or use our grading, verification, support or other services, we may process information including your name, address, email address, telephone number, customer and account information, order and transaction information, payment information, information relating to products or collectible cards submitted to us, communications with us, and other information necessary to provide the relevant service. We process only information that is required for the respective purpose.
Where necessary, personal data may be disclosed to carefully selected service providers and processors supporting us in areas such as hosting, IT infrastructure, email communications, payment processing, shipping, customer service, security, technical maintenance and other operational services. Personal data is disclosed only where an appropriate legal basis exists. Where a service provider processes personal data on our behalf, such processing is generally governed by a data processing agreement in accordance with Article 28 GDPR.
Personal data is transferred to countries outside the European Union or European Economic Area only in compliance with the requirements of Articles 44 et seq. GDPR. Where the European Commission has adopted an adequacy decision for the relevant country, transfers may be based on that decision. Where necessary, appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or another legally permitted transfer mechanism will be used.
We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as statutory retention obligations apply. Once the relevant purpose no longer applies and statutory retention periods have expired, the data will generally be deleted or, where immediate deletion is not legally permissible, restricted from further processing for unrelated purposes.
Taking into account the state of the art, implementation costs and the nature, scope, context and purposes of processing, we implement appropriate technical and organisational measures in accordance with Article 32 GDPR to protect personal data against loss, alteration, unauthorised access, disclosure and other unlawful processing. Where technically supported, our websites use encrypted connections, in particular TLS/SSL encryption.
Subject to the applicable statutory requirements, you have the right to access your personal data under Article 15 GDPR, rectification under Article 16 GDPR, erasure under Article 17 GDPR, restriction of processing under Article 18 GDPR, data portability under Article 20 GDPR, and object to certain processing under Article 21 GDPR. Where processing is based on consent, you may withdraw your consent at any time with future effect in accordance with Article 7(3) GDPR. You also have the right under Article 77 GDPR to lodge a complaint with a competent data-protection supervisory authority.
To exercise your data-protection rights or if you have questions regarding the processing of your personal data, you may contact us at:
Black Grading Service GmbH
Industriestraße 62
67063 Ludwigshafen am Rhein
Germany
Email: service@blackgrading.com
Phone: +49 (0) 621 921 034 60
We may update this Privacy Policy where our services, technologies used by us, or applicable legal and regulatory requirements change. The current version published on our websites shall apply.