Legal
Privacy information for sellers
Information pursuant to Art. 13 and 14 GDPR on the processing of your data when you register through MukiBasar for a bazaar run by the respective organizer.
1.Who is the controller?
The controller within the meaning of Art. 4 no. 7 GDPR for the processing of your bazaar-related data (registration, articles, sales, settlement) is the organizer of the bazaar you register for: the respective organizer. You will find the organizer's contact details on the bazaar's detail page in the app.
This is separate from your MukiBasar user account itself (registration, sign-in, profile): for that, MukiBasar (Martin Januschke, Josef-Karl-Str. 3, 92421 Schwandorf, Germany) is the controller. You will find details in the privacy policy.
2.MukiBasar as a processor
The organizer uses the MukiBasar software platform to organize and run their bazaar. In doing so, MukiBasar processes your bazaar-related data exclusively on behalf of and on the instructions of the organizer as a processor pursuant to Art. 28 GDPR, on the basis of a data processing agreement. The data is processed in data centres in the European Union (Frankfurt am Main).
3.Which data is processed?
- Profile data: name, address, email address, phone number, seller number and, where applicable, your profile picture
- Registration data: registration status (requested, confirmed, waiting list, cancelled) including its history, options booked (e.g. willingness to help, fast lane)
- Article data: the articles you list (name, price, size, category) and labels
- Sales and settlement data: articles sold, revenue, fees and payout amounts, hand-in and collection status
4.Purposes and legal basis
The processing serves the organization, running and settlement of the bazaar you register for — in particular the administration of your registration, the allocation of your articles and sales, goods receipt and return, and the payout of your sales proceeds. The legal basis is Art. 6 (1) (b) GDPR (performance of the participation relationship with the organizer). As part of your registration you also receive transactional emails about your participation (e.g. confirmations and reminders).
5.Recipients and visibility
The administrators of the organizing association can view your profile data (name, address, email address, phone number) as well as your registration, article and sales data, insofar as this is necessary to run the bazaar. Till staff see the article data during a sale. No transfer to other third parties takes place; technical service providers (hosting, email delivery, error diagnostics) are engaged as sub-processors pursuant to Annex 3 of the data processing agreement.
6.Retention period
Your bazaar-related data is stored for as long as this is necessary to run and settle the bazaar; statutory retention periods of the organizer may apply to settlement data. The internal email delivery log is deleted after 90 days. If you delete your MukiBasar account, your profile and your articles are deleted.
7.Your rights
Vis-à-vis the organizer as controller you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21) as well as the right to lodge a complaint with a data protection supervisory authority. Please address your requests to the organizer; MukiBasar forwards requests it receives to the organizer and supports them in answering. You can also exercise many rights directly in the app (edit profile, delete account).