Privacy notice.

MysteryMarket.de · Robert Breuss
Kaiser-Friedrich-Str. 2a, 40597 Düsseldorf
Datenschutz-Kontakt

When you access the website, technically necessary connection and log data may be processed, including IP address, time, requested resource, status code, referrer and browser or device information. The purposes are delivery, error analysis and system protection. The legal basis is Art. 6(1)(f) GDPR.

The contact form processes enquiry type, name, organisation, email address, optional phone number, subject and message. Data is stored solely to handle the respective enquiry. To protect against automated or abusive submissions, Cloudflare Turnstile is used. This may transmit information including the IP address, browser/device information and interaction data to Cloudflare for abuse detection. In addition, the IP address may be pseudonymously hashed with a server-side secret and the resulting hash stored briefly with the timestamp for rate limiting. Only records from the preceding 24 hours are considered for abuse protection; older records are cleared during subsequent form access or technical maintenance. General enquiries are handled through the contact channels provided on this website. The legal basis is Art. 6(1)(b) or (f) GDPR, depending on the enquiry.

When a reference is checked, the entered verification code is processed to display the status of an audit record. To protect against automated or abusive queries, the IP address may be pseudonymously hashed with a server-side secret and the resulting hash stored briefly with the timestamp for rate limiting. Only records from the preceding 24 hours are considered for abuse protection; older records are cleared during subsequent verification access or technical maintenance. When the optional QR scanner is used, camera images are processed locally in the browser and are not transmitted to MysteryMarket. For personal authorisation records, approved identity and project details, a photo and protected evidence documents may additionally be shown after successful verification. These contents are not provided as a freely indexable profile page. Public results contain only information approved for publication. Confidential client or project data is not disclosed.

The website does not use marketing or audience-analytics cookies. Technically necessary sessions may be used for secure forms. The cookie-setting choice is stored locally in the browser.

Personal data is only transferred to hosting or system service providers and authorised internal systems where required for the relevant purpose. Data is not shared for advertising purposes.

Data is retained only for as long as required for the relevant purpose, legal obligations or the establishment, exercise or defence of claims.

Subject to legal requirements, you have rights including access, rectification, erasure, restriction, data portability and objection. You also have the right to lodge a complaint with a data-protection supervisory authority.
Datenschutz-Kontakt

Forms are transmitted via HTTPS. Credentials and database connections remain server-side and are not delivered to the browser.