1. Controller
KozalakTCG · Muhtalip Kuruoglu
Gemeindestr. 12
44809 Bochum
Deutschland
Telefon: +49 162 2469597
E-Mail: mkuru@kozalaktcg.com
2. General information
We process personal data only where necessary to operate this website securely and reliably, answer enquiries or take steps prior to a contract. Sales are not currently open.
3. Website delivery and server logs
When you access the website, technically necessary access data may be processed. This may include your IP address, date and time, requested page, transferred data volume, referrer, browser, operating system and server status. Processing supports delivery, stability, troubleshooting and protection against attacks. The legal basis is Article 6(1)(f) GDPR. Data is kept only for as long as operational and security purposes require, unless a legal obligation or security investigation requires longer retention.
4. Hosting and recipients
We use hosting, infrastructure and IT service providers to operate and deliver the website. Technical delivery and protection against automated attacks are provided in part through Cloudflare, which may process IP addresses, device data and access data. Service providers process technical data only to provide their services and under applicable data protection requirements. Transfers outside the European Economic Area take place only under recognised legal safeguards, including adequacy decisions or standard contractual clauses.
5. Language, security, basket and favourites
Your language choice is stored in a technically necessary cookie for up to twelve months. Cloudflare may set the technically necessary “__cf_bm” security cookie to identify automated access and protect the website. Basket and favourite selections are kept only in your browser’s local storage. This preview data is not sent to KozalakTCG and can be deleted in your browser settings. The legal basis is Section 25(2)(2) TDDDG and, where personal data is involved, Article 6(1)(f) GDPR.
6. Contact by email
When you contact us by email, we process your details to answer your enquiry. The legal basis is Article 6(1)(b) GDPR for pre-contractual enquiries and otherwise Article 6(1)(f) GDPR. Correspondence is deleted when it is no longer needed, unless statutory retention duties apply.
7. Card images and external links
When the catalogue opens, card images are loaded from image servers operated by Limitless TCG (DigitalOcean Spaces) and Riot Games. Your IP address may therefore be transmitted to the respective provider for technical reasons. The images support a clear catalogue presentation; the legal basis is Article 6(1)(f) GDPR. The site also links to manufacturers and card databases. Their privacy information applies when a link is opened.
8. Analytics and advertising
We currently use no analytics, advertising or profiling services. Web fonts are delivered with the website and are not loaded from Google servers when you visit.
9. Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction, data portability or object to processing. Consent may be withdrawn at any time for the future. Please use the email address above for requests.
10. Right to complain
You may complain to a data protection authority. The competent authority includes the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, poststelle@ldi.nrw.de, www.ldi.nrw.de.