Legal Information

Privacy Policy

Last updated: May 2025

1. Data Controller

Swap2Run UG (haftungsbeschränkt), Wetteraustraße 27, 61169 Dorheim, Germany. For any privacy-related questions, contact us at info@swap2run.de.

2. Data We Collect

We collect the minimum data necessary to operate the marketplace. This includes:

• Email address and name (for account creation and communication)
• Profile information you choose to provide (bio, location, preferences)
• Ticket listing details you create
• Chat messages exchanged between buyers and sellers
• Payment data processed by Stripe — we never store card numbers or banking credentials

3. Legal Basis

Processing is based on the performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in operating a secure, fraud-resistant marketplace (Art. 6(1)(f) GDPR).

4. Data Retention

Account data is retained for as long as your account remains active. Transaction records are kept for 10 years as required by German commercial law. You may request deletion of your account at any time; residual transaction data will be anonymised.

5. Your Rights

Under the GDPR you have the right to access, correct, delete, and export your personal data. You may also object to processing or request that we restrict it. To exercise any of these rights, contact us at info@swap2run.de.

You also have the right to lodge a complaint with a data protection supervisory authority if you believe your rights have been violated.

6. Cookies

We use only technically essential session cookies required to keep you logged in. No tracking, analytics, or advertising cookies are used.

7. Third-Party Services

Stripe — payment processing. Stripe handles all card data under their own Privacy Policy.

Google — optional sign-in via Google OAuth. If you choose to sign in with Google, their Privacy Policy applies.