Privacy Policy
Data controller
The controller under the General Data Protection Regulation is Wordspace Martin Sotirov e.K., Tannenweg 13, 76149 Karlsruhe, Email: [email protected].
Hosting
This website runs on servers of a hosting provider in Germany. Edge caching, media storage (Cloudflare R2) and form protection (Cloudflare Turnstile) are provided by Cloudflare; the raw data of your visits stays on our servers in Germany.
Sign-in with Google
When you sign in with Google, we receive your name, your e-mail address and the information whether that address is verified with Google, plus a unique identifier of your Google account. From that we store your name, your e-mail address and the Google account identifier in your Everbride account and link them to it. We do not import your profile picture and we do not store Google access or refresh tokens.
The legal basis for sign-in and account creation is Art. 6(1)(b) GDPR: signing in serves the performance of the contract to use Everbride with you.
The sign-in process itself is run by Google: for the window in which you select and confirm your Google account, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is a separate controller. Everbride only receives the details listed above once you confirm.
Google may transfer personal data to the Google LLC in the United States as part of the sign-in process; for such transfers Google relies on the European Commission’s standard contractual clauses. We have no influence on that transfer by Google.
We delete the link to your Google account together with your account, at the latest when your account is fully erased under our deletion commitment.
Sign-in with Facebook
When you sign in with Facebook, we receive your name, your e-mail address (only if one is stored with Facebook and you share it) and a user identifier that Facebook issues specifically for Everbride. We neither use nor store any further profile details Facebook may send along (such as a link to your profile picture). We store your name, your e-mail address and the Facebook user identifier in your Everbride account and link them to it. If Facebook does not share an e-mail address, we create your account with an internal substitute address derived from the Facebook user identifier, to which no e-mail is ever delivered. We do not store Facebook access tokens.
Facebook gives us no proof that the e-mail address belongs to you. That is why you can open a new account with Facebook but cannot link an existing Everbride account to Facebook.
The legal basis for sign-in and account creation is Art. 6(1)(b) GDPR: signing in serves the performance of the contract to use Everbride with you.
For the sign-in process at Facebook – the window in which you log in to Facebook and confirm the sharing – Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, is a separate controller. Everbride only receives the details listed above once you confirm.
Meta may transfer personal data to Meta Platforms, Inc. in the United States as part of the sign-in process; for such transfers Meta relies on the EU-U.S. Data Privacy Framework and the European Commission’s standard contractual clauses. We have no influence on that transfer by Meta.
The stored details are kept for as long as your account exists. If you delete your account (under “Account” in the seller area or via /konto-loeschen), we also delete the link to Facebook. You can also remove Everbride in your Facebook settings under “Apps and websites” and request the deletion of your data: if your Everbride account depends on the Facebook sign-in alone, we then delete your entire account under our deletion commitment; if you have another way to sign in (password or Google), we remove the link to Facebook and your account remains. Facebook shows you a confirmation code and the link to a page where you can follow the status of your request.
Contact form and messages
We process the details from the contact form and your messages solely to enable and to answer contact with sellers.
Availability reminder for sellers
If you list dresses with us, we send you an email at most once a month asking whether your dresses are still available. It shows the number of views, enquiries and wishlist entries for each dress – numbers only, no information about buyers – and contains no advertising. For this we process your name, your email address and the data of your listings. The legal basis is our legitimate interest in up-to-date listings (Art. 6(1)(f) GDPR). You can turn the reminder off and back on at any time with the link in every reminder or in your account under “Account”. We send you the notices about the end of your listings' term regardless.
Newsletter (Mailjet)
We only send the newsletter with your consent, using double opt-in: after signing up you receive an e-mail with a confirmation link, and only then are you added. To send it, we process your e-mail address via the provider Mailjet. As proof of your consent we store when and where you gave and confirmed it and which text you confirmed. You can unsubscribe at any time via the link in every newsletter e-mail.
Cookies and Turnstile
This site uses strictly necessary session cookies and Cloudflare Turnstile to protect the forms from automated access.
We store your choice in the cookie banner in the strictly necessary cookie “cc_cookie” for 6 months (legal basis: Section 25(2) no. 2 TDDDG, Art. 6(1)(c) GDPR). The banner is hosted on our own servers and loads no third-party content.
Web analytics with Google Analytics
If you consent to the “Analytics” category in the cookie banner, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It helps us understand how our site is used – for example which pages are visited, for how long, with which type of device and browser and from which region – so that we can improve Everbride. We only load Google’s script after you have consented; before that, the site makes no connection to Google. Advertising features, Google Signals and ad personalisation are switched off. According to Google, Google Analytics 4 does not store IP addresses. All pages of our website are measured, including sign-in and creating a listing; excluded are pages whose address contains a personal identifier or an access code (such as deletion and confirmation links from e-mails), and your account area. For every measured page we transmit the address without parameters – except the page number, the condition filter and campaign tags (utm_…); parts of the address that look like an e-mail address, a phone number or an access code (for example in search terms) are replaced by a placeholder first; the same applies to the page title. On seller profile pages we transmit a generic title instead of the page title with the name. Of the previously visited page we only transmit the domain.
The legal basis is your consent under Art. 6(1)(a) GDPR; storing cookies on your device and reading them is based on your consent under Section 25(1) TDDDG.
Google Analytics sets the cookies “_ga” and “_ga_<identifier>”. They contain a randomly generated identifier that recognises your browser on later visits and are stored for 2 years; the period restarts with every visit.
Google may transfer the data to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision of the European Commission (Art. 45 GDPR) exists.
You can withdraw your consent at any time with effect for the future: open the settings via the “Cookie settings” link in the footer of our pages and switch “Analytics” off, or choose “Reject all”. We then no longer load Google Analytics and delete the Google Analytics cookies in your browser.
Your rights
You have the right to information, rectification, erasure, restriction of processing, data portability and objection to the processing of your data.