Legal

Privacy Policy

Last updated: June 2026 · Applies to all WheelMarket users in the EU and worldwide

🛡️ Summary: We collect only what we need to run the marketplace. We never sell your data. You have full rights over your data under GDPR. Questions? wheelmarketcars@gmail.com

1. Who We Are

WheelMarket ("we", "us", "our") is operated by Filip Hronek, Myslibořská 492, Telč, Czech Republic, IČO 24600440 (not a VAT payer), who is the data controller for personal data collected through this platform. WheelMarket is an independent marketplace and is not affiliated with Mattel, Inc.

Contact: wheelmarketcars@gmail.com

2. What Data We Collect

DataWhy we collect itLegal basis (GDPR)
Email addressAccount creation, login, order notificationsContract (Art. 6(1)(b))
Username / display nameIdentify you on the platformContract (Art. 6(1)(b))
Delivery addressOrder fulfillment – shared with sellerContract (Art. 6(1)(b))
Phone numberOptional – for delivery notificationsConsent (Art. 6(1)(a))
Listing photosDisplay your listings to buyersContract (Art. 6(1)(b))
MessagesBuyer-seller communicationContract (Art. 6(1)(b))
Transaction dataOrder history, payouts, dispute resolutionLegal obligation (Art. 6(1)(c))
Connected Stripe account data
(sellers who enable card payments)
Payment amounts, balance and payout status on your connected account — to run the marketplace, resolve disputes and calculate commission. We cannot access your bank account or move your funds.Contract (Art. 6(1)(b))
IP address / deviceSecurity, fraud preventionLegitimate interest (Art. 6(1)(f))

3. How We Use Your Data

We do not use your data for advertising, sell it to third parties, or use it for profiling.

4. Who We Share Data With

All commercial third-party providers are contractually bound to handle your data in accordance with GDPR. Reporting to the tax authority is carried out solely to comply with our legal obligations. We do not sell your personal data to anyone, and we do not use your data for profiling or automated decision-making.

5. Data Retention

6. Your Rights Under GDPR

💡 Two of these you can use right now. In Settings → Security you'll find Download my data (a full copy of everything we hold about you) and Close account (removes your personal details). Records of completed orders stay for 7 years — Czech accounting law requires it and GDPR permits this exception (Art. 17(3)(b)) — but they're kept without your name attached.

📋
Right of Access
Request a copy of all personal data we hold about you.
✏️
Right to Rectification
Correct inaccurate or incomplete data in your account settings.
🗑️
Right to Erasure
Request deletion of your account and personal data ("right to be forgotten").
📦
Right to Portability
Receive your data in a machine-readable format (JSON/CSV).
🚫
Right to Object
Object to processing based on legitimate interest.
⏸️
Right to Restriction
Request restriction of processing in certain circumstances.

To exercise any of these rights, email wheelmarketcars@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority (in the Czech Republic: ÚOOÚ – uoou.cz).

7. Cookies

WheelMarket doesn't set any cookies. What we do use is your browser's local storage, and only for things the site can't work without:

All of it stays in your browser. We use no analytics, no advertising and no tracking of any kind — no Google Analytics, no Facebook Pixel, nothing that would follow you around the web. Clearing your browser data removes all of it.

Two third-party widgets load only when you're choosing a pickup point at checkout: Zásilkovna and Česká pošta. They're needed to show you the map of branches and handle your data under their own privacy policies.

8. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and row-level database security. No system is 100% secure – if you believe your account has been compromised, contact us immediately.

9. Children

WheelMarket is open to users of all ages. Users under 18 must have parental consent to use the service. We do not knowingly collect personal data from children under 13 without verifiable parental consent. If you believe a child under 13 has registered without parental consent, contact us at wheelmarketcars@gmail.com and we will promptly delete the account and associated data.

10. Changes to This Policy

We may update this Privacy Policy. We will notify you by email for material changes. The date at the top of this page reflects the latest update.

Contact

Data protection enquiries: wheelmarketcars@gmail.com