Privacy Policy (Datenschutzerklärung)

Notice: The German statutory version is legally binding.

1. Responsible Body (Data Controller)

CampusMarkt Initiative Braunschweig
Universitätsplatz 2, 38106 Braunschweig
E-Mail: datenschutz@campusmarkt.inovv.co

2. Processed Data and Legal Bases

We process personal data only to the extent necessary to provide a functioning marketplace platform and our services (Art. 6 (1) lit. b GDPR for marketplace interactions; Art. 6 (1) lit. f GDPR for fraud prevention, safety, and moderation).

3. Pseudonymized University Verification (AD-008)

CampusMarkt values data minimization. When verifying your status at TU Braunschweig, your institutional email is used strictly to send a one-time confirmation token. Immediately upon verification, the plaintext email is permanently discarded. Only a cryptographically salted HMAC-SHA-256 hash is retained to prevent duplicate badge claims, valid for twelve calendar months.

4. Storage Duration and Deletion

User account data, listings, and messages are deleted when you delete your account or when statutory retention requirements expire. Moderation audit logs are retained without private identifiers for platform security compliance.

5. Your Rights as a Data Subject

You have the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). You also have the right to lodge a complaint with a supervisory authority (Landesbeauftragte für den Datenschutz Niedersachsen).