Legal
Privacy notice
Last updated: 22 October 2026
This notice explains which personal data marraket.com processes, why, and what rights you have. We collect as little as possible: the site sets no cookies and uses no advertising or tracking tools.
1. Who is responsible
Cartivo, operating the brand Marraket, [To complete: full postal address], email[To complete: contact email address]. Further details are in the Impressum.
2. Visiting the website
The site is delivered by Cloudflare, Inc. When you visit a page, your browser sends technical data such as your IP address, the page requested, date and time, and browser type. Cloudflare processes this data on our behalf to deliver the site and protect it against attacks. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Cloudflare may process data outside the EU; transfers are covered by the EU–US Data Privacy Framework and standard contractual clauses.
We may count visits with Cloudflare Web Analytics. It sets no cookies, stores nothing on your device and does not create visitor profiles; we only see aggregated figures such as page views.
3. Product images
Some product images are currently loaded from the content delivery network of Shopify. To deliver them, your browser connects to Shopify’s servers, which receive your IP address. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in showing the catalog. We plan to serve all images from our own storage.
4. Partner application form
When you apply, we store the details you enter (name, email address, company, country, website, your situation, interests, budget, timing and message), the time of submission and the country your request came from. We use them to review your application and to contact you about a possible partnership.
Legal basis: steps prior to a contract at your request (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future. Applications are stored with Cloudflare on our behalf and deleted automatically after 24 months, or earlier if you ask. To limit abuse, an anonymised fingerprint of your connection is kept for one hour; your IP address itself is not stored.
5. Email
If you write to us, we use your message and contact details to answer you. Legal basis: Art. 6(1)(b) or (f) GDPR.
6. Your rights
You have the right to:
- access the data we hold about you,
- have incorrect data corrected and data deleted,
- restrict processing and receive your data in a portable format,
- object to processing based on our legitimate interests,
- withdraw consent at any time,
- lodge a complaint with a data protection supervisory authority.
To exercise these rights, write to [To complete: contact email address].
7. Changes
We update this notice when the site changes. The date at the top shows the latest version.