Effective 28 August 2026
Privacy Policy
This policy explains how personal data is processed when you visit LinkBid or use its website-placement marketplace.
1. Controller
Fuel Wood Spatar GmbHGautinger Straße 3, 82131 Stockdorf, Germany
Email: support@linkbid.net
Telephone: +49 172 390 27 57
Further company information is available in the legal notice. Legal Notice
2. Data processed when you visit
Our web server may automatically receive your IP address, request date and time, requested URL, referrer, browser and operating-system information, and response status. We process these data to deliver the site, maintain technical security, diagnose faults, and prevent misuse.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interests are reliable and secure operation of LinkBid. Server logs are normally deleted after 14 days unless a security event requires longer preservation.
3. Account and marketplace data
When you create an account, we process your name, email address, password hash where applicable, support telephone number, marketplace role, language, verification and account status, accepted terms version, and registration date. Your telephone number is used for account support and is not published in marketplace listings.
If you continue with Google, Google provides an account identifier, verified email address, name, and optional profile image. LinkBid stores the linked sign-in method and encrypted provider tokens required for authentication. We do not request access to Google Drive, Gmail, contacts, or other unrelated Google services.
Purposes and legal bases: account creation, authentication, marketplace operation, contract performance, fraud prevention, and support under Article 6(1)(b) GDPR and, for security and abuse prevention, Article 6(1)(f) GDPR.
Core account data is retained while the account is active. Following closure, data is deleted or anonymized when no longer needed, subject to claims, fraud-prevention needs, and statutory retention obligations.
4. Billing, deposits, and withdrawals
For business and payment functions, we may process a person or company name, billing address, tax information, payment-provider references, invoice data, ledger entries, deposits, refunds, chargebacks, and withdrawals. LinkBid is designed to record monetary movements in an append-only double-entry ledger.
Legal bases: Article 6(1)(b) GDPR for performing payment and marketplace contracts and Article 6(1)(c) GDPR for tax, accounting, anti-fraud, and commercial-law obligations. Records subject to German statutory retention duties are kept for the applicable period, generally six, eight, or ten years depending on the record.
Stripe and PayPal are planned payment options but payments are currently disabled. Before either provider is activated, this policy and the consent interface will be updated with the applicable provider, processing role, and transfer safeguards.
5. Communications
If you contact us, we process your contact details and message to answer your request. Transactional messages may be sent through the configured email service when account functions are enabled.
Legal bases: Article 6(1)(b) GDPR for contract-related communication and Article 6(1)(f) GDPR for other support inquiries. Correspondence is retained only as long as required for the request and any related legal obligations.
6. Cookies and local storage
LinkBid uses necessary first-party cookies for privacy choices, language selection, authentication sessions, and temporary OAuth security state. We do not currently deploy analytics or advertising trackers.
| Name | Purpose | Duration | Category |
|---|---|---|---|
| linkbid_consent | Stores your cookie choices, language, consent identifier, and consent timestamps. | 182 days | Necessary |
| linkbid_locale | Remembers the selected account-language preference. | 1 year | Necessary |
| linkbid.session_token (or secure-prefixed equivalent) | Maintains an authenticated account session and supports logout and revocation. | Up to 7 days | Necessary |
| Temporary LinkBid OAuth cookies | Protect the Google sign-in redirect using state, PKCE, and callback correlation. | Short-lived | Necessary |
The legal basis for necessary storage is Section 25(2) no. 2 TDDDG and Article 6(1)(f) GDPR. Optional technologies will be activated only after consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR.
7. Recipients and international transfers
Personal data may be accessible to authorized employees and contractors and to processors needed for hosting, database operation, email delivery, customer support, Google authentication, and, once enabled, payment processing. Providers receive only the data required for their task and are contractually bound where required by Article 28 GDPR.
The current application and database are hosted in Germany. If a provider processes data outside the European Economic Area, we use an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses and assess supplementary protections where required.
8. Security
We use measures appropriate to the risk, including encrypted HTTPS transport, hashed passwords, access restrictions, environment-separated secrets, database constraints, and auditable financial records. No internet service can guarantee absolute security.
9. Your rights
Subject to the statutory conditions, you may request access, rectification, erasure, restriction, data portability, or object to processing based on legitimate interests. You may withdraw consent at any time without affecting processing carried out before withdrawal.
Send requests to support@linkbid.net. We may need to verify your identity. You also have the right to complain to a data protection supervisory authority, in particular the authority responsible for Bavaria:
Bavarian State Office for Data Protection Supervision (BayLDA)
10. Children
LinkBid is a business marketplace and is not directed to children. Users must be at least 18 years old or otherwise legally able to enter the relevant contracts.
11. Changes to this policy
We update this policy when the service, providers, or legal requirements change. Material changes will be communicated through the service where appropriate. The effective date at the top identifies the current version.