PRIVACY POLICY
Website Privacy Policy
Who are we and what is the scope of this Privacy Policy?
As the data controller, SellerX Germany GmbH ("we", "us", "our" or "SellerX") processes certain personal data in order to enable you to establish a business or employment relationship with us or to browse our websites. This Privacy Policy describes our personal data processing operations and provides you information of your rights related to your personal data.
This Privacy Policy applies to all websites operated under our domain (sellerx.com), including business acquisitions, recruitment, and use of the websites. Kindly observe that in some events our websites may include links to external third-party websites which are neither operated by us nor covered by this Privacy Policy. To learn more about the data processing operations carried out by these third parties we advise you to review their privacy policies.
What personal data do we process, for what purposes and based on which lawful bases?
1. Acquisition of your business
To carry out our business operations, that is to acquire new brands to our portfolio, we need to process certain personal data of the seller. In the event you are selling or planning to sell your business to us and get in touch with us through our website we process your contact information which includes:
- first and last name;
- email address;
- phone number.
The lawful basis for processing such personal data is contract as per Art. 6(1)(b) GDPR as processing is necessary to take steps, at your request, prior to entering into a purchase agreement and for the performance of the same.
It can also happen that we find your business interesting and decide to get in touch with you. To be able to do so, we acquire the above-listed personal data and may acquire further publicly available and professionally relevant personal data (e.g., professional social media profile) from third party services instead of receiving this directly from you. In the event we contact you through professional third-party sites (e.g., LinkedIn) please see the privacy policy of the relevant site to learn about their data processing operations. If we contact you via email, we will link our applicable privacy policy in the first communication and provide an unsubscribe link you can use to opt-out from further communications from our business team. We may also contact you by calling to your business telephone number. Where the first contact is carried out on our initiative, the lawful basis for processing personal data in this context is our legitimate interests to contact you to express our interest in buying your business as well as your legitimate interests of becoming aware of our proposal (Art. 6(1)(f) GDPR).
If both parties decide to move forward with the process after the initial communications, further personal data related to the due diligence process may be required (e.g., lists of shareholders, directors and representatives). In certain cases, this may include background checks on the sellers in accordance with the applicable know-your-customer (KYC) regulations. Should such data constitute data relating to criminal convictions and offences such data is only processed to the extent required by and in accordance with the applicable local laws. Where such personal data is required to be processed to comply with applicable laws the lawful basis is legal obligation (Art. 6(1)(c) GDPR). The lawful basis for processing other personal data required to enter into a purchase contract is contract in accordance with Art. 6(1)(b) GDPR.
2. Recruitment
SellerX is always looking for new talents to join the team. If you apply for a job at SellerX we must process your personal data, including:
- first and last name;
- email address;
- phone number;
- resume (CV);
- information if you are legally authorized to work in the country for which you are applying.
Additionally, if we offer you a position and you decide to accept this, in order to prepare the contract, we need a copy of your ID (e.g., passport) as well as a copy of your work permit (if relevant). The lawful basis for processing such personal data is contract as per Art. 6(1)(b) GDPR as processing is necessary to take steps at your request prior to entering into an employment agreement and for the performance of the same.
Furthermore, you may voluntarily submit further personal data, including but not limited to:
- cover letter;
- picture;
- professional social media pages (e.g., LinkedIn profile or Instagram portfolio).
Kindly observe that although you are not required to provide this information, we may not be able to process your application or assess it properly if you decide not to share this information (e.g., cover letter). At later stages of the recruitment process, we also receive personal data from you in the interviews that we hold. Furthermore, we may ask for contact details of your references whom you should inform in advance but who will also be informed by us upon our first contact with them. The reference contact details are only used for the purposes collected and not further stored. The lawful basis for processing such voluntarily submitted personal data is your legitimate interests to submit relevant information to us in order to participate in the recruitment process and our legitimate interests to process such information to carry out the same (Art. 6(1)(f) GDPR).
Our recruiters may also look for candidates on professional online sites e.g., LinkedIn, Glassdoor or GitHub and get in touch with you directly on the platform or via the email address you have provided therein. If the communications are carried out on the applicable site, please see the privacy policy of the relevant site to learn about their data processing operations. If we contact you via the email obtained from the website, we will link our applicable privacy policy in the first communication and provide a method to unsubscribe from further communications from our recruitment team. The lawful basis for processing such recruitment related data is our legitimate interest to contact you regarding positions we consider would suit you and your legitimate interests to be contacted regarding such positions (Art. 6(1)(f) GDPR).
SellerX operates a referral program that enables SellerX employees to refer their friends and other contacts for open positions. In general, you should be informed by a SellerX employee prior to your details being submitted to the talent team but we also provide information to you about how we received your data. The lawful basis for processing such recruitment related data in the context of our referral program is our legitimate interest to contact you regarding positions we consider you would fit and your legitimate interests to be contacted regarding such positions (Art. 6(1)(f) GDPR).
When you apply for a job at SellerX or otherwise enter the recruitment process, we retain your profile in our talent pool for 180 days in order to match you with future openings relying on our legitimate interests (Art. 6(1)(f) GDPR) to contact interesting candidates and your legitimate interests to be contacted. We may further retain your data for additional 180 days provided that you have consented to this. The lawful basis for such further retention is your consent as per Art. 6(1)(a) GDPR.
3. Other purposes
We may also use the categories of personal data mentioned above as well as data, that can be defined as personal data, collected by our essential cookies or otherwise for the following purposes:
- maintenance of security of our website and services, including preventing data breaches;
- research and development of our website and services, provided that the data is in in summarized, pseudonymized or anonymized form;
- compliance with laws or court orders (e.g., to carry out applicable anti-money laundering or know your customer checks);
- establishment, exercise or defense of legal claims.
For these operations we rely on our legitimate interests to detect and prevent fraud, maintain the security of our services and improve the same as well as to pursue or defend legal claims in accordance with Art. 6(1)(f) GDPR). Where we need to process your personal data in order to comply with legal obligations e.g., applicable laws and regulations or court orders the applicable lawful basis for processing is legal obligation as per Art. 6(1)(c) GDPR.
If you wish to learn more about which cookies and similar technologies we use kindly see our Cookie Policy.
From where do we get your personal data and with whom do we share it?
In general, we process personal data that is directly provided by you to us. Our business operations, also require us to engage service providers who assist and support us, and who may, subject to appropriate agreements and security measures, disclose your personal data to us or with whom we may share your personal data. Such service providers may include:
- e-commerce platforms;
- credit check agencies;
- customer service and relationship management platforms;
- customer support services (e.g., chat providers);
- marketing platforms and services, including social media platforms and conversion tracking services;
- recruitment platforms (e.g., LinkedIn or Glassdoor);
- recruitment service providers, e.g., agencies;
- recruitment management platforms;
- companies belonging to the same group as us;
- third parties upon a business transaction (e.g., a merger, an acquisition or a liquidation).
Furthermore, in the event we are obliged by law or by court decision to disclose your personal data or where we need to do so to establish, exercise or defense legal claims, we may forward your data to prosecution authorities or other relevant third parties.
Do third parties act as joint controllers?
Where personal event data is processed via Facebook's social plugins, pixels or Software Development Kits (SDKs) in the course of SellerX's use of the Facebook Business Tools services, Meta Platforms Ireland Ltd acts as a joint controller. For processing of personal data in events for Facebook Page Insights or LinkedIn Page Insights, the aggregation of such events as well as provision of such information to the Facebook or LinkedIn page admins the service providers, i.e., Meta or respectively LinkedIn, act as joint controllers together with SellerX. For further information on how Meta and LinkedIn process your personal data, including the lawful bases for such processing, and how you can exercise your rights please see Facebook privacy policy or LinkedIn privacy policy, as applicable.
Where is your personal data processed?
SellerX is a European company with its headquarters located in Berlin, Germany. However, we may transfer your personal data to other countries within the EU/EEA as well as to third countries. Where personal data is transferred to third countries that are not covered by a relevant adequacy decision, we ensure that a relevant transfer mechanism (e.g., the Standard Contractual Clauses) and any required additional technical and organizational security measures are in place. Insofar as the transfer to the third country is necessary in connection with the performance of a contract to which you are a party or which is concluded for your benefit, the third country transfer may also be justified via the exception provision in Article 49(1)(b)(c) GDPR.
How is your personal data protected?
SellerX has in place comprehensive technical and organizational security measures to ensure your personal data is secured. These are reviewed and updated on a regular basis to ensure they comply with the state of the art.
We also review our vendors and sign appropriate agreements with them to ensure that they comply with our defined security measures.
When will we delete your data?
Your personal data is only stored for as long as it is necessary for the purposes defined in this policy and deleted from our systems once it is no longer needed for such purposes unless you request your data to be deleted prior to the elapse of such retention period. If required, we may retain certain personal data to comply with our legal obligations as well as to pursue or defend legal claims.
What are your rights in relation to our data processing operations and how to contact us?
In addition to your right to receive information in the form of this privacy policy, you have the following rights under the relevant legal conditions:
- right to access your data;
- right to rectify your incorrect or incomplete data;
- right to be forgotten (data deletion/anonymization);
- right to restrict processing;
- right to data portability;
- right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you; and
- right to lodge a complaint with a supervisory authority.
Furthermore, in the event we process your personal data relying on legitimate interests, you have the right to object to this processing with effect for the future. If you exercise your right to object, we will stop the processing of the relevant data. However, further processing may occur provided that we can prove comprehensive reasons for processing that override your interests, fundamental rights and fundamental freedoms, or if the processing is for the certification, exercise or defense of legal claims. If we process your personal data for direct advertising purposes, you have the right to object at any time to such processing and we will stop processing your personal data for direct marketing purposes.
Kindly observe that we do not sell your personal data. However, in the event of a business transaction your personal data may be transferred to a new controller entity.
In order to exercise your rights, please send us an email to privacy@sellerx.com. Please note that the group has appointed a Data Protection Office (DPO) who monitors our privacy compliance operations and can answer any further questions you may have regarding our data processing operations.
You can also reach us via post:
SellerX Germany GmbH
Attn: Data Protection Officer
Chausseestraße 19
10115 Berlin
Germany
Kindly note that as an e-commerce operator we process your data in electronic form and therefore, upon a request to access your personal data, we provide such data in a commonly used machine-readable format (e.g., PDF).
Who is the data controller?
SellerX Germany GmbH
Chausseestraße 19
10115 Berlin
Germany
HRB 239289 B
Who is our group data protection officer?
Data Protection Officer
c/o SellerX Germany GmbH
Chausseestraße 19
10115 Berlin
Germany
Email: privacy@sellerx.com
When was this Privacy Policy last reviewed?
This Privacy Policy was last reviewed and updated on 01/07/2025. Upon material changes to this Privacy Policy, we will notify you via your given email address.
PRIVACY POLICY
Website Privacy Policy
Who are we and what is the scope of this Privacy Policy?
As the data controller, SellerX Germany GmbH ("we", "us", "our" or "SellerX") processes certain personal data in order to enable you to establish a business or employment relationship with us or to browse our websites. This Privacy Policy describes our personal data processing operations and provides you information of your rights related to your personal data.
This Privacy Policy applies to all websites operated under our domain (sellerx.com), including business acquisitions, recruitment, and use of the websites. Kindly observe that in some events our websites may include links to external third-party websites which are neither operated by us nor covered by this Privacy Policy. To learn more about the data processing operations carried out by these third parties we advise you to review their privacy policies.
What personal data do we process, for what purposes and based on which lawful bases?
1. Acquisition of your business
To carry out our business operations, that is to acquire new brands to our portfolio, we need to process certain personal data of the seller. In the event you are selling or planning to sell your business to us and get in touch with us through our website we process your contact information which includes:
- first and last name;
- email address;
- phone number.
The lawful basis for processing such personal data is contract as per Art. 6(1)(b) GDPR as processing is necessary to take steps, at your request, prior to entering into a purchase agreement and for the performance of the same.
It can also happen that we find your business interesting and decide to get in touch with you. To be able to do so, we acquire the above-listed personal data and may acquire further publicly available and professionally relevant personal data (e.g., professional social media profile) from third party services instead of receiving this directly from you. In the event we contact you through professional third-party sites (e.g., LinkedIn) please see the privacy policy of the relevant site to learn about their data processing operations. If we contact you via email, we will link our applicable privacy policy in the first communication and provide an unsubscribe link you can use to opt-out from further communications from our business team. We may also contact you by calling to your business telephone number. Where the first contact is carried out on our initiative, the lawful basis for processing personal data in this context is our legitimate interests to contact you to express our interest in buying your business as well as your legitimate interests of becoming aware of our proposal (Art. 6(1)(f) GDPR).
If both parties decide to move forward with the process after the initial communications, further personal data related to the due diligence process may be required (e.g., lists of shareholders, directors and representatives). In certain cases, this may include background checks on the sellers in accordance with the applicable know-your-customer (KYC) regulations. Should such data constitute data relating to criminal convictions and offences such data is only processed to the extent required by and in accordance with the applicable local laws. Where such personal data is required to be processed to comply with applicable laws the lawful basis is legal obligation (Art. 6(1)(c) GDPR). The lawful basis for processing other personal data required to enter into a purchase contract is contract in accordance with Art. 6(1)(b) GDPR.
2. Recruitment
SellerX is always looking for new talents to join the team. If you apply for a job at SellerX we must process your personal data, including:
- first and last name;
- email address;
- phone number;
- resume (CV);
- information if you are legally authorized to work in the country for which you are applying.
Additionally, if we offer you a position and you decide to accept this, in order to prepare the contract, we need a copy of your ID (e.g., passport) as well as a copy of your work permit (if relevant). The lawful basis for processing such personal data is contract as per Art. 6(1)(b) GDPR as processing is necessary to take steps at your request prior to entering into an employment agreement and for the performance of the same.
Furthermore, you may voluntarily submit further personal data, including but not limited to:
- cover letter;
- picture;
- professional social media pages (e.g., LinkedIn profile or Instagram portfolio).
Kindly observe that although you are not required to provide this information, we may not be able to process your application or assess it properly if you decide not to share this information (e.g., cover letter). At later stages of the recruitment process, we also receive personal data from you in the interviews that we hold. Furthermore, we may ask for contact details of your references whom you should inform in advance but who will also be informed by us upon our first contact with them. The reference contact details are only used for the purposes collected and not further stored. The lawful basis for processing such voluntarily submitted personal data is your legitimate interests to submit relevant information to us in order to participate in the recruitment process and our legitimate interests to process such information to carry out the same (Art. 6(1)(f) GDPR).
Our recruiters may also look for candidates on professional online sites e.g., LinkedIn, Glassdoor or GitHub and get in touch with you directly on the platform or via the email address you have provided therein. If the communications are carried out on the applicable site, please see the privacy policy of the relevant site to learn about their data processing operations. If we contact you via the email obtained from the website, we will link our applicable privacy policy in the first communication and provide a method to unsubscribe from further communications from our recruitment team. The lawful basis for processing such recruitment related data is our legitimate interest to contact you regarding positions we consider would suit you and your legitimate interests to be contacted regarding such positions (Art. 6(1)(f) GDPR).
SellerX operates a referral program that enables SellerX employees to refer their friends and other contacts for open positions. In general, you should be informed by a SellerX employee prior to your details being submitted to the talent team but we also provide information to you about how we received your data. The lawful basis for processing such recruitment related data in the context of our referral program is our legitimate interest to contact you regarding positions we consider you would fit and your legitimate interests to be contacted regarding such positions (Art. 6(1)(f) GDPR).
When you apply for a job at SellerX or otherwise enter the recruitment process, we retain your profile in our talent pool for 180 days in order to match you with future openings relying on our legitimate interests (Art. 6(1)(f) GDPR) to contact interesting candidates and your legitimate interests to be contacted. We may further retain your data for additional 180 days provided that you have consented to this. The lawful basis for such further retention is your consent as per Art. 6(1)(a) GDPR.
3. Other purposes
We may also use the categories of personal data mentioned above as well as data, that can be defined as personal data, collected by our essential cookies or otherwise for the following purposes:
- maintenance of security of our website and services, including preventing data breaches;
- research and development of our website and services, provided that the data is in in summarized, pseudonymized or anonymized form;
- compliance with laws or court orders (e.g., to carry out applicable anti-money laundering or know your customer checks);
- establishment, exercise or defense of legal claims.
For these operations we rely on our legitimate interests to detect and prevent fraud, maintain the security of our services and improve the same as well as to pursue or defend legal claims in accordance with Art. 6(1)(f) GDPR). Where we need to process your personal data in order to comply with legal obligations e.g., applicable laws and regulations or court orders the applicable lawful basis for processing is legal obligation as per Art. 6(1)(c) GDPR.
If you wish to learn more about which cookies and similar technologies we use kindly see our Cookie Policy.
From where do we get your personal data and with whom do we share it?
In general, we process personal data that is directly provided by you to us. Our business operations, also require us to engage service providers who assist and support us, and who may, subject to appropriate agreements and security measures, disclose your personal data to us or with whom we may share your personal data. Such service providers may include:
- e-commerce platforms;
- credit check agencies;
- customer service and relationship management platforms;
- customer support services (e.g., chat providers);
- marketing platforms and services, including social media platforms and conversion tracking services;
- recruitment platforms (e.g., LinkedIn or Glassdoor);
- recruitment service providers, e.g., agencies;
- recruitment management platforms;
- companies belonging to the same group as us;
- third parties upon a business transaction (e.g., a merger, an acquisition or a liquidation).
Furthermore, in the event we are obliged by law or by court decision to disclose your personal data or where we need to do so to establish, exercise or defense legal claims, we may forward your data to prosecution authorities or other relevant third parties.
Do third parties act as joint controllers?
Where personal event data is processed via Facebook's social plugins, pixels or Software Development Kits (SDKs) in the course of SellerX's use of the Facebook Business Tools services, Meta Platforms Ireland Ltd acts as a joint controller. For processing of personal data in events for Facebook Page Insights or LinkedIn Page Insights, the aggregation of such events as well as provision of such information to the Facebook or LinkedIn page admins the service providers, i.e., Meta or respectively LinkedIn, act as joint controllers together with SellerX. For further information on how Meta and LinkedIn process your personal data, including the lawful bases for such processing, and how you can exercise your rights please see Facebook privacy policy or LinkedIn privacy policy, as applicable.
Where is your personal data processed?
SellerX is a European company with its headquarters located in Berlin, Germany. However, we may transfer your personal data to other countries within the EU/EEA as well as to third countries. Where personal data is transferred to third countries that are not covered by a relevant adequacy decision, we ensure that a relevant transfer mechanism (e.g., the Standard Contractual Clauses) and any required additional technical and organizational security measures are in place. Insofar as the transfer to the third country is necessary in connection with the performance of a contract to which you are a party or which is concluded for your benefit, the third country transfer may also be justified via the exception provision in Article 49(1)(b)(c) GDPR.
How is your personal data protected?
SellerX has in place comprehensive technical and organizational security measures to ensure your personal data is secured. These are reviewed and updated on a regular basis to ensure they comply with the state of the art.
We also review our vendors and sign appropriate agreements with them to ensure that they comply with our defined security measures.
When will we delete your data?
Your personal data is only stored for as long as it is necessary for the purposes defined in this policy and deleted from our systems once it is no longer needed for such purposes unless you request your data to be deleted prior to the elapse of such retention period. If required, we may retain certain personal data to comply with our legal obligations as well as to pursue or defend legal claims.
What are your rights in relation to our data processing operations and how to contact us?
In addition to your right to receive information in the form of this privacy policy, you have the following rights under the relevant legal conditions:
- right to access your data;
- right to rectify your incorrect or incomplete data;
- right to be forgotten (data deletion/anonymization);
- right to restrict processing;
- right to data portability;
- right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you; and
- right to lodge a complaint with a supervisory authority.
Furthermore, in the event we process your personal data relying on legitimate interests, you have the right to object to this processing with effect for the future. If you exercise your right to object, we will stop the processing of the relevant data. However, further processing may occur provided that we can prove comprehensive reasons for processing that override your interests, fundamental rights and fundamental freedoms, or if the processing is for the certification, exercise or defense of legal claims. If we process your personal data for direct advertising purposes, you have the right to object at any time to such processing and we will stop processing your personal data for direct marketing purposes.
Kindly observe that we do not sell your personal data. However, in the event of a business transaction your personal data may be transferred to a new controller entity.
In order to exercise your rights, please send us an email to privacy@sellerx.com. Please note that the group has appointed a Data Protection Office (DPO) who monitors our privacy compliance operations and can answer any further questions you may have regarding our data processing operations.
You can also reach us via post:
SellerX Germany GmbH
Attn: Data Protection Officer
Chausseestraße 19
10115 Berlin
Germany
Kindly note that as an e-commerce operator we process your data in electronic form and therefore, upon a request to access your personal data, we provide such data in a commonly used machine-readable format (e.g., PDF).
Who is the data controller?
SellerX Germany GmbH
Chausseestraße 19
10115 Berlin
Germany
HRB 239289 B
Who is our group data protection officer?
Data Protection Officer
c/o SellerX Germany GmbH
Chausseestraße 19
10115 Berlin
Germany
Email: privacy@sellerx.com
When was this Privacy Policy last reviewed?
This Privacy Policy was last reviewed and updated on 01/07/2025. Upon material changes to this Privacy Policy, we will notify you via your given email address.