Privacy Policy

1.1. Malaky Shopping e.U. (hereinafter “we”, “us”, or “our”) is committed to protecting the privacy of our users. This Privacy Policy describes how we collect, use, process, and disclose your information, including personal data, in connection with your access to and use of the Malaky.shop marketplace.

2.1. The data controller responsible for your personal data is: Malaky Shopping e.U., 49401 Damme, Germany.

We collect various types of information in connection with the services we provide, including:
3.1. Information you provide to us:

Suppliers: When you purchase from a Supplier, they may share information with us related to your order for fulfillment and customer service purposes.

Account Information: When you create an account, we collect your name, email address, password, and contact details.

Profile Information: You may choose to provide additional information, such as your shipping address, billing address, and phone number.

Communication: When you communicate with us or with other users (e.g., Suppliers) through our platform, we collect information about your communication and any information you choose to provide.

Supplier Information: If you are a Supplier, we collect business registration details, tax information, bank account details, and other necessary verification documents.
3.2. Information we automatically collect from your use of the platform:

Usage Information: We collect information about your interactions with the platform, such as the pages or content you view, your searches, and other actions.

Log Data and Device Information: We automatically collect log data and device information when you access and use the platform, even if you have not created an account. That information includes, among other things, your IP address, access dates and times, hardware and software information, device information, and cookie data.

Cookies and Similar Technologies: We use cookies and other similar technologies (such as web beacons, pixels, and mobile identifiers) to collect information. Please refer to our separate Cookie Policy for more details.
3.3. Information we collect from third parties:

Payment Processors: We use Stripe to process payments. Stripe will collect your payment information (e.g., credit card details). We do not directly store your full payment card details on our servers.

We use your personal data for various purposes, including:
4.1. To provide, operate, and improve our platform:

To personalize and customize your experience.
4.5. To comply with legal obligations: To comply with our legal obligations, resolve disputes, and enforce our agreements. This includes compliance with German and Malagasy laws.

To enable you to access and use the platform.

To process your transactions and facilitate orders with Suppliers.

To operate, protect, improve, and optimize the platform and experience, such as by performing analytics and conducting research.
4.2. To ensure safety and security:

To verify your identity.

To detect and prevent fraud, spam, abuse, security incidents, and other harmful activity.

To conduct security investigations and risk assessments.
4.3. To communicate with you:

To send you service messages, updates, security alerts, and account notifications.

To respond to your inquiries and provide customer support.
4.4. For marketing and advertising (with your consent where required):

To send you promotional messages, marketing, advertising, and other information that may be of interest to you.

We may share your information with the following categories of recipients:
5.1. With Suppliers: When you place an order, we share necessary information (e.g., your name, billing address, geolocation, contact details) with the relevant Supplier to fulfill your order.
5.2. Service Providers: We use various third-party service providers to help us provide services related to the platform, such as payment processing (Stripe and Coinbase), hosting, analytics, and customer service. These providers have limited access to your information to perform these tasks on our behalf and are contractually bound to protect it.
5.3. Legal Compliance and Protection: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to:

Act in urgent circumstances to protect the personal safety of users of the platform or the public.
5.4. Business Transfers: If https://Malaky.shop is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be sold or transferred as part of that transaction.

Comply with a legal obligation (e.g., German tax authorities, Malagasy authorities).

Protect and defend the rights or property of Malaky e.U. and Malaky SARL.

Your personal data may be transferred to, stored, and processed in countries other than Madagascar or Germany, where our service providers or affiliates are located. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable data protection laws, including implementing appropriate safeguards (e.g., Standard Contractual Clauses for transfers outside the EU/EEA).

You have certain rights regarding your personal data: 7.1. Right of Access: You have the right to request access to your personal data.
7.2. Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
7.3. Right to Erasure (“Right to be Forgotten”): You have the right to request the deletion of your personal data under certain circumstances.
7.4. Right to Restriction of Processing: You have the right to request the restriction of processing of your personal data under certain conditions.
7.5. Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller. 7.6. Right to Object: You have the right to object to the processing of your personal data in certain situations (e.g., for direct marketing).
7.7. Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
7.8. Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement. In Germany, this would be the relevant State Commissioner for Data Protection.

To exercise any of these rights, please contact us through our help center.

We implement appropriate technical and organizational measures designed to protect your personal data from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure.

We retain your personal data for as long as necessary to provide the services you have requested, comply with our legal obligations, resolve disputes, and enforce our policies.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.

If you have any questions about this Privacy Policy or our data practices, please contact us at: