Data controller: Zerkuri is operated by Berki Dávid Máté, a registered individual entrepreneur in Hungary. Official operator details are published in the Legal Center.
1. Who controls your personal data
Zerkuri is operated by Berki Dávid Máté, a registered individual entrepreneur in Hungary. For personal data processed for the operation of the marketplace, the Zerkuri operator will generally act as the data controller unless another party independently determines the purposes and means of processing.
Official legal identification and contact details of the operator are published in the Zerkuri Legal Center.
2. Personal data we may collect
Depending on how you use Zerkuri, we may process information such as your account identifier, email address, nickname, profile image, profile biography, seller information, payment-related identifiers, purchase history, listings, reviews, favourites, follows, notifications, reports, support communications and activity connected to your account.
We may also process technical and security information such as IP address, device or browser information, authentication events, timestamps, request logs, security signals and information needed to prevent abuse or investigate technical problems.
Payment card details are generally handled directly by the relevant payment provider. Zerkuri does not need to store full card numbers when payment processing is provided through a third-party payment service.
3. Why we process personal data
We may process personal data to create and secure user accounts, provide marketplace functionality, process purchases, enable digital delivery, support sellers, manage payments and payouts, display profiles and listings, operate reviews and community features, provide customer support, prevent fraud, enforce platform rules, investigate reports, maintain security and comply with legal obligations.
We may also use limited marketplace and technical information to improve reliability, understand how features are used and develop the service, subject to applicable privacy and cookie rules.
4. Legal bases for processing
Where the GDPR applies, Zerkuri may rely on different legal bases depending on the processing activity. These may include processing necessary to perform a contract or take steps requested before a contract, compliance with legal obligations, legitimate interests such as platform security and fraud prevention, and consent where consent is required by law.
Where processing is based on legitimate interests, those interests will be balanced against the rights and interests of affected individuals. Where processing is based on consent, that consent can be withdrawn for future processing, without affecting the lawfulness of processing carried out before withdrawal.
5. Marketplace, payments and seller data
Purchase and seller records may include identifiers relating to the buyer, seller, product, transaction amount, platform fee, payout amount, transaction status, Stripe Checkout session, PaymentIntent or charge information, refund information and timestamps.
Seller onboarding and payouts may require additional identity, business, tax, banking or compliance information to be provided directly to a payment provider such as Stripe. Payment providers may process this information under their own legal obligations and privacy terms.
6. Service providers and recipients
Zerkuri may use trusted service providers to operate the marketplace. Depending on the feature used, recipients or processors may include hosting, database, authentication, payment, email delivery, analytics, security or infrastructure providers.
Current infrastructure may include services such as Supabase for database, authentication and storage functionality; Stripe for payments and seller payout infrastructure; Resend for transactional emails; and Google Workspace for business email communications.
Personal data may also be disclosed where required by law, court order or lawful authority, or where reasonably necessary to establish, exercise or defend legal claims, prevent fraud, protect users or maintain platform security.
7. International data transfers
Some service providers may process information in countries outside Hungary or outside the European Economic Area. Where required, Zerkuri will rely on an appropriate transfer mechanism or other lawful safeguard for international transfers of personal data.
8. How long we keep information
Personal data is kept only for as long as reasonably necessary for the purpose for which it was collected, for marketplace operation, account administration, fraud prevention, dispute handling, tax or accounting obligations, legal compliance and the establishment or defence of legal claims.
Different categories of information may therefore have different retention periods. Transaction records may need to be retained longer than ordinary profile information where required for legal, tax, accounting or dispute purposes.
9. Security
Zerkuri uses technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration, disclosure or misuse. These measures may include authentication controls, access restrictions, database security, encrypted connections, service-role separation and security monitoring.
No online system can guarantee absolute security. Users are also responsible for protecting their account credentials and for notifying Zerkuri if they suspect unauthorised account access.
10. Your privacy rights
Where the GDPR applies, you may have rights including the right to request access to your personal data, correction of inaccurate data, deletion in certain circumstances, restriction of processing, data portability where applicable and objection to certain processing.
You may also have the right to withdraw consent where processing relies on consent and to lodge a complaint with a competent data protection supervisory authority.
Some requests may be limited where Zerkuri must retain or process information to comply with legal obligations, protect rights, prevent fraud, handle disputes or maintain transaction records.
12. Children
Zerkuri is not intended to be used in violation of age-related legal requirements. Where parental or guardian consent is required under applicable law for particular processing or contractual activity, users must comply with those requirements.
13. Changes to this Privacy Policy
Zerkuri may update this Privacy Policy as the marketplace, processing activities, service providers or legal requirements change. The current version will be published in the Legal Center, and material changes will be communicated where required.
14. Contact and complaints
Privacy questions or requests concerning personal data can be sent to:
support@zerkuri.comYou may also have the right to lodge a complaint with the data protection supervisory authority competent for your situation.