The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection legislation is:
Frank Bull
VOD-Records
Alpenstrasse 25/1
88045 Friedrichshafen
Germany
Phone: +49 7541 34412
Email: frank@vinyl-on-demand.com
We process personal data of our users only to the extent necessary to provide a functional website and our content and services. The legal bases are Art. 6 (1)(a) (consent), (b) (contract performance), (c) (legal obligation), and (f) (legitimate interest) GDPR.
This website is hosted on a server provided by Hostinger International Ltd. When you visit our website, the following information is automatically stored in server log files:
Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in secure and efficient operation).
Registration is required to participate in auctions and make direct purchases. The following data is collected:
Authentication is handled via Supabase Auth (Supabase Inc., EU region Frankfurt). Data is stored for the duration of the business relationship and beyond in accordance with statutory retention periods.
Legal basis: Art. 6 (1)(b) GDPR.
When placing bids, the following data is processed:
To ensure real-time bidding functionality, bid data is temporarily cached in Upstash Redis (Upstash Inc., EU region). Real-time updates are delivered via Supabase Realtime (WebSocket).
Legal basis: Art. 6 (1)(b) GDPR.
We use Stripe for payment processing (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland).
The following data is transmitted to Stripe during payment:
Payment data is processed exclusively by Stripe. We do not store any credit card data on our servers. Stripe is PCI DSS Level 1 certified.
Stripe Privacy Policy: https://stripe.com/privacy
Legal basis: Art. 6 (1)(b) GDPR.
For storing all application data (user accounts, bids, orders, product data, images), we use Supabase (Supabase Inc.), hosted in the EU region Frankfurt (eu-central-1). Supabase provides:
All data is encrypted in transit (TLS) and encrypted at rest.
Supabase Privacy Policy: https://supabase.com/privacy
Legal basis: Art. 6 (1)(b) and (f) GDPR.
For performance optimisation and real-time bid management, we use Upstash Redis (Upstash Inc., EU region). Temporary, non-personal data (bid states, session information) is cached there. This data is automatically deleted after a short period.
Upstash Privacy Policy: https://upstash.com/trust/privacy.pdf
Legal basis: Art. 6 (1)(f) GDPR.
This website uses the fonts "DM Sans" and "DM Serif Display" from Google Fonts. The fonts are self-hosted via next/font and served directly from our own server. No data is transmitted to Google servers when you visit our website.
To enrich our product data (market prices, tracklists, credits), we use the Discogs API (Zink Media Inc., Portland, USA). No personal user data is transmitted to Discogs. Only product information is retrieved.
Legal basis: Art. 6 (1)(f) GDPR.
We send transactional emails (registration, bid confirmation, auction award, payment confirmation, shipping notification) via the email service Resend (Resend Inc., USA). Your email address and the relevant order/bid information are transmitted to Resend for this purpose.
Resend Privacy Policy: https://resend.com/legal/privacy-policy
Legal basis: Art. 6 (1)(b) GDPR.
We use Brevo (formerly Sendinblue) for newsletter delivery and customer relationship management (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France). Data is processed on EU servers.
The following data may be transmitted to Brevo:
Newsletter emails are only sent if you have explicitly opted in (double opt-in). You can unsubscribe at any time via the link in each newsletter email.
Brevo Privacy Policy: https://www.brevo.com/legal/privacypolicy/
Legal basis: Art. 6 (1)(a) GDPR (consent for newsletter), Art. 6 (1)(f) GDPR (CRM).
Some product images are loaded from our partner websites (tape-mag.com, vod-records.com). When loading these images, your IP address may be transmitted to the respective servers. These servers are also operated by VOD-Records.
Legal basis: Art. 6 (1)(f) GDPR.
This website uses Google Analytics 4 (GA4) for web analytics. Google Analytics is only loaded if you explicitly consent to analytics cookies via our cookie consent banner.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When activated, Google Analytics collects:
IP anonymisation is active. No personal data (name, email) is transmitted to Google.
Google Privacy Policy: https://policies.google.com/privacy
Opt-out: You can reject analytics cookies via our cookie consent banner or use the Google Analytics Opt-out Browser Add-on.
Legal basis: Art. 6 (1)(a) GDPR (consent).
Our website uses the following types of cookies:
You can manage your cookie preferences via our cookie consent banner, which appears on your first visit. To change your preference later, clear your browser cookies for vod-auctions.com and reload the page.
For more details, see our Cookie Policy.
Legal basis: Art. 6 (1)(a) GDPR (consent), § 25 TDDDG.
You have the following rights regarding your personal data:
To exercise your rights, please contact: frank@vinyl-on-demand.com
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
www.baden-wuerttemberg.datenschutz.de
Personal data is only shared with third parties to the extent necessary for contract fulfilment:
Beyond this, no data is shared with third parties. We do not sell or rent personal data.
We use TLS (Transport Layer Security) encryption with the highest level supported by your browser for all data transmitted between your browser and our server.
Personal data is deleted or blocked as soon as the purpose for its storage ceases to apply. Data may be stored beyond this period only if required by statutory retention periods (commercial law: 6 years, tax law: 10 years).
The data controller also operates the following websites with their own privacy notices:
Please refer to the respective privacy policies of these platforms.
Last updated: March 2026