Last updated: November 5th, 2026.
This Privacy Policy explains how EAN-DB collects, uses, stores and protects personal data when you visit https://ean-db.com, create an account, purchase or use our services, contact our support team or use the EAN-DB API.
We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.
The controller responsible for processing personal data in connection with EAN-DB is:
EAN-DB
Andrei Sumin
Wartenberger Weg 17
13051, Berlin
Germany
Email: support@ean-db.com
Website: https://ean-db.com
In this Privacy Policy, "we", "us" and "our" refer to the controller identified above.
The personal data we process depends on how you interact with EAN-DB.
When you visit our website, technical information may be processed, including:
This information is used to deliver the website, maintain its security, diagnose technical problems and prevent misuse.
When you create or manage an EAN-DB account, we may process:
We use this information to create and administer accounts, authenticate users, provide the Service and communicate with account holders.
When you use the EAN-DB API, we may process technical and usage information such as:
We use this information to operate the API, calculate usage, manage credits, enforce usage limits, troubleshoot problems, protect the Service and investigate suspected abuse.
Payments for paid services are processed by the payment service provider identified during checkout. The provider may collect payment details, billing information and other information necessary to complete a transaction.
We may receive information such as:
We do not intentionally collect or store full payment card numbers or card security codes through the EAN-DB website.
If you contact us by email or through the support chat, we process the information you provide, which may include:
Support chat functionality is provided by Tawk.to. Information submitted through the chat may be processed by Tawk.to on our behalf and in accordance with its applicable privacy documentation.
Please do not send passwords, API secrets, payment card details or other unnecessary sensitive information through support channels.
We process personal data only where a legal basis under Article 6 GDPR applies.
Depending on the circumstances, the legal bases include:
| Purpose | Legal basis |
|---|---|
| Creating and administering accounts | Article 6(1)(b) GDPR — performance of a contract or pre-contractual steps |
| Providing website, API and account functionality | Article 6(1)(b) GDPR |
| Processing purchases, credits and transactions | Article 6(1)(b) GDPR |
| Responding to support enquiries | Article 6(1)(b) GDPR, where related to the Service; otherwise Article 6(1)(f) GDPR |
| Maintaining security, preventing fraud and investigating misuse | Article 6(1)(f) GDPR — legitimate interests |
| Maintaining technical logs and diagnosing errors | Article 6(1)(f) GDPR, where appropriate |
| Meeting tax, accounting and other legal obligations | Article 6(1)(c) GDPR |
| Website analytics | Article 6(1)(a) GDPR, where consent is required and obtained |
| Optional marketing communications | Article 6(1)(a) GDPR, where consent is required and obtained |
Our legitimate interests include operating and securing EAN-DB, preventing unauthorised access, maintaining service reliability, resolving technical problems and protecting our legal rights.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
EAN-DB uses Hetzner for hosting and infrastructure services.
Personal data processed through the website and Service is stored and processed on servers located within the European Union (EU).
Hetzner may process personal data on our behalf as a service provider. Where required, this processing is governed by an appropriate data processing agreement under Article 28 GDPR.
We use EU-based server infrastructure. This does not necessarily mean that no personal data can be accessed or processed outside the EU by other service providers; any such transfers are described in the relevant sections of this Privacy Policy.
We use Google Analytics 4 (GA4) to understand how visitors use our website and to improve its performance and functionality. Analytics consent is initially set to denied and can be changed through our cookie preferences.
Depending on the configuration, analytics information may include:
Further information about Google's data processing is available in Google's Privacy Policy: https://policies.google.com/privacy
We use Tawk.to to provide website-based customer support.
If you use the chat function, information you submit may be processed by Tawk.to, including your messages, contact details, technical information and chat history.
We use this information to respond to enquiries, provide customer support and maintain a record of support interactions.
Tawk.to may process information on our behalf and may also process certain technical information in accordance with its own terms and privacy documentation.
Further information is available at: https://www.tawk.to/privacy-policy/
Payments for paid EAN-DB services are processed by an external Merchant of Record (MoR).
The Merchant of Record acts as the seller of record for transactions with customers and is responsible for processing payments, handling applicable sales taxes and VAT, and issuing payment receipts or invoices, as applicable.
The Merchant of Record may collect and process personal data such as your name, email address, billing address, payment details and transaction information to complete purchases, prevent fraud, comply with legal obligations and provide payment-related support.
EAN-DB receives the transaction information necessary to associate purchases with customer accounts, allocate purchased API credits, provide paid services and manage payment-related enquiries.
The Merchant of Record processes personal data in accordance with its own privacy policy and applicable contractual arrangements.
We may disclose personal data to the following categories of recipients where necessary:
We do not sell personal data to third parties.
Service providers processing personal data on our behalf are required to protect it and process it only in accordance with applicable law and the relevant contractual arrangements.
Our primary hosting infrastructure is located within the European Union.
However, some third-party services integrated into EAN-DB, including Google Analytics and Tawk.to, may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we ensure that the transfer is carried out in accordance with Chapter V GDPR, using an applicable transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, together with additional safeguards where required.
Tawk.to is loaded subject to the visitor's consent. Google Analytics is subject to the visitor's analytics consent preferences.
For further information about applicable international transfer safeguards, please contact us at support@ean-db.com.
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention depends on the type of information and the reason it is processed.
In particular:
When personal data is no longer required, it will be deleted or anonymised, subject to applicable legal retention obligations and technical limitations.
EAN-DB uses cookies and similar technologies to operate the website, maintain security and, where permitted, analyse website usage.
Strictly necessary technologies may be used where required to provide the website or a service you have requested.
Non-essential cookies and similar technologies, including those used for analytics, will be used only where the required consent has been obtained.
You can manage or withdraw your cookie consent through the cookie settings available on our website.
For more information, please see our Cookie Policy.
Subject to the applicable legal requirements, you have the right to:
You also have the right to lodge a complaint with a competent data protection supervisory authority.
To exercise your rights, contact us at: support@ean-db.com
We may need to verify your identity before responding to a request. We will respond within the time limits required by applicable law.
Your rights are subject to statutory conditions and exceptions. For example, we may need to retain certain transaction records to comply with legal obligations even after an account has been closed.
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
As our business is established in Berlin, Germany, the relevant supervisory authority is:
Berlin Commissioner for Data Protection and Freedom of Information
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Website: https://www.datenschutz-berlin.de/
You may also lodge a complaint with another competent supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement.
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures may include access controls, authentication mechanisms, secure connections, system monitoring, backups and other safeguards appropriate to the nature of the information and the risks involved.
No internet-based service can guarantee absolute security. You are also responsible for protecting your account credentials and API keys and for notifying us if you suspect unauthorised access.
Our website or Service may contain links to third-party websites or services.
We are not responsible for the privacy practices of third-party websites that we do not operate. We recommend reviewing their privacy policies before providing them with personal information.
We may update this Privacy Policy to reflect changes in our services, data processing practices, service providers or applicable legal requirements.
The current version will be published on this page together with its latest update date.
If a change requires additional information or consent under applicable law, we will provide the necessary information or request consent where appropriate.
If you have questions about this Privacy Policy or how EAN-DB processes personal data, please contact:
EAN-DB
Andrei Sumin
Wartenberger Weg 17
13051, Berlin
Germany
Email: support@ean-db.com
Website: https://ean-db.com