In this Privacy Policy we have compiled all essential information about our handling of your personal data and your corresponding rights for you.
1.Scope and updates of this Privacy Policy
This Privacy Police applies to your use of this website and all related applications,services (including payment services),products and tools (collectively the 'Services'),regardless of how you access or use these Services,including access via mobile devices and apps.
2.Controller
Our company is responsible for the collection and processing of your personal data in connection with the provision of the Services depends on how you use our Services.
3. Data protection officer and contact
We have appointed data protection officers in several countries to oversee the protection of your personal data.If you have any questions or complaints regarding this Privacy Policy,our global data protection principles or our handling of personal data,you can contact our privacy team or the controller who is responsible for the processing of your personal data at any time.This applies regardless of whether we have appointed a data protection officer in your country or not.
4. What personal data we collect and process
We collect your personal data when you use our Services,create a new account,provide us with information via a web form,add or update information in your account,participate in online community discussions or otherwise interact with us.We also collect personal data from other sources (such as other credit agencies or bureaus,and data providers).
In total,we collect the following personal data:
1.Personal data you provide when using our Services or creating an account
2.Personal data we collect automatically when you use our Services or create an account
3.Personal data we collect in connection with the use of cookies and similar technologies
We use cookies,web beacons and similar technologies to collect data in connection with our Services.We collect this data from the devices (including mobile devices) that you use our Services with.
4. Personal data from other sources
We also collect personal data about you from other sources and from third parties to the extent permitted by applicable law.
5.Social network data you share with us
We allow you to use social networks (such as Facebook) or other providers of single sign-on services (such as Google or Apple) with whom you already have an account to create an account or to link your account to such single sign-on services.You can determine the personal data that we can access when authorising the connection with the single sign-on service.
We allow you to share personal data with social networks or to link your account to a social network.These social networks may automatically provide us with access to certain personal data they have stored about you (e.g.content you have viewed or enjoyed,information about the advertisements you have been shown or clicked on,etc.).You can determine the personal data that we can access through the privacy settings of each social network.
We may also use plug-ins or other technologies from various social networks.If you click on a link displayed through a social network plug-in,you voluntarily connect to that social network.
5.Purposes and legal basis for data processing and categories of recipients
We process your personal data for various purposes and based on several different legal bases that allow this processing.For example,we process your personal data to provide and improve our Services,to provide you with a personalised user experience on this website,to contact you about your account and our Services,to provide customer service,to provide you with personalised advertising and marketing communications,and to detect,prevent,mitigate and investigate fraudulent or illegal activity.We also share your information with third parties,including service providers acting on our behalf,for these purposes.In addition,we may share your personal data among our group companies in order to fulfill our contract with you under the User Agreement and,if applicable,the Term of Service.
6.International data transfers
Some recipients of your personal data are located outside your country or have offices in countries where data protection laws may provide a different level of protection than the laws in your country.When transferring personal data to such recipients,we provide appropriate safeguards.
7.Storage duration and erasure
Your personal data will be stored by us and our service providers in accordance with applicable data protection laws to the extent necessary for the processing purposes set out in this Privacy Policy.Subsequently,we will delete your personal data in accordance with our data retention and deletion policy or take steps to properly render the data anonymous,unless we are legally obliged or permitted to keep your personal data longer (e.g.for legal compliance,tax,accounting or auditing purposes,or to detect and prevent fraudulent or illegal activity on our website)..As far as legally permissible or required,we restrict the processing of your data instead of deleting it (e.g.by restricting access to it).This applies in particular to cases where we may still need the data for the execution of the contract or for the assertion of or defence against legal claims,or where such retention is otherwise required or permitted by law.In these cases,the duration of the restriction of processing depends on the respective statutory limitation or retention periods.The data will be deleted after the relevant limitation or retention periods have expired.
The specific retention periods for personal data are documented in our regional data retention guidelines.How long we retain personal data may vary depending on the Services we provide and our legal obligations under applicable national law.
8.Rights as a data subject
Subject to possible restrictions under national law,as a data subject,you have the right to access,rectification,erasure,restriction of processing and data portability with regard to your personal data.In addition,you can withdraw your consent and object to our processing of your personal data on the basis of our legitimate interests.You can also lodge a complaint with a supervisory authority.
Exercising your rights and managing your settings
You can exercise your rights as a data subject via our Privacy Contact Page.In addition,you are of course free to contact the our Privacy team or the controller who is responsible for the processing of your personal data at any time.
The exercise of the above data subjects' rights (e.g.right to access or erasure) is generally free of charge.Where requests are manifestly unfounded or excessive,in particular because of their repetitive character,we may charge an appropriate fee (at most our actual costs),in accordance with the applicable statutory regulations,or refuse to process the application.
9.Cookies & similar technologies
When you use our Services, we and selected third parties use cookies and similar technologies to provide you with a better, faster and safer user experience or to show you personalised advertising. Cookies are small text files that are automatically created by your browser and stored on your device when you use the Services.
The cookies and similar technologies used in connection with the Services have different functions:
l They may be technically necessary for the provision of our Services
l They help us optimise our Services technically (e.g. monitoring of error messages and loading times)
l They help us improve your user experience (e.g. saving font size and form data entered)
l They allow us to show you more relevant advertisements
We use cookies and similar technologies that remain on your device only as long as your browser is active (session cookies), as well as cookies and similar technologies that remain on your device longer (persistent cookies). We take appropriate security measures to prevent unauthorised access to our cookies and similar technologies.
You are also free to disable the use of cookies and similar technologies if this is supported by your device. You can manage your cookie settings in your browser or device settings.
If you decide not to allow third parties to process your personal data for advertising purposes via cookies (and similar technologies), this does not mean that we will not show you advertisements. It simply means that these advertisements will not be personalised for you using cookies, web beacons, or similar technologies.
10.Data security
We protect your personal data through technical and organisational security measures to minimise risks associated with data loss, misuse, unauthorised access and unauthorised disclosure and alteration. To this end we use firewalls and data encryption, for example, as well as physical access restrictions for our data centres and authorisation controls for data access. You can find further information on our data security in our Security Center.
11. Other important information regarding data protection
This section contains important additional information about the protection of personal data in connection with the use of our Services, including whether you are required to provide personal data.
What happens when you share your personal data on our sites or applications?
Other users have access to the information you share on or disclose to other users. For example, other users can see your bids, purchases, items for sale, saved interests, sellers and searches, shopfronts, Feedback, ratings, product reviews and associated comments. Other users can also see any information you choose to share in your profile.
When you use our Services, your public username may be displayed and available to the public and associated with all of your public activity. Notices sent to other users about suspicious activity and notice violations on our sites may refer to your public username and specific items. Accordingly, if you use a username that allows others to identify you, these others may be able to identify your activities.
To help protect your personal data, we allow only limited access to other users' contact, postage and financial information as necessary to facilitate your transactions and collect payments. However, when users are involved in a transaction, they have access to each other's name, username, (alias) email address and other contact and postage information. For example, we may allow users to exchange telephone numbers in order to contact each other prior to completing a transaction (e.g. a seller may opt to share their telephone number with a buyer so that the buyer may call with questions about a listed item). In this case, sellers are prohibited from using a buyer's telephone number for other purposes
Your responsibilities over transactional information you receive through our website
When you complete a transaction with another user (or a transaction has been cancelled, failed or subsequently invalidated), we will provide you with the other user's personal data (such as name, username, (alias) email address, contact information, postage and billing information, or return address). Independent from us, you are the controller of such data and responsible for any processing that you perform after we have shared this data with you, including compliance with any limitations imposed by this Privacy Policy and our User Agreement.
Unless you act for purely personal purposes, we recommend that you explain your data processing activities in your own privacy notice and protect the privacy of other users. As a seller, you must in any case comply with the applicable data protection laws and in particular protect the rights of other users as data subjects, e.g. give them the opportunity to access the personal data collected by you and demand that it be erased.
You may only use the personal data that you have access to for transaction-related purposes, or for other Services offered through our website (such as postage, fraud complaints, and member-to-member communications), and for purposes expressly consented by the user to whom the data relates. Using personal data of other users that you have access to for any other purpose, such as adding them to a mailing list without their express consent, constitutes a violation of our User Agreement.
Personal data relating to third parties
If you provide us with personal data relating to another person, you must obtain the consent of this person or the disclosure of the data to us must be otherwise legally permissible. You must inform the other person of how we process personal data in accordance with our Privacy Policy.
Filtering of messages sent via our messaging tools
All messages sent via our messaging tools are first received by us and then forwarded to the recipient. All messages are automatically filtered according to certain criteria. If necessary, conspicuous messages are checked manually by our customer service. In the event of a violation of our User Agreement (including any of our rules and policies), we reserve the right to block the transmission of the message and to restrict the purchase and sales functions of your eaccount or to block your account.
This is to protect our legitimate interests such as protecting against fraudulent or suspicious activities (e.g. spam, viruses, phishing or other illegal activities) or enforcing our User Agreement and our other rules and policies. (e.g. illegal and other prohibited content), including but not limited to enforcing the prohibition of purchases and sales outside of our website.
Are you obliged to provide your personal data to us?
Some of the personal data that you provide to us (e.g. data by which we can identify you) are required to enter into the User Agreement and the Term of Service. For example, under the Term of Service you must provide us with certain identification information including legal name, date of birth, and tax identification number or social security number so that we may fulfill our legal "Know Your Customer" (KYC) obligations. As described elsewhere in our Privacy Policy and in the Term of Service, we may share this data with ourgroup companies in order to facilitate transactions and with service providers, including payment processors, credit agencies and bureaus. Although the provision of any other personal data (e.g. address and shipping data) is voluntary, it may be necessary for the use of our Services, such as bidding, purchase and sales data to complete a transaction.
Children's Privacy
Our services are not intended for use by children. We do not knowingly collect personal data from users who are considered children under applicable national laws. Under our User Agreement, children are not permitted to use our Services.