Delivery data: address, pickup point, recipient details.
Technical data: IP address, device identifiers, logs, cookie IDs.
Seller verification data (if applicable): registration details, representative identity data, bank verification.
4. Purposes and legal bases
We process data:
to provide Platform services (GDPR Art. 6(1)(b))
to comply with legal obligations (GDPR Art. 6(1)(c))
for legitimate interests (security, fraud prevention, analytics) (GDPR Art. 6(1)(f))
for marketing communications (newsletter) where required, based on consent (GDPR Art. 6(1)(a))
5. Recipients of data
We may share data with:
payment service providers: (providers)
hosting/infrastructure providers: (provider)
email/SMS and customer support tools: (providers)
analytics tools (if used): (tools)
public authorities when required by law Buyer order data is shared with the relevant Seller for fulfilment, returns, and warranty handling.
6. International transfers
If data are transferred outside the EEA, we use appropriate safeguards (e.g., Standard Contractual Clauses) and apply additional measures where necessary.
7. Data retention
account data: for the duration of the account and up to (… months/years) after closure
invoices/transaction records: for (… years) as required by law
logs/security data: for (… days/months) unless needed for investigations
8. Your rights
You have the right to access, rectify, erase, restrict, port, object (where applicable), and withdraw consent at any time. You may lodge a complaint with your local supervisory authority or the authority in (country).
9. Automated decision-making
We do not use automated decision-making producing legal effects, unless explicitly stated and GDPR-compliant.
10. Security
We apply technical and organisational measures (e.g., encryption in transit, access controls, backups).
11. Cookies
Details are provided in the Cookie Policy.
12. Changes to this policy
We may update this policy; the current version is always available on the Platform.
