Privacy policy

[Identity and contact of the data controller.]

[Categories of data: identity, contact, KYC documents (ID, bank details), bidding activity, technical data.]

[Purposes: account management, identity verification, running auctions, legal obligations.]

[Legal bases under GDPR: contract, legal obligation, consent, legitimate interest.]

[Who can access data: platform, sale organisers (only for their sales), no third-party advertising.]

[Retention periods for each category of data.]

[Security measures: documents stored outside the web root, restricted access, encryption in transit.]

[GDPR rights: access, rectification, erasure, restriction, portability, objection, and how to exercise them.]

[Contact for privacy requests and right to lodge a complaint with the supervisory authority.]