Sign up | Log in Sell now Sell now Sign up | Log in Your Guide to Vinted Categories Women Men Kids Discover How it works Get the App Help Center Infoboard Company About us Jobs Press Advertising Policies Trust and Safety Privacy Terms Cookie policy Privacy Cookie settings Community Forum <ul>
<li>Women See all Clothes Shoes Bags Accessories Beauty See all Clothes Shoes Bags Accessories Beauty See all Coats &.
jackets Sweaters Suits &.
blazers Dresses Skirts Tops &.
t-shirts Jeans Pants &.
leggings Shorts &.
capri pants Jumpsuits &.
rompers Swimwear Lingerie &.
nightwear Maternity clothes Activewear Costumes &.
special outfits Other clothing See all Boots Heels Flats Oxfords &.
loafers Ankle boots Sandals Sports shoes Flip-flops Slippers Other shoes See all Handbags Shoulder bags Backpacks Tote bags Clutches Purses &.
wallets Makeup bags Satchels Fanny packs Patterned &.
embroidered bags Holdalls Luggage &.
suitcases Other bags See all Jewelry Watches Belts Sunglasses Scarves &.
shawls Gloves Hats &.
caps Hair accessories Tech accessories Umbrellas Keyrings Other accessories See all Makeup Perfume Face care Beauty tools Hand care Nail care Body care Hair care Other beauty items </li>
<li>Men See all Clothes Shoes Accessories Grooming See all Clothes Shoes Accessories Grooming See all Jeans Coats &.
jackets Tops &.
t-shirts Suits &.
blazers Sweaters Pants Shorts Socks &.
underwear Swimwear Activewear Costumes &.
special outfits Other men's clothing See all Oxfords &.
loafers Slippers &.
flip-flops Formal shoes Sneakers &.
chucks Sport shoes Sandals Boots Other shoes See all Ties &.
Pocket squares Bags &.
Backpacks Jewellery Belts Watches Sunglasses Hats &.
caps Scarves &.
shawls Gloves Other See all Face care Tools &.
accessories Hair care Body care Hand &.
nail care Cologne Make-up Grooming kits Other grooming items </li>
<li>Kids See all Girls' clothing Boys' clothing Toys &.
games Baby care Strollers Ride-on toys Car seats &.
chairs Kids' furniture School supplies Other kids' items See all Girls' clothing Boys' clothing Toys &.
games Baby care Strollers Ride-on toys Car seats &.
chairs Kids' furniture School supplies Other kids' items See all Baby clothing Shoes Coats &.
jackets Sweaters &.
hoodies Tops &.
t-shirts Dresses Skirts Trousers &.
shorts Bags &.
backpacks Accessories Swimwear Underwear &.
socks Sleepwear Sportswear Clothing bundles Clothing for twins Fancy dress &.
costumes Other girls' clothing See all Baby clothing Shoes Coats &.
jackets Sweaters &.
hoodies Tops &.
t-shirts Pants &.
overalls Bags &.
backpacks Accessories Swimwear Underwear &.
socks Sleepwear Sportswear Clothing bundles Clothing for twins Fancy dress &.
costumes Other boys' clothing See all Games Jigsaws &.
Puzzles Toys Gaming consoles &.
video games See all Sleep accessories Nursing &.
feeding Baby carriers &.
wraps Swimming equipment Diapers &.
skincare Childcare accessories &.
tech Bouncers &.
swings Bibs Potties Childproofing &.
safety See all Umbrella strollers Sport strollers Universal strollers Strollers for twins Accessories for strollers See all Baby walkers Push &.
pull toys Kids' bike seats &.
trailers Scooters Tricycles Bicycles Outdoor vehicles Sledges, skis &.
snowboards Roller skates &.
ice skates See all Car seats Feeding chairs See all Cradles Cribs Toddler beds Mattresses Playmats Playpens Changing pads &.
tables Other kids' furniture See all Children's books Literature for parents School books School bags School supplies See all </li>
<li>About Discover How it works Get the App Help Center Infoboard Company About us Jobs Press Advertising Policies Trust and Safety Privacy Terms Cookie policy Privacy Cookie settings Community Forum </li>
</ul> <img height="1" width="1" style="display:none;" alt="" src="https://analytics.twitter.com/i/adsct?txn_id=l4tre&p_id=Twitter" />.
<img height="1" width="1" style="display:none;" alt="" src="//t.co/i/adsct?txn_id=l4tre&p_id=Twitter" />.
Vinted - Data Protection Statement <p>Vinted - Data Protection Statement</p>
Vinted - Privacy Policy
<p>
<em>Date last updated: 2020-11-26</em>
</p>
1.
General
<p>This Privacy Policy applies to the online platforms Vinted.fr, Vinted.es, Vinted.nl, Vinted.be, Vinted.lu, Vinted.lt, Musumazyliai.lt Vinted.cz, Vinted.pl, Vinted.de, Vinted.co.uk, Vinted.com, Kleiderkreisel.de, Kleiderkreisel.at, Mamikreisel.de, Mamikreisel.at (“Website”) and to the associated app (“App”).
Vinted.fr, Vinted.es, Vinted.nl, Vinted.be, Vinted.lu, Vinted.lt, Vinted.cz, Vinted.pl, Vinted.de and Vinted.co.uk online platforms are operated by Vinted, UAB, Švitrigailos st.
13, LT-03228 Vilnius, Republic of Lithuania.
Kleiderkreisel.de, Kleiderkreisel.at, Mamikreisel.de, Mamikreisel.at online platforms are operated by Kleiderkreisel GmbH, Wallstraße 65, 10179 Berlin, Germany, and Vinted.com online platform is operated by Vinted Inc, a company registered in Delaware, with business location at C/o AG Accounting 735 Geary St.
#303 San Francisco, CA 94109.
(hereinafter jointly referred to as “Us”, “We” or “Vinted”).
Unless otherwise specified under specific sections, this Privacy Policy applies to all of our Platforms.
More details about how to get in contact with us can be found at the end of this Privacy Policy under no.
7.</p>
<p>We take your privacy extremely seriously.
All data will be collected, stored and used by us in accordance with the European Union General Data Protection Regulation No.
2016/679 (“<strong>GDPR</strong>”), other statutory regulations.</p>
<p>The services offered by us via the Website and/or App (jointly "<strong>Platform</strong>") can function only if we collect, store, transfer, delete and/or otherwise use ("<strong>collect and use</strong>") specific data relating to you.
Personal data means all information relating to an identified or identifiable natural person such as your name, date of birth, address or email address.</p>
<p>This Privacy Policy describes which of your data we collect and for what purposes we collect and use it when you use the services offered by us on the Platform.
This Privacy Policy also contains important information on the protection of your data, especially the statutory rights you have in connection with it.</p>
<p>Certain services on our Platform are offered by third-party suppliers.
When you use these services, the data protection regulations of the third-party suppliers will then apply in addition to this data protection statement.
Prior to your use of such services, the third-party suppliers may require you to provide permission under data protection law.</p>
<p>Under applicable data protection laws, Vinted is obligated to inform you about data processing and Vinted fulfills this obligation within this Privacy Policy.
This Privacy Policy and any parts of it are not meant as contractual clauses and do not become part of the general terms and conditions ("<strong>GTC</strong>") as a contract that is concluded with registered users.
Under applicable data protection laws, Vinted can process data that is necessary for the performance of a contract with you or necessary for taking steps at the request of you prior to entering into a contract (Art.
6 (1) (b) GDPR).
References to the GTC should at all times be understood as information on data processing (Art.
13 and 14 GDPR) and never as clauses that become part of the GTC.
By using the Platform and our services, you enter into a legally binding contract between you and Vinted conditions of which are described in the GTC.</p>
2.
Why and how do we collect and use your data?
2.1.
To enable you to use the Platform, allow us to provide our services and perform our GTC
<p>We collect and use your personal data to allow you to use our Platform, to provide our services and to perform a contract (GTC) with you and especially to undertake commercial transactions via the Platform, to use the electronic payment system or to leave reviews and communicate with other members.
To use these services, you need a Vinted account.
For this purpose, you must register as a member on the Website or App.</p>
<p>Most of your personal data are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you.
Part of your data are required to fulfill our legal obligations when you are a member of our Platform.
In case you do not provide us with this personal data, we will not be able to comply with legal requirements and provide our services.</p>
<p>This data is also used for improvement of the Platform in order to make it a better experience for our members (see 2.2.12).</p>
<p>Vinted collects your personal data to allow you to use our Platform, to provide our services and to perform a contract (GTC) with you and keeps it for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.1.1.
To enable registration on the Platform
<p>When you register as a member on the Platform, you must provide the following data in order to carry out the registration procedure and access your Vinted account:</p>
<ol>
<li>User name (necessary when you register without a Facebook or Google account);</li>
<li>Email address;</li>
<li>Confirmation that you are aged over 18;</li>
<li>If you register on Vinted.pl Platform - your full name;</li>
<li>Password (necessary when you register without a Facebook or Google account).</li>
</ol>
<p>Legal basis for the collection and use of data is the performance of a contract (GTC) to which you are party or in order to take steps at your request prior to entering into a contract (GTC) (Art.
6 (1) (b) of the GDPR).</p>
<p>We also determine your location at the time of registration to show on your profile.
You can at any time choose to change your location (country, city or region) and make your city or region not visible to other members under "My settings" in your Vinted account.</p>
<p>Personal data collected and used for this purpose are kept for as long as we keep your Vinted account – for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.1.2.
To authenticate you via Google and Facebook
<p>If you register using your Google Ireland Ltd.
(Ireland), Google LLC (USA) (“<strong>Google</strong>”) or Facebook Ireland Ltd.
(Ireland), Facebook, Inc.
(USA) (“<strong>Facebook</strong>”) account or later on decide to connect your Google and/or Facebook account to your Vinted account, you will be transferred from our Website or App to the website of Facebook or Google and asked to enter the log-in details for your Facebook or Google account.</p>
<p>If you enter your Google log-in details, Vinted will receive from Google the following data from your Google account (you may choose not to provide some data):</p>
<ol>
<li>Profile photo;</li>
<li>First name and surname;</li>
<li>Google account ID;</li>
<li>Email address;</li>
<li> </li>
</ol>
<p>If you enter your Facebook log-in details, Vinted will receive from Facebook the following data from your Facebook account (you may choose not to provide your email address and/or date of birth):</p>
<ol>
<li>Profile photo;</li>
<li>First name and surname;</li>
<li>Gender;</li>
<li>Email address;</li>
<li>Date of birth.</li>
</ol>
<p>The data we obtain from Facebook or Google will be used to set up your Vinted account.
This means that we will use the member name of your Facebook or Google account as the member name for your Vinted account so that it will be visible to other visitors to the Website and users of the App.
Other data obtained from Facebook or Google will not be visible to anyone on the Platform.</p>
<p>You can at any time undo the link with your Facebook or Google account.
This can be done under "My settings" in your Vinted account.
If, however, when you initially registered, you did so without linking to your Facebook or Google account, you can create this link later.</p>
<p>Collection and use of data is based on your consent (Art.
6 (1) (a) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for as long as we keep your Vinted account – for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.1.3.
To enable you to set up your profile information
<p>If you decide to add profile details to the account you create on the Platform, we collect and use the following data when you choose to provide it:</p>
<ol>
<li>Full name;</li>
<li>Gender;</li>
<li>Date of birth;</li>
<li>Profile photo;</li>
<li>Whether you have enabled the Holiday Mode;</li>
<li>Your favorite items;</li>
<li>Information that you choose to provide in the “About You” field.</li>
</ol>
<p>Your profile photo, information on whether you have enabled the Holiday Mode and the information you provide in the "About You" field are visible to other visitors of the Platform, but the remainder of the data entered by you is not visible.</p>
<p>Legal basis for such collection and use is your consent (Art.
6 (1) (a) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for as long as we keep your Vinted account – for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.1.4.
To show other members relevant information regarding your activity on the Platform
<p>When you are a registered member on the Platform, we collect, use and make public on the Platform the following information for the purpose of providing other members with the relevant information:</p>
<ol>
<li>Last login date;</li>
<li>Verification fact;</li>
<li>Number and member names of followers;</li>
<li>Number and member names of members followed;</li>
<li> </li>
</ol>
<p>Legal basis for such collection and use is our legitimate interest to ensure that our members would access important information about each other (Art.
6 (1) (f) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for as long as we keep your Vinted account – for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.1.5.
To enable you to list your items
<p>If you list items on the Platform, we will collect and use the following data for the purpose of creating and publishing listings on the Platform (list of required information differs depending on the chosen item category):</p>
<ol>
<li>Item title;</li>
<li>Item description;</li>
<li>Item category;</li>
<li>Item brand;</li>
<li>Item condition;</li>
<li>Item size;</li>
<li>Item colour;</li>
<li>Item material;</li>
<li>Item photos;</li>
<li>ISBN (when you sell or swap books);</li>
<li>Information whether the item is unisex;</li>
<li>Price;</li>
<li>Discount;</li>
<li>Information on whether you are interested in swapping your items;</li>
<li>Information whether item is marked as reserved;</li>
<li>Shipping options.</li>
</ol>
<p>If you list items in Poland, we will, in addition to other personal data described above, we collect and use your phone number.</p>
<p>Legal basis for such collection and use is your consent (Art.
6 (1) (a) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for 18 months and 7 days of inactivity.
Photos are kept for 3 months after the item is deleted.</p>
2.1.6.
To enable notifications for you
<p>When you are a registered member on the Platform, we will provide you with notifications regarding your new followers, your favorited items, your activity on the forum and other important messages.</p>
<p>Legal basis for the collection and use of data is the performance of a contract (GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for as long as we keep your Vinted account – for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.1.7.
To enable you to communicate with other members
<p>If you communicate with other members on the Platform, we collect and use the following data:</p>
<ol>
<li>Name of the member you are communicating with;</li>
<li>Messages;</li>
<li>Date and time of messages;</li>
<li>Shared photos;</li>
<li>Your device;</li>
<li>Information whether another member seen your message;</li>
<li>Other data submitted in messages.</li>
</ol>
<p>Legal basis for the collection and use of data is the performance of a contract (GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for as long as we keep your Vinted account – for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.1.8.
To enable you to leave reviews to other members on the Platform
<p>If you leave reviews to other members, Vinted collect and use the following data for the purpose of making reviews publicly available on the Platform:</p>
<ol>
<li>Review;</li>
<li>Star rating;</li>
<li>Member name;</li>
<li>Date and time of the review;</li>
<li>Reply to the review.</li>
</ol>
<p>Legal basis for such collection and use is your consent (Art.
6 (1) (a) of the GDPR).</p>
<p>You can, at any time, edit or delete your reviews left to other members.</p>
<p>Personal data collected and used for this purpose are kept for as long as we keep your Vinted account – for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.1.9.
To receive reviews from other members
<p>When you receive reviews from other members, we will collect and use the following data for the purpose of making reviews publicly available on the Platform:</p>
<ol>
<li>Review;</li>
<li>Star rating;</li>
<li>Member name;</li>
<li>Date and time of the review</li>
<li>Your reply to the review.</li>
</ol>
<p>Legal basis for such collection and use is the legitimate interest of our members and Vinted to build trust among Vinted members (Art.
6 (1) (f) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for as long as we keep your Vinted account – for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.1.10.
To enable you to post in the forum and discuss with our community
<p>The Vinted forum is where our community comes to talk and help each other by sharing experience and tips.
You can create new forum topics or post comments in our forum.
We collect and use the following data which you voluntarily submit on the Platform:</p>
<ol>
<li>Your member name;</li>
<li>Your picture;</li>
<li>Your created forum topics;</li>
<li>Your forum posts;</li>
<li>Photos shared in your post;</li>
<li>Date and time of your post;</li>
<li>Total number of your posts on the Platform;</li>
<li>Your device;</li>
<li>Likes under your post;</li>
<li>Your likes under other members’ posts;</li>
<li>Your favorite forum topics.</li>
</ol>
<p>If you select to post anonymously, your member name/picture won't be visible to other members.
However, your identity will still be visible to the Vinted team.</p>
<p>Legal basis for such collection and use is your consent (Art.
6 (1) (a) of the GDPR).</p>
<p>You can delete your own forum topics and posts at any time.</p>
<p>Personal data collected and used for this purpose are kept for as long as we keep your Vinted account – for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.1.11.
To send you important communication regarding the Platform
<p>If you register on the Platform, we will send you e-mails and messages via the Platform’s messaging system for the purpose of providing important notifications e.g. GTC, Privacy Policy changes.</p>
<p>Legal basis for the collection and use of data is the performance of a contract (compliance with our GTC) to which you are party (Art.
6 (1) (b) of the GDPR) and compliance with the legal obligations to which Vinted is subject (Art.
6 (1) (c) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for as long as we keep your Vinted account – for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.1.12.
To send you offers via the Platform’s messaging system
<p>If you register on the Platform, we will send you offers related to Vinted services via the Platform’s messaging system (“Offers”).</p>
<p>Legal basis for the collection and use of data is our legitimate interest to provide offers to our members (Art.
6 (1) (f) of the GDPR, Art.
13 (2) of Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications), Art.
69 (2) of Lithuanian Law on Electronic Communications).</p>
<p>Personal data collected and used for this purpose are kept for as long as we keep your Vinted account – for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.1.13.
To provide you with customer support service
<p>If you send us query, request or complaint, we will collect and use the following data for the purpose of providing you with customer support services you request on the Platform:</p>
<ol>
<li>Your profile information;</li>
<li>Platform usage information;</li>
<li>Transaction information;</li>
<li>Shipment information;</li>
<li>Communications;</li>
<li>Age;</li>
<li>Gender;</li>
<li>IP address;</li>
<li>Session information;</li>
<li>Item listings, photos and videos;</li>
<li>Inquiries;</li>
<li>Other information submitted by you.</li>
</ol>
<p>The type of information we collect can vary depending on your inquiry.</p>
<p>Legal basis for the collection and use of data is the performance of a contract (GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>In order to respond to your inquiries, Vinted provides your data to service partners which provide customer support services:</p>
<ol>
<li>Transcom Worldwide Italy SpA (Italy) (if you use our .fr, .es, .be, .nl, .lu, .de or .at Platforms);</li>
<li>Transcom Worldwide Spain S.L.U (Spain) (if you use our .es Platform);</li>
<li>Transcom Worldwide Poland sp.
Z.o.o.
(Poland) (if you use our .pl or .fr Platforms);</li>
<li>UAB Transcom Worldwide Vilnius (Lithuania) (if you use our .fr, .es, .be, .nl, .lu, .de or .at Platforms);</li>
<li>Transcom Worldwide Portugal, S.L.U (Portugal) (if you use our .fr Platform);</li>
<li>Transcom Worldwide Albania SH.P.K.
(Albania) (if you use our .fr Platform);</li>
<li>Transcom Worldwide Tunis Sarl (Tunisia) (if you use our .fr, .es, .be, .nl, .lu, .de or .at Platforms);</li>
<li>Tunis Call Center (Tunisia) (if you use our .fr Platform);</li>
<li>Phoneact S.A.R.L (Tunisia) (if you use our .fr Platform);</li>
<li>Conectys Serv Telecom SRL (Romania) (if you use our .fr Platform);</li>
<li>UAB „Planas chuliganas” (Lithuania) (if you use our .fr, .es, .be, .nl, .lu, .de or .at Platforms).</li>
</ol>
<p>If you receive customer support on our .fr, .es, .be, .nl, .lu, .de or .at Platform, this results in your data being shared with our customer support agents outside the European Economic Area.
In this case the data is protected by the service providers entering into the EU standard contractual clauses for the transfer of data as approved by the European Commission.</p>
<p>Personal data collected and used for this purpose are kept for 2 years.</p>
2.1.14.
To resolve any purchase-related disputes between members
<p>If you purchase and/or sell and/or swap items on the platform and get involved in a dispute with another member, we will collect and use any of your personal data held by Vinted necessary to solve the dispute.</p>
<p>We base such collection and use on a legitimate interest to settle disputes between our members and defend the rights and interests of Vinted (Art.
6 (1) (f) of the GDPR) and, where relevant, compliance with the legal obligations to which Vinted is subject (Art.
6 (1) (c) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for 1 year after a dispute is concluded.</p>
2.1.15.
To retain temporarily your deleted account
<p>If you decide to delete your account, we will take reasonable efforts to make sure it is no longer viewable on the Platform and restrict the use of your data.
For up to 3 months it is still possible to restore your account if it was accidentally or wrongfully deactivated or in case you change your mind and wish to return to the Platform and take action in case someone else would gain access to your account and delete it without your knowledge.</p>
<p>Legal basis for such storage of your data is our legitimate of Vinted and our members to restore your account when necessary (Art.
6 (1) (f) of the GDPR) and, where relevant, compliance with the legal obligations to which Vinted is subject (Art.
6 (1) (c) of the GDPR).</p>
<p>Personal data are kept for this purpose for 3 months from the date of deletion of your Vinted account.
After 3 months we delete your account from our Platform.</p>
2.1.16.
To transfer your Chicfy account to Vinted Platform
<p>If you are a former Chicfy user and decide to transfer your profile from Chicfy operated by Chicfy S.L.
(Spain) and create an account with Vinted as mentioned in section 2.1.1, Vinted receives from Chicfy:</p>
<ol>
<li>E-mail address;</li>
<li>Consent fact;</li>
<li>Time of the consent;</li>
<li>Consent text.</li>
</ol>
<p>Legal basis for such collection and use is your consent (Art.
6 (1) (a) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for two years after finishing the integration of your profile.</p>
<p>When you created a Vinted account after giving your consent, the following personal data: your listing images, listing titles, listing descriptions, anonymised review rating, and review details were transferred from Chicfy to Vinted.</p>
<p>Legal basis for such collection and use of data is the performance of a contract (GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>Vinted collects your personal data to allow you to use our Platform, to provide our services and to perform a contract (GTC) with you and keeps it for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.1.17. To transfer your United Wardrobe account to Vinted Platform
<p>If you are a former United Wardrobe user and decide to transfer your profile from United Wardrobe operated by Vinted B.V (former United Wardrobe B.V.
(Netherlands)) by giving your consent and create an account with Vinted as mentioned in section 2.1.1, Vinted receives the following (personal) data from United Wardrobe:</p>
<ol>
<li>E-mail address;</li>
<li>Consent fact;</li>
<li>Time of the consent;</li>
<li>Consent text.</li>
</ol>
<p>Legal basis for such collection and use is your consent (Art.
6 (1) (a) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for two years after finishing the integration of your profile.</p>
<p>On December 22, 2020 the United Wardrobe platform will go offline.
This means that if you haven't given your consent to transfer your profile before December 22, 2020, United Wardrobe will only transfer your email address on December 22, 2020 date to Vinted.
This is done in order to enable users, who have missed the deadline of December 22, 2020, to still have their profile transferred from United Wardrobe to Vinted.
For this purpose, it is important to use the same email address you used on the United Wardrobe platform.
By doing so Vinted will be able to give you the option to have your profile transferred.
If you consent, Vinted will be able to access your information on United Wardrobe and transfer it to your Vinted account.
This option will be available until ultimately October 27, 2021.</p>
<p>The legal basis for such collection and use of your email address is our legitimate interest to ensure the successful user migration process from United Wardrobe to Vinted (Art.
6 (1) (f) of the GDPR).</p>
<p>When you create a Vinted account, the following personal data will be transferred from United Wardrobe to Vinted: your name, profile picture, date of birth, gender, listing images, listing titles, listing descriptions, listing prices, review ratings, review details, your followers and your favourite items.</p>
<p>Legal basis for such collection and use of data is the performance of a contract (GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>
<em>Essence of the arrangement between Vinted and United Wardrobe on joint responsibilities (Art.
26 (2) sentence 2 of the GDPR)</em>
</p>
<p>In order to ensure a smooth migration and transfer from the United Wardrobe Platform to the Vinted platform, both Vinted and United Wardrobe will gain access to certain personal data, the handling of which will fall within United Wardrobe’s and Vinted's joint responsibility.
Therefore, from 27 October 2020 until ultimately 27 October 2021, United Wardrobe and Vinted will act as joint controllers.</p>
<p>We would like to inform you about the essence of our arrangement on joint responsibilities with United Wardrobe, in accordance with Art.
26 of the GDPR.
Since there are two controllers, we want to explain to you who is responsible for what of the processing of your data.</p>
<p>From the start of the migration period, on October 27, 2020 until December 22, 2020 all ongoing transactions (both sales and purchases) will be completed on the United Wardrobe’s platform.
After December 22, 2020 the United Wardrobe platform will go offline.
During the entire migration period from October 27, 2020 until ultimately October 27, 2021 United Wardrobe will be responsible for the transfer of your user information from United Wardrobe to Vinted.</p>
<p>During and after the migration period Vinted will be responsible for retrieving your personal information, which has been transferred by United Wardrobe.
Once you have migrated your user information, all new transactions (both sales and purchases) will be made on the Vinted platform.</p>
<p>Vinted is responsible for informing you about the processing of your personal data in accordance with Art.
13 and Art.
14 of the GDPR, which is provided to you above this section in this Privacy Policy.
In addition, Vinted is also responsible for providing you with the essence of the arrangement between Vinted and United Wardrobe, in accordance with Art.
26 (2) sentence 2 of the GDPR.</p>
<p>Contact point for exercising rights: For any request to exercise your right or any claim relating to the aforementioned data collection and use, you should directly address Vinted as we are the main contact point (Art.
26 (1) sentence 3 of the GDPR) for such matters.
Your rights in this context means the right to request from the controller access (Art.
15 of the GDPR) to and rectification (Art.
16 of the GDPR) or erasure of personal data (Art.
17 GDPR) or restriction of processing concerning you (Art.
18 GDPR) or to object to processing (Art.
21 of the GDPR) as well as the right to data portability (Art.
20 GDPR). </p>
<p>Vinted collects your personal data to allow you to use our Platform, to provide our services and to perform a contract (GTC) with you and keeps it for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.1.18.
To transfer your Kleiderkreisel account to Vinted, UAB
<p>If you are a Kleiderkreisel user and decide to transfer your profile from Kleiderkreisel operated by Kleiderkreisel GmbH (Germany) by giving your consent and create an account on a platform operated by Vinted, UAB as mentioned in section 2.1.1, Vinted, UAB receives the following (personal) data from Kleiderkreisel:</p>
<ol>
<li>E-mail address;</li>
<li>Full name;</li>
<li>Consent fact;</li>
<li>Time of the consent;</li>
<li>Consent text;</li>
<li>Funds in your balance;</li>
<li>Date of Birth;</li>
<li>Address;</li>
<li>Bank account number;</li>
<li>First six and last four digits of your credit card number;</li>
<li>Expiration date;</li>
<li>Billing address;</li>
<li>Delivery options;</li>
<li>Shipping history.</li>
</ol>
<p>Legal basis for such collection and use is your consent (Art.
6 (1) (a) of the GDPR).</p>
<p>When you create an account on a platform operated by Vinted, UAB, the following personal data will be transferred from Kleiderkreisel to Vinted, UAB: your profile picture, information that you choose to provide in the “About You” field, listing images, listing titles, listing descriptions, listing prices, review ratings, review details, favourite items, vouchers, saved searches and your followers.</p>
<p>Legal basis for such collection and use of data is the performance of a contract (GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>Vinted, UAB collects your personal data to allow you to use platform, to provide services and to perform a contract (GTC) with you and keeps it for as long as Vinted, UAB keeps your account on a platform operated by Vinted, UAB - for 3 months from the date of deletion of your account on a platform operated by Vinted, UAB or for 5 years and 3 months of inactivity on your account.</p>
<p>The data related to blocking of Kleiderkreisel banned accounts, such as user device fingerprint data and account verification data are transferred from Kleiderkreisel to Vinted, UAB.</p>
<p>The legal basis for such collection and use is our legitimate interest to ensure the security of Vinted platform and other users (Art.
6 (1) (f) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for 3 months from the moment you have been blocked.</p>
<p>
<em>Essence of the arrangement between Vinted, UAB and Kleiderkreisel on joint responsibilities (Art.
26 (2) sentence 2 of the GDPR)</em>
</p>
<p>In order to ensure a smooth migration and transfer from Kleiderkreisel platform to the platform operated by Vinted, UAB, both Vinted, UAB and Kleiderkreisel will gain access to certain personal data, the handling of which will fall within Kleiderkreisel and Vinted's, UAB joint responsibility.</p>
<p>Vinted, UAB would like to inform you about the essence of our arrangement on joint responsibilities, in accordance with Art.
26 of the GDPR.
Since there are two controllers, Vinted, UAB wants to explain to you who is responsible for what of the processing of your data.</p>
<p>During the migration period Kleiderkreisel will be responsible for the transfer of your user information from Kleiderkreisel to Vinted, UAB,</p>
<p>During the migration period Vinted, UAB will be responsible for retrieving your personal information, which has been transferred by Kleiderkreisel.</p>
<p>Vinted, UAB is responsible for informing you about the processing of your personal data in accordance with Art.
13 and Art.
14 of the GDPR, which is provided to you above this section in this Privacy Policy.
In addition, Vinted, UAB is also responsible for providing you with the essence of the arrangement between Vinted, UAB and Kleiderkreisel, in accordance with Art.
26 (2) sentence 2 of the GDPR.</p>
<p>Contact point for exercising rights: For any request to exercise your right or any claim relating to the aforementioned data collection and use, you should directly address Vinted, UAB at the following email address: dpo@vinted.de as Vinted, UAB is the main contact point (Art.
26 (1) sentence 3 of the GDPR) for such matters.
If you still need to contact Kleiderkreisel directly, you can contact the data protection officer at the following email addresses: dpo@kleiderkreisel.de or dpo@mamikreisel.de<u>.</u> Your rights in this context means the right to request from the controller access (Art.
15 of the GDPR) to and rectification (Art.
16 of the GDPR) or erasure of personal data (Art.
17 GDPR) or restriction of processing concerning you (Art.
18 GDPR) or to object to processing (Art.
21 of the GDPR) as well as the right to data portability (Art.
20 GDPR).
Vinted, UAB acknowledges that you may, in general, contact either Vinted, UAB or Kleiderkreisel to exercise your respective rights.
Vinted, UAB and Kleiderkreisel will forward your request to the other party where this is needed for fulfilling data subject’s rights.</p>
<p>All other duties under the GDPR are fulfilled by both Vinted, UAB and Kleiderkreisel.
Those other duties do not involve you as a data subject directly, but rather general duties of controllers such as maintaining security measures and keeping a record of processing activities.</p>
2.2.
To improve your experience when using the Platform
<p>We collect and use your personal data in order to improve your experience when using the Platform by enabling you to personalize your feed and search results, providing you relevant suggestions and keeping your previous searches, sending you notifications and otherwise making the use of Platform more pleasant.</p>
<p>Specific applicable legal basis for the collection and use of your data is described in each section below.</p>
<p>This data is also used for improvement of the Platform in order to make it a better experience for our members (see 2.2.12).</p>
2.2.1.
To enable your preferences regarding your feed and search results
<p>If you choose to personalize the items presented to you on the Platform (on item feed, catalog and search results), we will collect and use the following data for the purpose of presenting you a feed personalized according to your preferences:</p>
<ol>
<li>Information whether you are interested in items for women, men or children;</li>
<li>Preferred sizes of the items;</li>
<li>Preferred brands of the items.</li>
</ol>
<p>Legal basis for such collection and use is your consent (Art.
6 (1) (a) of the GDPR).</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.2.2.
To personalize your feed and search results
<p>We also personalize the item feed by evaluating your preferences according to the following:</p>
<ol>
<li>Gender;</li>
<li>Age;</li>
<li>Country;</li>
<li>Language;</li>
<li>Information about your browsing activity on the Plarform;</li>
<li>Purchasing history;</li>
<li>Your preferences.</li>
</ol>
<p>Legal basis for such collection and use is the legitimate interest of Vinted and its members (Art.
6 (1) (f) of the GDPR) to make the Platform more convenient for our members and, due to personalization, allow you to see offers from other members that might interest you the most.</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.2.3.
To prioritize good value items by reputable sellers
<p>In order to determine whether you as a seller offer good value items as a reputable seller we will collect and use the following data of you when you sell your items on the Platform:</p>
<ol>
<li>Number of positive reviews;</li>
<li>Information whether the seller has items that are cheaper than 60% of similar items sold on the Platform (similarity is determined according to item category, brand and condition).</li>
</ol>
<p>We use results to prioritize good value items by reputable sellers when showing items to new members, increase the visibility of items uploaded by members that have chosen the same language as you and/or live in the same country or region, items listed by new members, items that have 3 favorites or more, children’s items that have one or more favorites, items that are bumped, show relevant items on the Platform.</p>
<p>Legal basis for such collection and use is our legitimate interest to prioritize good value items by reputable sellers in order to facilitate sales and member satisfaction on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.2.4.
To suggest you relevant items
<p>If you choose to create item listings on the Platform, we will collect and use data that you provide in the listing (see 2.1.5 above) by analyzing it in order to either offer members that visit your items other relevant items or offer members your items that may be relevant to them.</p>
<p>Legal basis for such collection and use is our legitimate interest to improve the Platform and ensure that our members receive relevant suggestions and search results (Art.
6 (1) (f) of the GDPR).</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.2.5.
To improve search results on the Platform
<p>We collect and use data provided in the listings (see 2.1.5 above) about items with no information related to sellers in order to improve search results by evaluating how relevant are certain items to a specific search keyword.
For this, we only use the item listing with no link to a particular seller.</p>
<p>Legal basis for such collection and use is our legitimate interest to improve the Platform and ensure that our members receive relevant search results (Art.
6 (1) (f) of the GDPR).</p>
<p>Vinted uses self-employed individuals who provide data analysis services to Vinted.</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.2.6.
To save your recent searches
<p>In order to help you find previously searched items on the Platform, we save your search keywords.
We collect and use the following data for the purpose of providing information about newly listed items on the Platform based on the keyword you were looking for previously:</p>
<ol>
<li>Your search history (last 15 searched keywords);</li>
<li>Date and time of your search;</li>
<li>Number of newly listed items.</li>
</ol>
<p>Legal basis for such collection and use is legitimate interest of our members and Vinted to improve search results on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>You can delete your search history at any time.</p>
<p>Personal data collected and used for this purpose are kept for as long as searched keyword is on the list of the last 15 searched keywords, unless you delete your search history.</p>
2.2.7.
To help you to get more attention to your listings
<p>In case you decide to make orders for extra services, i.e bumps and “Wardrobe Spotlight” in order to get more visibility for your items on the Platform, we collect and use the following data:</p>
<ol>
<li>Your profile information;</li>
<li>Extra services you bought;</li>
<li>Items you selected for extra services;</li>
<li>Duration of extra services;</li>
<li>Date and time of extra services you bought;</li>
<li>Price of extra services;</li>
<li>Payments information;</li>
<li>Invoices;</li>
<li>Statistics of your items during extra services usage.</li>
</ol>
<p>Legal basis for the collection and use of data is the performance of a contract (your order for extra features under GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>Personal data are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you.</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.2.8.
To suggest a price when an item listing is created
<p>If you choose to create an item listing on the Platform, our algorithms will analyze its price in addition to item category, item brand and item condition.
We will then use that information to show you pictures and prices of similar items sold in the last three months in order to help you determine the selling price for your item.</p>
<p>If your chosen selling price is bigger than the price range of similar items sold on the Platform in the last three months, Vinted will also give you a tip regarding the recommended price range.</p>
<p>Legal basis for such collection and use is our legitimate interest to help our members to choose the right price for their items (Art.
6 (1) (f) of the GDPR).</p>
<p>To achieve the aforementioned functionality, we collect and use pictures and prices of items sold in the last 3 months. </p>
<p>When you are listing your items, we collect and use the information used to analyze your items for the duration of the item listing process.
When you sell items, we collect and use the data mentioned above for 3 months after the item has been sold.</p>
2.2.9.
To enable notifications about your favorite items
<p>If you favorite an item listed by another member on the Platform, Vinted will inform you when your favorite item price is reduced or when the item is sold.
For this reason, we will collect and use the following data:</p>
<ol>
<li>Title of favorite item;</li>
<li>Photo of favorite item;</li>
<li>Seller of favorite item;</li>
<li>Price of favorite item;</li>
<li>Information whether favorite item is sold;</li>
<li>Information about reduced price.</li>
</ol>
<p>Legal basis for such collection and use is legitimate interest of our members and Vinted to facilitate sales on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.2.10.
To notify sellers when you favorite their items
<p>If you favorite an item on the Platform, Vinted will inform the seller that you have favorited their item.</p>
<p>Legal basis for such collection and use is legitimate interest of our members and Vinted to facilitate sales on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>You can disable the aforementioned notifications by logging in on the Platform, visiting Privacy Settings and changing relevant settings.</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.2.11.
To allow you to follow other members
<p>If your followed member listed a new item on the Platform, we will notify you about it.</p>
<p>Legal basis for such collection and use is your consent (Art.
6 (1) (a) of the GDPR).</p>
<p>You can withdraw your consent by unfollowing members.</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.2.12.
To improve our Platform
<p>Vinted is committed to the best performance of the Platform.
When the Platform is being used, Vinted gathers information about actions performed on the Platform (button clicks, visiting time, notifications read, other information depending on a particular business case) and other data described under 2.1, 2.2, 2.5, 2.6 and 4 of this Privacy Policy in order to help us make decisions on how to improve the Platform and make it a better experience for our members.</p>
<p>Legal basis for such collection and use is our legitimate interest to maintain performance and improve the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.2.13.
To conduct online surveys
<p>We always look for ways to improve your experience when using Vinted.
That is why we might invite you to participate in a survey and use your feedback.
For this reason, we collect and use the following data:</p>
<ol>
<li>User ID;</li>
<li>Your gender;</li>
<li>Your age;</li>
<li>Your live area;</li>
<li>Your responses to our questions (e.g.
your satisfaction with Platform, your needs for Platform, problems that you encounter using Platform).</li>
</ol>
<p>Legal basis for inviting you to participate in the survey is our legitimate interest to receive feedback from our members and use it to improve the Platform (Art.
6 (1) (f) of the GDPR, Art.
13 (2) of Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications), Art.
69 (2) of Lithuanian Law on Electronic Communications).</p>
<p>If you wish to participate in the survey, the information above will be collected based on your consent (Art.
6 (1) (a) of the GDPR).</p>
<p>For our surveys we use a service provider Widgix Limited (United Kingdom).</p>
<p>We will anonymize your responses after 3 months - this means that the responses will no longer be associated with you.</p>
2.2.14.
To conduct on-site interviews
<p>In order to understand our users' needs and improve your experience on the Platform, we conduct on-site interviews with you.
For this reason, we collect and use the following data:</p>
<ol>
<li>User ID;</li>
<li>Your gender;</li>
<li>Your age;</li>
<li>Your interests;</li>
<li>Your interview audio record;</li>
<li>Other data submitted by you during the interview.</li>
</ol>
<p>Legal basis for inviting you to participate in the on-site interview is our legitimate interest to receive feedback from our members and use it to improve the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>If you wish to participate in the survey, the information above will be collected based on your consent (Art.
6 (1) (a) of the GDPR).</p>
<p>We will anonymize your responses after 3 months - this means that the responses will no longer be associated with you.</p>
<strong>2.2.15.
To enable you to share your user journey</strong>
<p>We constantly improve our Platform and look for ways to improve your experience when using Vinted.
In case where you consent, we enable you to share your user journey through our Platform.
We will collect and use the following data:</p>
<ol>
<li>User ID;</li>
<li>Your contact details;</li>
<li>Date and time of the survey;</li>
<li>Category to which you are assigned (e.g.
new member of our Platform);</li>
<li>Your screen recording;</li>
<li>Your voice recording;</li>
<li>Your face recording.</li>
</ol>
<p>Legal basis for inviting you to participate in the sharing of your user journey is our legitimate interest to receive feedback from our members and use it to improve the Platform (Art.
6 (1) (f) of the GDPR.</p>
<p>If you wish to participate in the survey, the information above will be collected based on your consent (Art.
6 (1) (a) of the GDPR).</p>
<p>We will anonymize your responses after 3 months - this means that the responses will no longer be associated with you.</p>
2.3.
To ensure the security of your account and the Platform
<p>Vinted strives to ensure that the accounts of our members and the Platform itself would be secure and protected from cyber attacks, unauthorized access and other related risks.</p>
2.3.1.
To track visits to the Platform for security purposes
<p>When you connect to the Website or App, we collect and use the following data (logfiles), even if you are not logged in to the Website as a member:</p>
<ol>
<li>IP address of your device;</li>
<li>Browser used by your device;</li>
<li>Content and URLs you connect to;</li>
<li>Date and time of your connections.</li>
</ol>
<p>In the event of access via mobile devices, the following log files are also captured as part of your use of the Vinted App:</p>
<ol>
<li>Model and manufacturer of your mobile device;</li>
<li>Operating system used by your mobile device (iOS, Android).</li>
</ol>
<p>This data is used for security purposes, especially the prevention of cyber attacks such as data scraps and denial of service attacks and for preventing impermissible multiple applications.</p>
<p>Legal basis for such collection and use is our legitimate interest to protect the Platform and ensure its security and the legitimate interest of our members to ensure the safety of their accounts on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for 3 months.</p>
2.3.2.
To help you avoid using a compromised password
<p>If you decide to register using a password or later on decide to change your password, we will check it against a database of passwords compromised in previous data breaches that happened on other platforms and services.
To enable this functionality, we take the password, hash it and then use the first 5 characters of the hash to Have I Been Pwned (https://haveibeenpwned.com/) to search in the compromised password database.</p>
<p>By performing this check, we can protect your account by confirming if you are using a password that is not known to be compromised.</p>
<p>Legal basis for such collection and use is our legitimate interest to protect the Platform and ensure its security and the legitimate interest of our members to ensure the safety of their accounts on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>We collect and use personal data for this purpose only for the duration necessary to perform the password check.</p>
2.3.3.
To verify your account in case of suspicious actions related to your account
<p>If we detect actions on your account that Vinted considers suspicious, we will request you to perform a basic verification – confirm your email, Facebook or Google accounts.
For the purpose of performing a basic verification, we will collect and use the following data:</p>
<ol>
<li>Email address.
or</li>
<li>Information received during Facebook or Google authentication (as described 2.1.2 above).</li>
</ol>
<p>Legal basis for such collection and use is our legitimate interest to protect the Platform and ensure its security and the legitimate interest of our members to ensure the safety of their accounts on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.3.4.
To carry out phone number verification and 2-step verification
<p>When you decide to apply an additional layer of protection to your account and activate phone verification, we will use your phone number in order to enable this functionality.
Legal basis for such collection and use is our legitimate interest to offer our users additional measures to protect their account (Art.
6 (1) (f) of the GDPR).</p>
<p>You may also be requested to verify your phone in case of suspicious activities regarding your account.
In that case verification is mandatory and personal data collection and use is based on the performance of a contract (GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>When you verify your phone number, Vinted will collect and use your phone number for 2-step verification purposes.</p>
<p>Personal data for mandatory verification are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you.</p>
<p>In order to carry out phone number verification and 2-step verification, we use a service provider Nexmo Inc.
(USA) that enables us to send you verification messages or make verification calls to dictate verification code when you do not verify your phone number in 5 minutes.
While this results in your data being shared outside the European Economic Area, the data is protected by the service provider entering into the EU Standard Contractual Clauses for the transfer of data as approved by the European Commission.</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.3.5.
To carry out payment source security check
<p>As part of the security process, we request our members to provide a verification of their payment source.
In order to perform such security checks, Vinted collects and uses the following personal data:</p>
<ol>
<li>Username;</li>
<li>When we perform a credit card security check - information contained in a photo of the credit card: full name, card’s expiry date and the last four digits of the card number, other information visible on the front of the card if the member chooses not to cover it;</li>
<li>When we perform a bank account security check - information contained in a photo/screenshot of the bank statement listing the most recent charge/charges: date and description of the last Vinted charge, other payment information if the member chooses not to blur out other information.</li>
</ol>
<p>Legal basis for such collection and use is our legitimate interest to protect the Platform and ensure its security and the legitimate interest of our members to ensure the safety of their accounts on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for 4 days after the security check is passed.</p>
2.3.6.
To carry out PayPal account security check
<p>As part of the security process, we request our members to verify the ownership of their PayPal accounts when there was no actual charge.
As part of this process, Vinted collects and uses the following data:</p>
<ol>
<li>Username;</li>
<li>Registration email address;</li>
<li>Information in the screenshot(s) of PayPal profile: account holder’s full name, address and other visible data.</li>
</ol>
<p>As part of the security process, we also request our members that use PayPal to verify the ownership of their PayPal accounts.
As part of this process, Vinted collects and uses the following data:</p>
<ol>
<li>Username;</li>
<li>Registration email address;</li>
<li>Information in the screenshot(s) of the expanded statement of the most recent Vinted order: date, amount, the account holder’s full name, shipping address and other visible data.</li>
</ol>
<p>Legal basis for such collection and use is our legitimate interest to protect the Platform and ensure its security and the legitimate interest of our members to ensure the safety of their accounts on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for 4 days after the security check is passed.</p>
2.3.7.
To check whether items are genuine
<p>If you list items of premium brands, we collect and use the following data in order to check whether the items are genuine:</p>
<ol>
<li>Information provided in the listing (see 2.1.5 above);</li>
<li>Proof of authenticity: a photo of the receipt, certificate, tag, logo, pattern, stitches, original packaging, date code, authenticity code or any other relevant information that would allow determining the authenticity of the item.</li>
</ol>
<p>Legal basis for such collection and use is our legitimate interest to protect the Platform and our members from replicas (Art.
6 (1) (f) of the GDPR).</p>
<p>We can share photos of listings and other proofs of authenticity without your personal data with premium brand owners in order to check the authenticity of listed items.</p>
<p>Personal data collected and used for this purpose are kept for 2 years.</p>
2.3.8.
To report suicidal posts
<p>In exceptional cases, where we notice suicidal posts on our platform, we may report them to the police.
In such cases we will collect and use and disclose the following data for the purpose of reporting suicidal posts:</p>
<ol>
<li>Username;</li>
<li>E-mail address</li>
<li>Full name;</li>
<li>IP addresses and last logins;</li>
<li>Telephone number (if verified);</li>
<li>Print screen / link of forum post or thread where the declaration of suicide appears.</li>
</ol>
<p>Legal basis for such collection and use is protection of your vital interests (Art.
6 (1)(d) of the GDPR).</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.4.
To supervise compliance with and enforce GTC
<p>Vinted actively supervises compliance with and enforce GTC for the purpose of ensuring the security of your account and the Platform.</p>
2.4.1.
To calculate trust score
<p>In order to ensure the security of the Platform and its members, Vinted carries out automated decision-making and gives each member a "trust score" calculated using an algorithm and maintaining a black base of member’s personal data suggesting unlawful activities.
The "trust score" indicates the likelihood of misuse of the Platform.</p>
<p>Our algorithm takes into account members’ comments on a forum, messages to other members, items listed on the platform, transactions, reports on the member by other members, the member's profile and contact information, the member's violations of our GTC, IP addresses, and browser fingerprints, other content the member provides us with.</p>
<p>Where evaluation of the member reaches certain thresholds, the usage of the platform by the member is restricted or the member is asked to verify his / her telephone number.</p>
<p>Legal basis for such collection and use is our legitimate interest to protect the Platform and its users and ensure its security and the legitimate interest of our members to ensure their safety on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.4.2.
To enforce spam filtering
<p>In order to protect our members and the Platform, we use spam filtering tools.
These tools have a list of keywords that are commonly associated with spam.
If your messages include aforementioned keywords, they are stopped by the aforementioned tools and reviewed manually before being sent to other members.</p>
<p>Legal basis for such collection and use is our legitimate interest to protect the Platform and its users and ensure its security and the legitimate interest of our members to ensure their safety on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.4.3.
To moderate your activity on the Platform
<p>In order to ensure the security of the Platform and its members we regularly moderate your activity on the Platform.
We may check your listings proactively (automatically) or we may check your listings, comments, messages when we receive other members’ reports.</p>
<p>If you communicate with another Vinted member via private messages and either you or another member sends us a report or escalates a transaction, we collect and use information contained in your communication to check for a potential violation of our GTC.</p>
<p>Legal basis for such collection and use is our legitimate interest to protect the Platform and its users and ensure its security and the legitimate interest of our members to ensure their safety on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.4.4.
To issue and enforce warnings
<p>If you as a member violate our GTC or take other actions that result in a warning being issued to you, we collect and use the following data to issue and enforce the warning:</p>
<ol>
<li>Username;</li>
<li>Kind of warning received by member;</li>
<li>Date of warning received by member.</li>
</ol>
<p>Legal basis for such collection and use is our legitimate interest to protect the Platform and its users and ensure its security and the legitimate interest of our members to ensure their safety on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.4.5.
To delete or hide items that violate Vinted GTC
<p>If you list items that violate our GTC, we will remove or hide them.
However, we will retain deleted listings as proof of the violation.
For this purpose, Vinted uses personal data included in the listing as specified under 2.1.5.</p>
<p>Legal basis for such collection and use is our legitimate interest to protect the Platform and its users and ensure its security and the legitimate interest of our members to ensure their safety on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Deleted listings are kept for 30 days after their removal.</p>
2.4.6.
To suspend members
<p>If you send too many messages in a short period of time, you may get suspended for 1 to 6 hours.
For this purpose, Vinted collects and uses the time and duration of the suspension.</p>
<p>Legal basis for such collection and use is our legitimate interest to protect the Platform and its users and ensure its security and the legitimate interest of our members to ensure their safety on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.4.7.
To enforce bans
<p>If you violate Vinted GTC in a way that results in you getting banned, we will use your ban reason, time and your profile data.</p>
<p>Legal basis for such collection and use is our legitimate interest to protect the Platform and its users and ensure its security and the legitimate interest of our members to ensure their safety on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for 3 months from the moment you have been blocked.</p>
2.4.8.
To enforce IP blocks
<p>If there are signs of cyber-attacks or other risks to the Platform’s security coming from your IP address, we will collect and use your IP address in order to protect the platform by blocking your IP address.</p>
<p>Legal basis for such collection and use is our legitimate interest to protect the Platform and its users and ensure its security and the legitimate interest of our members to ensure their safety on the Platform (Art.
6 (1) (f) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for 5 years.</p>
2.5.
To enable your payments for items
<p>Payments on the Platform are carried out via payment service providers that provide payment processing and escrow services.
Vinted does not offer payments via the Platform on some of its Platforms, therefore, this chapter of the Privacy Policy is only relevant to certain Vinted Platforms.
Furthermore, different payment service providers operate on different Platforms and, as a result, different sections below are relevant depending on the Platform that you use.</p>
<p>Most of your personal data are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you (Art.
6 (1) (b) of the GDPR).
Part of your data are required to fulfill our or our payment service providers’ legal obligations when you are a member of our Platform (Art.
6 (1) (c) of the GDPR).
In case you do not provide us with this personal data, we or our payment service providers will not be able to comply with legal requirements and we will not be able to provide our services.</p>
<p>This data is also used for improvement of the Platform in order to make it a better experience for our members (see 2.2.12).</p>
2.5.1.
To allow you to make a purchase and add a bank card for payment purposes
<p>When you add a bank card or purchase an item or our extra services via the Platform, we collect and use the following data for the purpose of allowing you to make payments:</p>
<ol>
<li>Full name;</li>
<li>First six and last four digits of your credit card number;</li>
<li>Expiration date.</li>
</ol>
<p>When you add a bank card or purchase an item or our extra services via the Platform, relevant payment service provider (please see <strong>2.5.3, 2.5.4 and 2.5.5 </strong>below) receives the following data:</p>
<ol>
<li>Full name;</li>
<li>Credit card number;</li>
<li>Expiration date;</li>
<li>Security code (CVV/CVC) number.</li>
</ol>
<p>Legal basis for the collection and use of data is the performance of a contract (compliance with our GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>Personal data are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you.</p>
<p>When you make a purchase, we will store your credit card details for future use.
Legal basis for the collection and use is the legitimate interest of Vinted and its members (Art.
6 (1) (f) of the GDPR) to facilitate subsequent purchases on the Platform and improve the experience making the Platform more convenient.</p>
<p>You can easily opt-out of further storage of your card details both at the time of purchase and afterwards by removing the credit card from your account by going into settings and removing it as a payment method.</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.5.2.
To allow you to add a bank account for withdrawal purposes
<p>Please note, this section only applies to our French, Dutch, Belgian, Luxembourg, Spanish, English, German, Austrian, Polish and American Platforms.</p>
<p>When you add a bank account for withdrawal purposes, we collect and use the following data for the purpose of allowing you to withdraw money:</p>
<ol>
<li>Account holder’s name;</li>
<li>Account number;</li>
</ol>
<p>Legal basis for the collection and use of data is the performance of a contract (compliance with our GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>Personal data are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you.</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.5.3.
To enable you to pay on our .fr, .nl, .be, .lu, .es, .uk, .de, .at Platforms
<p>Please note, this section only applies to our French, Dutch, Belgian, Luxembourg, Spanish, English, German and Austrian Platforms.</p>
<p>If you opt to pay a seller by credit card, PayPal, or if you accept payment from a buyer via one of these methods, or if you use other services on the Platform for which a charge is made, the transaction in question will be collected and used via our electronic payment system, MANGOPAY (see our GTC), which is operated by MANGOPAY S.A.
(Luxembourg) ("<strong>MANGOPAY</strong>").
To use MANGOPAY, you will need to set up an e-wallet on the Platform (referred to on the Platform as a "wallet") and provide us with the following information, which we will transfer to MANGOPAY:</p>
<ol>
<li>Name;</li>
<li>First name;</li>
<li>Last name;</li>
<li>Date of birth;</li>
<li>Invoice address;</li>
<li>Telephone number;</li>
<li>Email address.</li>
</ol>
<p>If you use the MANGOPAY electronic payment system, MANGOPAY will collect the payment information required according to the payment method selected (e.g.
credit card, PayPal).
Payment will then be implemented via MANGOPAY and the payment service provider you have selected (e.g.
PayPal).
To this extent, the data protection regulations of MANGOPAY and the relevant payment service provider will apply.
For more information on payment procedure and payment service providers, see Article 13 of our GTC.</p>
<p>If you use a credit card as your payment method, Vinted will see only the first six and last four digits of your card number.
This information will be used by us solely for the purpose of confirming payment.</p>
<p>For the purpose of setting up a wallet and using the MANGOPAY electronic payment system, Vinted and MANGOPAY act as joint controllers and jointly take the responsibility for the processing.</p>
<p>MANGOPAY, within the context of the regulated services provided to our members as an electronic money institution, shall in particular collect and use personal data for the following purposes: opening and managing the wallet.
receiving and executing payment transactions.
managing customer relation and claims.
combatting money laundering and the financing of terrorism.
In this context, Vinted only partly determines the means used carry out the aforementioned collection and use of your data.
In this context, the Platform you use may be considered as a communication channel with MANGOPAY’s API and constitutes the only contact point of the data subject for the collection of its personal data and the customer service.</p>
<p>Vinted uses the services of MANGOPAY in order to generate on its payment page the input fields to collect payment data.
The purpose of this processing is determined by Vinted, as the publisher of the Platform and its payment page.
However, MANGOPAY determines the data input fields and communicates with the payment service provider selected by MANGOPAY.</p>
<p>You can find out more on how MANGOPAY collects and uses your data by consulting the privacy policy of MANGOPAY, accessible at the following address: www.mangopay.com/privacy/.</p>
<p>Legal basis for the collection and use of data is the performance of a contract (compliance with our GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>Personal data are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you.</p>
<p>Transaction data are kept for 13 months from the day of transaction.</p>
<p>
<em>Essence of the arrangement between Vinted and MANGOPAY on joint responsibilities (Art.
26 (2) sentence 2 of the GDPR)</em>
</p>
<p>We would like to inform you about the essence of our arrangement on joint responsibilities with MANGOPAY, due to Vinted and MANGOPAY being joint controllers according to Art.
26 (1) sentence 1 of the GDPR.
The joint controllership of Vinted and MANGOPAY is limited to the collection and disclosure of data to MANGOPAY by transmission and includes data processing for setting up your wallet.</p>
<p>Since there are two controllers, we want to explain who is responsible for what.
Vinted is responsible for informing you about the processing of personal data in accordance with Art.
13 and Art.
14 of the GDPR, which is provided to you above this section.
Vinted is also responsible for providing this essence of the arrangement between Vinted and MANGOPAY to you in accordance with Art.
26 (2) sentence 2 of the GDPR.</p>
<p>Contact point for exercising rights: For any request to exercise your right or any claim relating to the aforementioned data collection and use, you should first directly address Vinted as we are the main contact point (Art.
26 (1) sentence 3 of the GDPR) for such matters.
If you still need to contact MANGOPAY directly, you can contact their data protection officer at the following email address: dpo@mangopay.com.
Your rights in this context means the right to request from the controller access (Art.
15 of the GDPR) to and rectification (Art.
16 of the GDPR) or erasure of personal data (Art.
17 GDPR) or restriction of processing concerning you (Art.
18 GDPR) or to object to processing (Art.
21 of the GDPR) as well as the right to data portability (Art.
20 GDPR).
We acknowledge that you may, in general, contact either Vinted or MANGOPAY to exercise your respective rights.
Vinted and MANGOPAY will forward your request to the other party where this is needed for fulfilling data subject’s rights.</p>
<p>All other duties under the GDPR are fulfilled by both Vinted and MANGOPAY.
Those other duties do not involve you as a data subject directly, but rather general duties of controllers such as maintaining security measures and keeping a record of processing activities.</p>
2.5.4.
To enable you to pay on our .pl Platform
<p>Please note, this section only applies to our Polish Platform.</p>
<p>If you sell your items on the Platform, to be able to sell your products on the Platform, you need to accept the payment service provider ADYEN N.V.
(Netherlands) (“<strong>ADYEN</strong>”) Marketpay Terms and Conditions.
This happens during the onboarding flow on our website.
In accordance with the ADYEN Marketpay Terms and Conditions, Vinted will share personal data about you with ADYEN.
ADYEN processes this information in accordance with applicable laws and with the ADYEN Privacy Policy.</p>
<p>If you buy items on the Platform, ADYEN will collect the payment information required according to the payment method selected (e.g.
credit card etc.) and needed to verify and process your transaction.
To this extent, the data protection regulations of ADYEN and the relevant payment service provider will apply.</p>
<p>We do not receive your full card data (we only receive data described in 2.5.1 above) as this data is masked and forwarded to the ADYEN handling the transaction.
This information will be used by us solely for the purpose of confirming payment.</p>
<p>Vinted uses the services of ADYEN in order to generate on its payment page the input fields to collect payment data.
The purpose of this processing is determined by Vinted, as the publisher of the Platform and its payment page.
However, ADYEN determines the data input fields and communicates with the payment service provider selected by ADYEN.</p>
<p>If you need to contact ADYEN directly, you can contact their data protection officer at the following email address: dpo@adyen.com.
We acknowledge that you may, in general, contact either Vinted or ADYEN to exercise your respective rights.
Vinted and ADYEN will forward your request to the other party where this is needed for fulfilling data subject’s rights.
All duties under the GDPR are fulfilled by both Vinted and ADYEN.</p>
<p>Legal basis for the collection and use of data is the performance of a contract (compliance with our GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>Personal data are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you.</p>
<p>Transaction data are kept for 13 months from the day of transaction.</p>
2.5.5.
To enable you to pay on our .com Platform
<p>Please note, this section only applies to our American Platform.</p>
<p>If you buy items on the Platform, your Credit card and Vinted Balance payments are processed via our electronic payment system, STRIPE (see our GTC), which is operated by Stripe, Inc.
(United States) (“<strong>STRIPE</strong>”).
To use STRIPE, you will need to set up an e-wallet on the Platform (referred to on the Platform as a „wallet“) and provide us with the following information, which we will transfer to STRIPE:</p>
<ol>
<li>First name;</li>
<li>Last name;</li>
<li>Date of birth;</li>
<li>Address;</li>
<li>Country;</li>
<li>Email;</li>
<li>IP address;</li>
<li>Social security number (last 4 digits);</li>
<li>Bank account number.</li>
</ol>
<p>If you use the STRIPE electronic payment system, STRIPE will collect the payment information required according to the payment method selected.
Payment will then be implemented via STRIPE and the payment service provider you have selected.
To this extent, the data protection regulations of STRIPE and the relevant payment service provider will apply.
For more information on payment procedure and payment service providers, see no.
13 of our GTC.</p>
<p>If you use a credit card as your payment method, Vinted will see only the last four digits of your card number.
This information will be used by us solely for the purpose of confirming payment.</p>
<p>STRIPE, within the context of the regulated services provided to our members as an electronic money institution, shall in particular collect and use personal data for the following purposes: opening and managing the wallet.
receiving and executing payment transactions.
managing customer relation and claims.
combatting money laundering and the financing of terrorism.
In this context, the Platform you use may be considered as a communication channel with STRIPE API and constitutes the only contact point of the data subject for the collection of its personal data and the customer service.</p>
<p>Vinted uses the services of STRIPE in order to generate on its payment page the input fields to collect payment data.
The purpose of this processing is determined by Vinted, as the publisher of the Platform and its payment page.
However, STRIPE determines the data input fields and communicates with the payment service provider selected by STRIPE.</p>
<p>You can find out more on how STRIPE collects and uses your data by consulting the privacy policy of STRIPE, accessible at the following address: https://stripe.com/privacy.
If you still need to contact STRIPE directly, you can contact their data protection officer at the following email address: privacy@stripe.com.
We acknowledge that you may, in general, contact either Vinted or STRIPE to exercise your respective rights.
Vinted and STRIPE will forward your request to the other party where this is needed for fulfilling data subject’s rights.
All duties under the GDPR are fulfilled by both Vinted and STRIPE.</p>
<p>Legal basis for the collection and use of data is the performance of a contract (compliance with our GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>Personal data are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you.</p>
<p>Transaction data are kept for 13 months from the day of transaction.</p>
2.5.6.
To implement Know Your Customer (KYC) checks on .fr, .nl, .be, .lu, .es, .uk, .de, .at Platforms
<p>Please note, this section only applies to our French, Dutch, Belgian, Luxembourg, Spanish, English, German and Austrian Platforms.</p>
<p>Whenever you are about to reach a pay-in or pay-out threshold, MANGOPAY will request you to provide a copy of your passport, ID card or driver’s license, including the provisional license.
In that case, we will collect and transfer the following data to the payment service providers in order to allow a payment service provider to perform a safety check (so-called Know Your Customer, KYC):</p>
<ol>
<li>Full name;</li>
<li>Date of birth;</li>
<li>Country;</li>
<li>Address;</li>
<li>Information present on the provided document (exact list depends on the document provided): document number, picture, gender, nationality, date of issue, date of expiry, place of birth, personal code, signature, other information on a particular document.</li>
</ol>
<p>This is necessary in order to fulfill our legitimate interest to provide MANGOPAY with necessary information for them to comply with the legal obligations to which MANGOPAY is subject (Art.
6 (1) (f) of the GDPR).</p>
<p>Vinted transfers personal data collected and used for this purpose to MANGOPAY (Luxembourg);</p>
<p>Personal data collected for the aforementioned purpose are kept until this information is transferred to MANGOPAY.</p>
2.5.7.
To implement Know Your Customer (KYC) checks on .pl Platform
<p>Please note, this section only applies to our Polish Platform.</p>
<p>Whenever you are about to reach a pay-in or pay-out threshold, ADYEN will request you to provide a copy of your passport, ID card or driver’s license, including the provisional license.
In that case, we will collect and transfer the following data to the payment service providers in order to allow ADYEN to perform a safety check (so-called Know Your Customer, KYC):</p>
<ol>
<li>Full name;</li>
<li>Date of birth;</li>
<li>Country;</li>
<li>Address;</li>
<li>Information present on the provided document (exact list depends on the document provided): document number, picture, gender, nationality, date of issue, date of expiry, place of birth, personal code, signature, other information on a particular document.</li>
</ol>
<p>As a separate safety check, ADYEN may also request a photo/screenshot of the bank statement listing transactions of one-month period.
In that case, we collect the following information as requested by ADYEN:</p>
<ol>
<li>Full name;</li>
<li>Date of birth;</li>
<li>Country;</li>
<li>Address;</li>
<li>Information present on the provided statement: account owner’s full name, transaction history (deposits, charges, withdrawals) and other information present on a particular statement.</li>
</ol>
<p>This is necessary in order to fulfill our legitimate interest to provide ADYEN with necessary information for them to comply with the legal obligations to which ADYEN is subject (Art.
6 (1) (f) of the GDPR).</p>
<p>Personal data collected and used for the aforementioned purpose are kept until this information is transferred to our payment service provider ADYEN.</p>
2.5.8.
To implement Know Your Customer (KYC) checks on .com Platform
<p>Please note, this section only applies to our American Platform.</p>
<p>Whenever you are about to reach a pay-in or pay-out threshold, STRIPE will request you to provide a copy of your passport, ID card or driver’s license, including the provisional license.
In that case, we will collect and transfer the following data to the payment service providers in order to allow our payment service provider STRIPE to perform a safety check (so-called Know Your Customer, KYC):</p>
<ol>
<li>Full name;</li>
<li>Date of birth;</li>
<li>Country;</li>
<li>Address;</li>
<li>Social security number;</li>
<li>Routing No.;</li>
<li>Bank account No.;</li>
<li>Personal ID number;</li>
<li>Information present on the provided document (exact list depends on the document provided): document number, picture, gender, nationality, date of issue, date of expiry, place of birth, personal code, signature, other information on a particular document.</li>
</ol>
<p>This is necessary in order to fulfill our legitimate interest to provide STRIPE with necessary information for them to comply with the legal obligations to which STRIPE is subject (Art.
6 (1) (f) of the GDPR).</p>
<p>Personal data collected and used for the aforementioned purpose are kept until this information is transferred to our payment service provider STRIPE.</p>
2.5.9.
To carry out Politically Exposed Persons (PEP) checks on .fr, .nl, .be, .lu, .es, .uk, .de, .at Platforms
<p>Please note, this section only applies to our French, Dutch, Belgian, Luxembourg, Spanish, English, German and Austrian Platforms.</p>
<p>In rare cases, additional information may be required in order to continue using Vinted.
When you have a lot of transactions on our Platform, we may be required by our payment provider MANGOPAY to carry out further checks as part of anti-money laundering and counter terrorist financing measures.
In that case, we collect and use the following personal data provided in a declaration regarding Politically Exposed Persons (PEP):</p>
<ol>
<li>Full name;</li>
<li>Date and place of birth;</li>
<li>Country of residence;</li>
<li>Address;</li>
<li>Phone number;</li>
<li>Email address;</li>
<li>Function held and country where the function is held;</li>
<li>Origin of the funds used on the Platform or destination of the funds;</li>
<li>Information related to relatives that are PEP – connection to the PEP, full names, dates and places of birth;</li>
<li>Current job;</li>
<li>Date;</li>
</ol>
<p>This is necessary in order to comply with the legal obligations to which MANGOPAY is subject (Art.
6 (1) (c) and 9 (2) (g) of the GDPR).</p>
<p>Personal data collected and used for the aforementioned purpose are kept until this information is transferred to our payment service provider MANGOPAY.</p>
2.5.10.
To issue refunds
<p>If an item that you purchase is never shipped, arrives damaged or not as described and you issue a claim, we collect and use the data used to make a purchase (see 2.5.3, 2.5.4 and 2.5.5 above) for the purpose of issuing a refund.</p>
<p>Legal basis for the collection and use of data is the performance of a contract (GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>Personal data are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you.</p>
<p>Transaction data are kept for 13 months from the day of transaction.</p>
2.5.11.
To keep financial records
<p>If you participate in purchase-sale and/or other transactions when using the Platform, Vinted will collect and use the following data in order to carry out its accounting-related duties:</p>
<ol>
<li>Full name;</li>
<li>Address;</li>
<li>VAT identification number (where applicable);</li>
<li>Value and description of supplied goods and/or services.</li>
</ol>
<p>This is necessary in order to comply with the legal obligations to which Vinted is subject (Art.
6 (1) (c) of the GDPR).</p>
<p>Financial regulations require us to keep accounting documents that confirm the transactions for 10 years.</p>
2.6.
To enable shipment of items purchased on the Platform
<p>Please note, this section does not apply to the Lithuanian and Czech Vinted platforms.</p>
<p>Vinted strives to make the shipping of items purchased on the Platform as smooth and convenient as possible by offering shipping methods on the Platform.</p>
<p>Vinted does not offer shipping methods on some of its Platforms (namely Vinted.lt, Musumazyliai.lt and Vinted.cz).
Therefore, this chapter of the Privacy Policy is only if you use other Vinted Platforms.</p>
<p>Most of your personal data are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you. </p>
<p>This data is also used for improvement of the Platform in order to make it a better experience for our members (see 2.2.12).</p>
2.6.1.
To enable you to ship or receive items
<p>If you choose to enter your shipping information or when you buy, sell or swap items, we collect and use the following data that you provide for dispatch and shipping purposes:</p>
<ol>
<li>Full name;</li>
<li>Country;</li>
<li>City;</li>
<li>Address;</li>
<li>Telephone number;</li>
<li>E-mail address;</li>
<li>Signature;</li>
<li>Address of the drop off point of the parcel;</li>
<li>Tracking number of the parcel;</li>
<li>Confirmation of delivery of the parcel;</li>
<li>Other shipping information required by a particular shipping service provider.</li>
</ol>
<p>Legal basis for the collection and use of data is the performance of a contract (GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>Personal data are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you.</p>
<p>We provide personal data collected and used for this purpose to the following recipients:</p>
<ol>
<li>Seller of the item;</li>
<li>If we are unable to gather tracking information directly from a particular shipping provider, we use a tracking service provider AfterShip Limited (Hong Kong, China).
Personal data is protected by the service provider entering into the EU Standard Contractual Clausesfor the transfer of data as approved by the European Commission;</li>
<li>If the shipping provider directly integrates its shipping services with Vinted, we also provide the aforementioned data directly to your chosen shipping provider:</li>
</ol>
<ul>
<li>
<ul>
<li>Mondial Relay (France);</li>
<li>Chronopost (France);</li>
<li>Mondial Relay S.A.S.U.
Sucursal en España (Spain);</li>
<li>Sociedad Estatal Correos y Telegrafos, S.A.S.M.E.
(Spain);</li>
<li>Hermes Parcelnet Limited (United Kingdom);</li>
<li>PostNL B.V.
(Netherlands);</li>
<li>Koninklijke PostNL B.V.
(Netherlands);</li>
<li>DHL Parcel (Netherlands) B.V.;</li>
<li>DPD (Nederland) B.V.;</li>
<li>Hermes Germany GmbH (Germany);</li>
<li>Packlink Shipping S.L.
(Spain);</li>
<li>InPost S.A.
(Poland);</li>
<li>UPS Europe SRL/BV (Belgium);</li>
<li>DPD Deutschland GmbH (Germany);</li>
<li>General Logistics Systems Germany GmbH &.
Co.
OHG (Germany).</li>
</ul>
</li>
</ul>
<p>Otherwise, it is up to the seller to follow the instructions and provide your data to the shipping provider.</p>
<p>Personal data collected and used for this purpose are kept for 10 years.</p>2.6.2.
To track your parcel
<p>When you buy, sell or swap items on the Platform, we collect and use the following data for shipment tracking purposes:</p>
<ol>
<li>Date and time of delivery of the parcel;</li>
<li>Tracking number of the parcel;</li>
<li>Address;</li>
<li>Location of the parcel. </li>
</ol>
<p>If we are unable to gather tracking information directly from a particular shipping provider, we provide the aforementioned information to a tracking service provider AfterShip Limited (Hong Kong, China).
Personal data is protected by the service provider entering into the EU Standard Contractual Clauses for the transfer of data as approved by the European Commission.</p>
<p>Legal basis for the collection and use of data is the performance of a contract (GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>Personal data are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you.</p>
<p>Personal data collected and used for this purpose are kept for 10 years.</p>
2.7.
To carry out marketing activities
<p>Vinted seeks to involve our members in marketing campaigns and it benefits our members.
At the same time, we wish to present you with marketing material that is both relevant and engaging.</p>
2.7.1.
To send you marketing emails
<p>You can register for our newsletter and for other marketing emails ("Marketing Emails").
When you register, we will ask you for your permission to use your email address for the purposes of sending you Marketing Emails containing the latest information on our products and services, especially with regard to goods available on the Platform, special offers and marketing campaigns.
If you do not give your consent when registering, you can at any time change your mind and agree to receiving Marketing Emails by adjusting the settings on your Vinted account.</p>
<p>We base such collection and use on your consent (Art.
6 (1) (a) of the GDPR, Art.
69(1) of Lithuanian Law on Electronic Communications).</p>
<p>Your permission for the sending of Marketing Emails can be given and withdrawn by you at any time with future effect.
In your Vinted account, you can adjust your settings to choose what emails you wish to receive or disable the sending of any further Marketing Emails.
Alternatively, you can click "Unregister" at the end of the Marketing Email.
Withdrawal of permission will not affect the lawfulness of collection and use carried out prior to withdrawal of permission.</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account or until you withdraw your permission.</p>
2.7.2.
To personalize marketing messages
<p>Vinted will use the data used to register you on the Platform (see above under 2.1.1, 2.1.2 and 2.1.3) and related to your Vinted account (see 2.2), the data on your forum activity (see 2.1.10), your log files (see 2.3.1 above) and other means (see 2.7.7) to personalize marketing messages and advertisements presented to you.
This means that, with your consent, you will receive marketing messages and advertisements based on your interests and your activity on the Platform.</p>
<p>We base such collection and use on our legitimate interest to present you with marketing messages that we consider relevant to you (Art.
6(1)(f) of the GDPR).</p>
<p>You can, at any time, choose not to receive personalized marketing and advertisements by changing relevant settings by going to the Privacy settings page on your Vinted account.
Withdrawal of permission will not affect the lawfulness of collection and use carried out prior to withdrawal of permission.</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.7.3.
To contact you for publicity and earning opportunities
<p>If you register on the Platform, we may contact you via e-mail or the Platform’s messaging system to offer you to share your content (pictures, videos) on our social media profiles or to participate in our marketing campaigns.
This is done in order to ensure that only members that give their consent would be featured on our social media profiles or participate in our marketing campaigns.</p>
<p>We base such collection and use on our legitimate interest to increase the publicity of you and Vinted or provide you with earning possibilities (Art.
6(1)(f) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for as long as we keep data related to your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.
Messages themselves are deleted after 12 months.</p>
2.7.4.
To conduct advertisement campaigns involving you
<p>If you consent to participate in our advertisement campaigns, we will use your telephone number to contact you with a proposal to participate in our advertisement campaign and give you more details about the project.</p>
<p>If you sign a contract with Vinted related to the advertising campaign, we will collect and use the following data for the purpose of completing and performing a contract between you and Vinted:</p>
<ol>
<li>Full name;</li>
<li>Date of birth;</li>
<li>Nationality;</li>
<li>Information about your business certificate or individual business activity.</li>
</ol>
<p>If you provide your address and room photos we will use them to arrive at your place and film the advertisement.
If you give your consent, we may also use your name, age, city or story to include them in advertising campaigns.</p>
<p>We base your invitation to participate in our advertisement campaigns on your consent (Art.
6(1)(a) of the GDPR).
Your participation in our advertisement campaign is based on a contract between Vinted and you (Art.
6(1)(b) of the GDPR).</p>
<p>This data may be transferred to our partners (advertising agencies, directors) that are responsible for implementing the advertisement campaign.</p>
<p>Personal data for your participation in our advertisement campaign are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you.</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.7.5.
To enable us to post your content on our social media accounts
<p>If you allow us, we will post your content on our social media accounts for marketing and PR purposes.</p>
<p>We base such collection and use on your consent (Art.
6(1)(a) of GDPR).</p>
<p>You can, at any time, give and retract your consent by logging in on the Platform, visiting Privacy Settings and changing relevant settings.</p>
<p>In order to post your content on our social media accounts, we provide data to the following social media platform operators:</p>
<ol>
<li>LinkedIn Ireland Unlimited Company (Ireland);</li>
<li>LinkedIn Corporation (USA) (personal data is protected by the service provider entering into the EU Standard Contractual Clausesfor the transfer of data as approved by the European Commission));</li>
<li>Google Ireland Ltd.
(Ireland);</li>
<li>Google LLC (USA) (personal data is protected by the service provider entering into the EU Standard Contractual Clausesfor the transfer of data as approved by the European Commission);</li>
<li>Facebook Ireland Ltd.
(Ireland);</li>
<li>Facebook, Inc.
(USA) (personal data is protected by the service provider entering into the EU Standard Contractual Clausesfor the transfer of data as approved by the European Commission).</li>
</ol>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account or until you withdraw your permission.</p>
2.7.6.
To allow you to see personalized advertisements
<p>Vinted will use the data collected via cookies (see 4 below) to personalize advertisements presented to you.
This means that, with your consent, you will receive advertisements based on your interests and your activity on the Platform.
Namely, Vinted will collect and use the following data:</p>
<ol>
<li>Advertising ID;</li>
<li>Information on websites browsed by the visitor - list of pages and products viewed, clicked, put in basket or bought the Platform;</li>
<li>URL of the pages viewed by the visitor (“referrer”), URL of the previous page viewed by the visitor;</li>
<li>Technical information related to the browser, device type and operating system version of the visitor (“user agent”);</li>
<li>Time stamp (date, time);</li>
<li>Truncated IP address of the connection;</li>
<li>Other information collected by a particular advertisement services provider.</li>
</ol>
<p>Legal basis to perform this is Art.
61(4) of Lithuanian Law on Electronic Communications.
To the extent it involves personal data, we base such collection and use on your consent (Art.
6 (1) (a) of the GDPR).</p>
<p>You can, at any time, choose not to receive personalized marketing and advertisements by changing relevant settings on the Platform.
Withdrawal of permission will not affect the lawfulness of collection and use carried out prior to withdrawal of permission.</p>
<p>To enable our service providers to show you personalized advertisements, we provide your data to partners which provide personalized advertisements services (please see the list of advertising partners here (https://www.vinted.com/third-party-ads).</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account or until you withdraw your permission.</p>
2.7.7.
To evaluate efficiency of promotional campaigns
<p>When you use the Platform, Vinted analyzes its marketing activities and how you use the Platform (when you register, login, create a listing, sell or swap or purchase something, upload an item’s photo, open our App, register or install the app, etc.) for the purpose of evaluating the efficiency of promotional campaigns, and to better comprehend the behavior of visitors after they have looked at a certain ad and visited our Platform or downloaded our App.</p>
<p>We base such collection and use on our legitimate business interest to evaluate efficiency of our promotional campaigns in order to improve them (Art.
6 (1)(f) of the GDPR).</p>
<p>In order to carry out the aforementioned evaluating, we use services provided by the following service providers and for this purpose transfer personal data:</p>
<ol>
<li>Adjust GmbH (Germany).</li>
</ol>
<p>In order to optimize our advertising campaigns, we send certain information on your activities like app opens, sessions, registrations, logins, information about you listing an item, uploading item’s photo or buying an item, etc.
to Google and Facebook advertising platforms.
Thus, we transfer the data of your activities to the following recipients:</p>
<ol>
<li>Facebook (personal data is protected by the service provider entering into the EU Standard Contractual Clausesfor the transfer of data as approved by the European Commission);</li>
<li>(personal data is protected by the service provider entering into the EU Standard Contractual Clausesfor the transfer of data as approved by the European Commission).</li>
</ol>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.7.8.
To manage our social media profiles
<p>If you are interested in our activity and follow our profiles on social media, we collect and use the following data about you in order to manage our social networking sites:</p>
<ol>
<li>Name and surname;</li>
<li>E-mail address;</li>
<li>Gender;</li>
<li>Country;</li>
<li>Picture;</li>
<li>Message;</li>
<li>Time and date the message was received;</li>
<li>Content of the message;</li>
<li>Message attachments;</li>
<li>Response to the message;</li>
<li>Time of response to the message;</li>
<li>Information about our rating;</li>
<li>Comments on a post;</li>
<li>Post shares;</li>
<li>Information about post reactions.</li>
</ol>
<p>We base such collection and use on our legitimate interest to manage our social media profiles (Art.
6(1)(f) of GDPR).</p>
<p>In order to manage our social media accounts, we receive and provide data to the following social media platform operators:</p>
<ol>
<li>LinkedIn Ireland Unlimited Company (Ireland);</li>
<li>LinkedIn Corporation (USA) (personal data is protected by the service provider entering into the EU Standard Contractual Clausesfor the transfer of data as approved by the European Commission);</li>
<li>Google Ireland Ltd.
(Ireland);</li>
<li>Google LLC (USA) (personal data is protected by the service provider entering into the EU Standard Contractual Clausesfor the transfer of data as approved by the European Commission);</li>
<li>Facebook Ireland Ltd.
(Ireland);</li>
<li>Facebook, Inc.
(USA) (personal data is protected by the service provider entering into the EU Standard Contractual Clausesfor the transfer of data as approved by the European Commission).</li>
</ol>
<p>Personal data collected and used for this purpose are kept as long as you are registered on a specific social media network.</p>
<p>
<em>Joint Controllership with Facebook („page insights”)</em>
</p>
<p>Vinted operates a so-called fan page on the social media platform of Facebook.
Facebook and Vinted are only jointly responsible for the processing of so-called "insights data" (Art.
26 (1) sentence 1 of the GDPR) insofar as this data is used for the creation of so-called "page insights" and only for the phases of the collection of data from Vinted's fan page until the transmission to Facebook.
For other data processing, Vinted and Facebook are separately responsible for data processing.</p>
<p>Within the scope of their joint controllership, Vinted and Facebook have entered into an agreement (so-called "page insights controller addendum").
The agreement covers the data processing that is collected and used in connection with a visit or interaction with our fan page, but only to the extent that this data is also (subsequently) processed for "page insights".
"Page insights" includes analysis services that help us to better understand interactions on our site.
In this context, we do not receive any personal data from Facebook, but only an anonymous evaluation and illustration.
Facebook provides more information on this on its help page for "page insights".
The information about data for "page insights" explains how "insights data" is collected and used to create "page insights".
This includes the following actions:</p>
<ol>
<li>Views and interactions with a page, post, video, story, or other content associated with a page;</li>
<li>Subscribing or unsubscribing to a page;</li>
<li>Reactions to a page or a contribution (e.g.
"like".
recommendation, share, comment, subscribe etc.);</li>
<li>Hiding a page contribution or report it as spam;</li>
<li>Moving the mouse over a link to a page or the name or profile picture of a page to see a preview of the page contents;</li>
<li>Clicks on the website, phone number, "route planning" button or any other button on a page;</li>
<li>Views of an event of a page, reactions to an event (including the type of reaction), clicks on a link for event tickets;</li>
<li>Starting a messenger conversation with the page;</li>
<li>Views or clicks on articles in a website shop;</li>
<li>IP address as well as other information that is available on your end device in the form of cookies.</li>
</ol>
<p>The processing of the data of the visitors of our fan page serves the purpose of providing the page as well as the statistical evaluation of the use of our page.
This evaluation is made anonymous for Vinted.
The legal basis for data processing is Art.
6 (1)(f) of the GDPR.
Our legitimate interests in the processing of personal data when visiting the site and the creation of the "site insights" consist of presenting the company and the Platform and, for example, contacting members and interested parties and providing information about products and promotions, as well as the collection of data for the creation of anonymous evaluations and illustrations about the use of our fan page.</p>
<p>If you wish to exercise your rights regarding your data (see bullet point 6.
below), it would certainly be more effective for you to contact Facebook directly.
If you still need help in exercising your rights, you can contact us.
In accordance with our agreement, Facebook assumes primary responsibility for fulfilling the obligations for the joint processing of "insights data".
This includes fulfilling the following rights:</p>
<p>- The right to access (Art.
15 of the GDPR);</p>
<p>- The right to ratification (Art.
17 of the GDPR);</p>
<p>- The right to restrict processing (Art.
18 of the GDPR);</p>
<p>- The right to data portability (Art.
20 of the GDPR).
and</p>
<p>- The right of objection (Art.
21 of the GDPR).</p>
<p>Facebook provides more details on how to exercise these rights in the "page insights data" information.</p>
2.7.9.
To enable you to participate in Vinted’s referrals program
<p>If you refer one or more friends to Vinted’s Platform, you can earn Vinted shopping vouchers.
We will collect and use the following data for the purpose of enabling you to participate in Vinted’s referrals program and to provide you with Vinted shopping voucher:</p>
<ol>
<li>Your member name;</li>
<li>Your referral link;</li>
<li>Your invited member profile data;</li>
<li>Data and time of the registration of your invited member;</li>
<li>Number of items uploaded of your invited member;</li>
<li>Date and time of items uploaded;</li>
<li>Information on successful sale of listed items of your invited member;</li>
<li>Shopping voucher;</li>
<li>Amount of shopping voucher;</li>
<li>Expiration of shopping voucher.</li>
</ol>
<p>Legal basis for the collection and use of data is the performance of a contract (GTC) to which you are party (Art.
6 (1) (b) of the GDPR).</p>
<p>Personal data are required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you.</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.8.
For legal purposes
2.8.1.
To handle your requests related to personal data
<p>If you use your statutory rights regarding your data (see 6 below), we will collect and use the data contained in your request in addition to any other personal data held by Vinted for the purpose of examining the request, responding to it and, when necessary, taking necessary action.</p>
<p>In order to respond to requests, Vinted provides your data to service partners which provide data protection officer’s services and consult us on questions of data protection law.</p>
<p>We base such collection and use on a legitimate interest to exercise our members’ rights (Art.
6 (1) (f) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for two years from the day we respond to your request.</p>
2.8.2.
To provide information to law enforcement and other state institutions
<p>If we have reasonable grounds to suspect that you are involved in illegal activities, we will collect and use necessary data of your profile data (see 2.1), data related to your activities on the Platform (see 2.2) and data collected and used for security purposes (see 2.3 and 2.4) in order to notify the law enforcement and other state institutions.</p>
<p>Vinted also provides the aforementioned data to the law enforcement and other state institutions when we receive requests for information in relation to investigations carried out by these institutions.</p>
<p>This is necessary in order to comply with the legal obligations to which Vinted is subject (Art.
6 (1) (c) of the GDPR).</p>
<p>Personal data are required to fulfill our legal obligations when you are a member of our Platform.
In case you do not provide us with this personal data, we will not be able to comply with legal requirements.</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.8.3.
To comply with specific data retention requirements of the French Decree no.
2011-219 (where you use .fr Platform)
<p>If you are our registered member based in France, we are legally required to keep your personal data for certain periods of time according to the Decree no.
2011-219 of 25 February 2011 on the retention and communication of data to identify any person involved with the creation of online content applicable to hosting providers.
We need to do that in order to comply with legal requirements and provide the data mentioned below to the authorities in the event of an administrative request.</p>
<p>Every time content is created, modified or deleted, hosting providers like Vinted are compelled to retain the following data for a period of 1 year following the creation/modification/deletion of the content:</p>
<ol>
<li>Username;</li>
<li>IP address;</li>
<li>Identifier assigned by the information system to the content which is the object of the operation: it is the unique identifier that the hosting provider assigns to a particular content in its database (eg.
the reference of the listing, the URL, the reference of a comment made on Vinted's forum etc.)</li>
<li>Types of protocols used to connect to the service and to transfer content (eg.
FTP transfer, access via the Web interface, etc.);</li>
<li>Nature of the operation (creation, modification or deletion of content);</li>
<li>Date and time of the content creation/modification/deletion operation carried out on the Platform.</li>
</ol>
<p>Data relating to the opening of the account (such data have to be retained for a period of one year after the deletion of the account):</p>
<ol>
<li>IP address used by the person at the time of the creation of the account;</li>
<li>Name of the person creating the account (or the company name but, at the moment, this is not applicable to Vinted);</li>
<li>Postal addresses associated to the account;</li>
<li>Pseudonyms used;</li>
<li>Email addresses associated to the account;</li>
<li>Telephone numbers;</li>
<li>Data enabling to verify or modify the password chosen, in their latest updated version.</li>
</ol>
<p>Data relating to financial transactions, when the hosting provider charges a fee for the service provided (which is the case when the buyer chooses to use Vinted Buyer protection).
such data have to be retained for a period of one year after the payment operation:</p>
<ol>
<li>Type of payment used;</li>
<li>Payment reference;</li>
<li>Amount;</li>
<li>Date and time of the transaction.</li>
</ol>
<p>This is necessary in order to comply with the legal obligations to which Vinted is subject (Art.
6 (1) (c) of the GDPR).</p>
<p>Personal data are required to fulfill our legal obligations when you are a member of our Platform.
In case you do not provide us with this personal data, we will not be able to comply with legal requirements.</p>
<p>We will store the data collected and used for this purpose for a one-year period as described above.</p>
2.8.4.
To comply with the French Law for a Digital Republic (where you use .fr Platform)
<p>In order to display you a relevant version of our Platform which is designed to comply with the French Law for a Digital Republic - we collect your location data (country) based on your IP address to determine if you are physically in France.</p>
<p>This is necessary in order to comply with the legal obligations to which Vinted is subject (Art.
6 (1) (c) of the GDPR).</p>
<p>Personal data are required to fulfill our legal obligations when you are a member of our Platform.
In case you do not provide us with this personal data, we will not be able to comply with legal requirements.</p>
<p>Vinted collects and uses your personal data for this purpose for as long as we keep your Vinted account - for 3 months from the date of deletion of your Vinted account or for 5 years and 3 months of inactivity on your account.</p>
2.8.5.
To defend the rights and interests of Vinted
<p>If you get involved in a dispute with Vinted or we need to carry out enforcement of our GTC or otherwise defend, enforce, exercise and uphold our rights, we will collect and use all of your personal data held by Vinted to the extent necessary to resolve a particular situation.</p>
<p>We base such collection and use on a legitimate interest to defend the rights and interests of Vinted (Art.
6 (1) (f) of the GDPR).</p>
<p>Personal data collected and used for this purpose are kept for 1 year following the moment we became aware of the aforementioned circumstances or for the duration of a dispute or legal proceedings, depending on which one of these periods is longer.</p>
3.
Recipients of personal data
<p>Vinted transfers or shares personal data with service providers only insofar as necessary and allowed in accordance with applicable laws.
Service providers to which your personal data are transferred or shared with for specific purposes are described under 2 above.
In addition, we appoint the following service providers that, as a result, receive personal data as recipients of data.</p>
<p>We constantly conduct and improve technical maintenance of the Platform to protect the security and confidentiality of personal data we process and to perform certain business-related functions that help make our services available and functional.
For this reason, we transfer your profile data to service providers which provide cloud and hosting services, IT security, maintenance and technical services, communications services:</p>
<ol>
<li>Amazon Web Services, Inc.
(USA) (personal data is protected by the service provider entering into the EU Standard Contractual Clausesfor the transfer of data as approved by the European Commission);</li>
<li>Google Ireland Ltd.
(Ireland), Google LLC (USA) (personal data is protected by the service provider entering into the EU Standard Contractual Clausesfor the transfer of data as approved by the European Commission);</li>
<li>Apple Distribution International (Ireland), Apple Inc.
(USA) (personal data is protected by the service provider entering into the EU Standard Contractual Clausesfor the transfer of data as approved by the European Commission);</li>
<li>UAB “Rakrėjus” (Lithuania);</li>
<li>Telia Lietuva AB (Lithuania);</li>
<li>Microsoft Ireland Operations Limited (Ireland), Microsoft Corporation (USA) (personal data is protected by the service provider entering into the EU Standard Contractual Clausesfor the transfer of data as approved by the European Commission);</li>
<li>Slack Technologies, Inc.
(personal data is protected by the service provider entering into the EU Standard Contractual Clausesfor the transfer of data as approved by the European Commission).</li>
</ol>
<p>We transfer personal data to attorneys, attorney’s assistants, notaries, bailiffs, auditors, consultants, IT service providers, insurance companies, archiving services that provide services to Vinted.</p>
<p>Additionally, we share data within the Vinted group.
Data processed within the Vinted group are transferred to Vinted, UAB (Lithuania) insofar as necessary for the management of Vinted group.</p>
<p>Vinted is statutorily obligated to provide personal and/or usage data to investigative, criminal prosecution or supervisory authorities if and insofar as required for the avoidance of risk to the public and for the prosecution of criminal acts.</p>
<p>Vinted may share your data with third parties when transferring rights and obligations pertaining to the contractual relationship between you and Vinted to such third parties in accordance with the GTC (available via the link https://www.vinted.com/terms_and_conditions), in particular in the case of the transfer of a sector of activity, a merger through the foundation of a new company, a merger through absorption, de-merger or any change in control affecting Vinted.
Prior to such an event Vinted will inform you separately about the details of sharing your data and will obtain your consent where legally necessary.</p>
4.
Use of cookies
<p>Vinted uses cookies on the Platform.
You can find out more by visiting our Cookie Policy.</p>
5.
Right of amendment
<p>As we are constantly developing our services, we reserve the right to change this Privacy Policy at any time subject to the applicable regulations.
Any changes will be published promptly on this page.
Regardless of the aforementioned, you should check this page regularly for any updates.</p>
6.
Your statutory rights regarding your data
6.1.
What rights do you have?
<p>Subject to conditions, limitations, and exceptions established by statutory data protection provisions, you have the right at any time:</p>
<ul>
<li>to be informed of the data we collect and use and to request access or demand a copy of the data concerned (<strong>right to access</strong>).
All the data that you have actively provided for us on the Platform (1, 2.5 and 2.6) can also be accessed by you at any time in your Vinted account;</li>
<li>to demand the correction of inaccurate data and, subject to the nature of the collection and use, the completion of incomplete data (<strong>right to rectification</strong>).
All the data that you have actively provided us with on the Platform (1, 2.5 and 2.6) can also be amended by you yourself at any time in your Vinted account (except sent messages and any forum posts or reviews); </li>
<li>subject to just cause, to demand the deletion of your data (<strong>right to deletion</strong>);</li>
<li>to demand restriction of the collection and use of your data, provided the statutory criteria are met (<strong>right to restrict processing</strong>);</li>
<li>subject to the statutory criteria being met, to receive the data you have provided in a structured, current and machine-readable form and to transfer this data to another data controller or, where technically feasible, to have it transferred by Vinted (<strong>right to data portability</strong>);</li>
<li>not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects on you, unless the statutory conditions for such automated decision-making are met;</li>
<li>to object to the collection and use of data – only where the collection and use is based on a task carried out in the public interest or in the exercise of official authority vested (Art.
6 (1)(e) of GDPR) or legitimate interest (Art.
6 (1)(f) of GDPR), including profiling, based on the same data collection and use grounds as explained in other sections of this statement (<strong>right to object</strong>).
You also have the right to at any time object to the collection of your personal data for direct marketing purposes;</li>
<li>to withdraw at any time any permission you have provided to us.
Such withdrawal will not affect the lawfulness of collection and use carried out prior to withdrawal and based on the permission granted.
You can withdraw your permission for the sending of our newsletter by adjusting your Vinted account settings to block the sending of any further Marketing Emails.
Alternatively, you can click "Unregister" at the end of the Marketing Email;</li>
<li>not to receive discriminatory treatment while exercising your rights. </li>
</ul>
<p>To exercise any of the rights specified in this section, you can contact Vinted and submit your request using the contact details (7 below).
Regardless of any other legal remedy, you also have the right at any time to submit a complaint to the supervisory authorities.</p>
6.2.
What is My Right to Know about my personal data collected, disclosed, or transferred?
<p>You have the right to request that we disclose certain information to you about our collection and use of your personal data.
Once we receive and verify your request we will disclose to you, depending on the nature of your request, personal data we collected about you, the categories of sources for the data we have collected about you, our business or commercial purposes for collecting or sharing that personal information, the categories of third parties with whom we share that personal information, and the specific pieces of personal information we collected about you.
As explained above, we may have disclosed personal data to third parties for a business or commercial purpose.
Thus, you have the right to know also personal data that we disclosed about you and the categories of third parties to whom the personal data was disclosed.</p>
6.3.
What is my Right to Request Deletion of my personal data?
<p>You have a right to request the deletion of your personal data collected and maintained by us in case the information is not used in compliance with applicable laws.
Once we receive and verify your request, we will delete (and direct our service providers to delete) your personal data from our records, unless applicable laws do not provide for deletion of the data in a particular case (for instance, retaining the data is necessary for us or our service provider(s) to complete the transaction for which we collected the personal data, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you, detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities, comply with a legal obligation, make other internal and lawful uses of that data that are compatible with the context in which you provided it).</p>
6.4.
What is my Right to Opt-Out of sharing my personal data with ad partners?
<p>We provide Usage Data to advertising partners, which enables us to provide you with interest-based advertising.
For more information on interest-based advertising, please see our Cookie Policy.
You have a right to direct us to stop sharing your personal data with our ad partners, and to refrain from doing so in the future.
If you wish to do so, please adjust the settings accordingly by going to our Cookie Policy.</p>
6.5.
How will you verify my request?
<p>Your request must provide sufficient information that allows us to reasonably verify you are the person or an authorized representative of a person whose personal data we have collected (name, surname, your public profile URL, your e-mail, other information we may request for verification purposes), describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it, provide a confirmation under a penalty that you are the individual whose personal data is the subject of the request.
If your request is submitted by an authorized agent, a written permission and information that verifies the identity of the agent must be enclosed with the request.
We cannot provide you with the information or exercise your other right if we cannot verify your identity or authority to make the request and confirm the information relating to you.
In order to verify your identity, we may request you to provide additional information about yourself.
We will only use this information and information provided in the request to verify your identity or authority to make the request.</p>
6.6.
Can I Use an Authorized Agent?
<p>Sure.
You may use an authorized agent to submit a request to opt-out on your behalf if you provide us with the authorized agent written permission to do so.
If this is the case, please provide us with a copy of the said permission as instructed under the section ‘How Do I Submit a Request?’ above.
We may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.</p>
7.
Our contact details
<p>If you have any queries regarding the collection and use of your data as part of your use of the Platform, or regarding your rights, please contact our data protection officer at</p>
<p>If you use our .fr, .es, .be, .nl or .lu Platform: dpo@vinted.fr</p>
<p>If you use our .lt Platform: dpo@vinted.lt</p>
<p>If you use our .de or .at Platform: dpo@vinted.de, dpo@kleiderkreisel.de or dpo@mamikreisel.de</p>
<p>If you use our .pl Platform: dpo@vinted.pl</p>
<p>If you use our .cz Platform: dpo@vinted.cz</p>
<p>If you use our .uk Platform: dpo@vinted.co.uk</p>
<p>If you use our .com Platform: dpo@vinted.com</p>
<p>
<strong>Vinted data protection officer: </strong>
</p>
<p>Vinted, UAB</p>
<p>Svitrigailos st.
13</p>
<p>LT-03228 Vilnius</p>
<p>Republic of Lithuania </p> <img height="1" width="1" style="display:none;" alt="" src="https://analytics.twitter.com/i/adsct?txn_id=l4tre&p_id=Twitter" />.
<img height="1" width="1" style="display:none;" alt="" src="//t.co/i/adsct?txn_id=l4tre&p_id=Twitter" />.
an advertisement <div style="display:inline;">.
<img height="1" width="1" style="border-style:none;" alt="" src="//googleads.g.doubleclick.net/pagead/viewthroughconversion/977913151/?value=0&amp;guid=ON&amp;script=0"/>.
</div>.
<img height="1" width="1" border="0" alt="" style="display:none" src="https://www.facebook.com/tr?id=455503454581729&amp;ev=NoScript" />.