Privacy policy

PRIVACY POLICY

1. General

1.1 This Privacy Policy (henceforth referred to as "Privacy Policy") describes how OpenAuction (henceforth referred to as"OpenAuction", ”we”, "us" or "our") collects and processes information about you.

1.2 The personal data policy applies to personal information that you submit to us or which we collect via OpenAuction's website, OpenAuction.dk ("website").

1.3 OpenAuction is the data controller for your personal information. All inquiries to OpenAuction can be made through the contact details listed under section 7.

2. What personal data do we collect, for what purposes and the legal basis for the treatment

2.1 When you visit OpenAuction.dk, we automatically collect information about you and your use of the Website, such as what type of browser you use, which search terms you use on the website, your IP address, including your network location.

2.1.1 The purpose is to optimize the user experience and the site's function as well as targeted marketing, including retargeting via Facebook and Google. This processing of information is necessary to enable us to take care of our interests in improving the website and showing you relevant offers.

2.1.2 The legal basis for the processing is Article 6 (1) of the EU Personal Data Regulation. 1, point f.

2.2 When you create a user profile on OpenAuction, you will be asked to provide email address and country and to create a profile name of your own choice. If you plan to bid on auctions or create your own, full name, address and zip is also needed.

2.2.1 The purpose is to manage your user data and deliver you the services and offer you the benefits associated with your user profile as well as to take care of our interest in being able to conduct targeted marketing.

2.2.2 The legal basis for the processing is Article 6 (1) of the EU Personal Data Regulation. 1, b and f. When creating a user profile, you will be asked to give separate consent to electronic marketing.

3. Recipients of personal data

3.1 Information may be left to external collaborators who process the information on our behalf. We use external partners to include technical operations and improvements to the Website and targeted marketing, including retargeting. These companies are computer users and are under our instructions and process data for which we are data controllers. Data Processors may not use the information for any purpose other than fulfillment of the agreement with us, and are confidential about these. We have entered into written data processing agreements with all data processing companies handling personal information on our behalf.

3.2 Two of these data providers, Google Analytics v / Google LLC. And Facebook Inc. is established in the United States. The necessary guarantees for the transfer of information to the United States are secured through the data processor's certification under the EU-US. Privacy Shield, cf. EU Type of Data Regulation Article. 45th

3.2.1 A copy of Google LLC's certification can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

3.2.2 A copy of Facebook Inc.'s certification can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

4. Your rights

4.1 In order to provide transparency regarding the processing of your information, we as a data controller must inform you about your rights.

4.2 Court of Appeal

4.2.1 You are entitled at any time to request information about, among other things, what information we have registered about you, the purpose of the registration, which categories of personal data and recipients of information that may be required as well as information from which the information originates.

4.2.2 You are entitled to receive a copy of the personal information we process about you. If you want a copy of your personal information, please use this link: G.D.P.R.

4.3 Right to rectification

4.3.1 You are entitled to have incorrect personal information about yourself corrected by us. If you become aware that there are errors in the information we have registered about you, you are encouraged to contact us in writing so that the information can be corrected.

4.4 The right to delete

4.4.1 In some cases you have the right to have all or some of your personal information deleted by us, for example, if you revoke your consent and we do not have another legal basis to continue the treatment. To the extent that continued processing of your information is necessary, for example, to comply with our legal obligations or for legal requirements to be established, enforced or defended, we are not required to delete your personal information.

4.5 The right to restrict storage for storage

4.5.1 You may, in certain cases, have the right to restrict the processing of your personal information to consist of storage eg. if you believe that the information we treat about you is incorrect.

4.6 The right to data portability

4.6.1 You may, in certain cases, have the right to obtain personal information that you have provided us in a structured, commonly used and machine-readable format and have the right to transfer this information to another data controller.

4.7 Right of objection

4.7.1 You are entitled at any time to object to our processing of your personal information for direct marketing including the profiling made to target our direct marketing.

4.7.2 In addition, you may at any time, for reasons relating to your personal situation, object to the processing of your personal information as we make on our legitimate interests, cf. section. 2.1 and 2.2.

4.8 The right to revoke consent

4.8.1 You have the right at any time to revoke a consent you have given us to a given processing of personal data.
Please note that after confirmation of deletion of consent, it may take up to 24 hours before it is executed in all systems.

4.9 The right to appeal

4.9.1 You are entitled at any time to file a complaint with Datatilsynet, Borgergade 28, 5, 1300 Copenhagen K, about our processing of your personal information. Complaints may, among other things, be submitted to mail dt@datatilsynet.dk or telephone +45 33 19 32 00.

5. Deletion of personal data

5.1 Information collected about your use of the Website cf. section. 2.1. deleted at the latest when you have not used the Website for 1 year.

5.2 Information collected in connection with purchases you have made on the Website, cf. Section. 2.2, will in principle be deleted 3 years after the end of the calendar year in which you made your purchase. However, information may be stored for a longer period of time if we have a legitimate need for longer storage eg. if necessary for legal requirements to be established, enforced or defended, or if storage is necessary for us to comply with legal requirements. Accounting materials are kept for 5 years to the end of a financial year in order to comply with the requirements of the Accounting Act.

5.3 If you decide to cancel your account your data will be deleted after 90 days counted from the day of cancellation.

6. Security

6.1 We have implemented appropriate technical and organizational safeguards against the personal or illegal destruction of personal data, forfeiture, alteration or deterioration as well as the disclosure or misuse of personal data.

6.2 Only employees who have a real need to access your personal information to perform their work have access to them.

7. Contact Information

7.1 OpenAuction is the data controller for the personal data collected through the Website.

7.2 If you have questions or comments about this Privacy Policy or you wish to make use of one or more of your rights described in Section 4, you may contact OpenAuction at:

Open Auction

E-mail: post@OpenAuction.dk

8. Changes in the Personal Data Policy

8.1 This policy may change from time to time, and we therefore encourage users to review it on a regular basis.

9. Versions

9.1 This is version 1 of the OpenAuction Privacy Policy, dated May 22th 2019.

Best regards
OpenAuction.dk