Last revision: 03.09.2021.
Your privacy is important to us. We will not sell or lease your personal data. All data will be collected, stored and processed by us in accordance with the European Union General Data Protection Regulation No. 2016/679, other statutory regulations and not passed on to any third party unless we are under a statutory obligation to do so, or unless necessary for the provision of our services, or unless you have expressly agreed to the passing on of your data.
The services offered by us via the website and/or app (jointly "Platform" ) can function only if we collect, store, transfer, delete and/or otherwise use ( "Process" or "Processing" ) specific data relating to you. Personal data means all information relating to an identified or identifiable natural person ("Data") such as your name, date of birth, address or email address.
2 . WHICH OF YOUR DATA DO WE PROCESS?
2.1 Connection to Website and App
When you connect to the Website or App, we Process the following data (logfiles), even if you are not logged in to the Website as a member:
In the event of access via mobile devices, the following logfiles are also captured as part of your use of the App:
Without your express permission we will not use the personal data specified in this section, especially the IP address, unless such use is necessary (i) for the provision of our services and/or (ii) for security purposes, especially the prevention of cyber attacks such as data scraps and denial of service attacks and for preventing impermissible multiple applications.
2.2 Registration as member
In order to use our Platform, and especially to undertake commercial transactions via the Platform, to use the electronic payment system or to leave reviews and communicate with other members, you need a Platform account. For this purpose, you must register as a member on the Website or App. If you have a Facebook or Google account, you can also register via one of these accounts.
(a) Registering via your Facebook or Google account
If you register via your Facebook or Google account, you will be transferred from our Website or App to the website of Facebook or Google and asked to enter the log-in details for your Facebook or Google account. If you enter your Google log-in details, Stufful will receive from Google the following data from your Google account:
Once you have entered your Facebook log-in details and you are on the Facebook website, you can decide whether, in addition to your
Please note that if you keep your default settings, all the aforementioned Facebook data will be selected. If you click on the button marked "Continue as ..." you are agreeing to the transfer to Stufful of the Facebook data selected.
The data we obtain from Facebook or Google will be used to set up your Platform account. This means that we will use the member name of your Facebook or Google account as the member name for your Platform account so that it will be visible to other visitors to the Website and users of the App. If we obtain access to your friends list from Facebook, we will use it in your profile to show to other members the number of your Facebook friends and thus build up the confidence level for transactions with you. Other Data obtained from Facebook or Google will not be visible to anyone on the Platform.
(b) Registering without a Facebook or Google account
If you do not want to register via a Facebook or Google account, you will be asked to enter the following details on our Website or App:
Your member name will be visible to all visitors to the Website and users of the App. Other data you provide as part of the registration process will not be visible. Your member name can be a pseudonym and does not have to be the same as your real name.
2.3 Completion of your profile
After registering, you can add optional information to your profile. Go to "My profile" in your account.
a) Profile details
Under "Edit profile" you can add the following data:
Your profile photo and phone number (if you allow it) are visible to other visitors to the Website and users of the App, but the remainder of the Data entered by you is not visible.
(b) My address
Under "My address", you can enter your shipping details. This Data are visible to members which you enter into a contract to purchase a Catalogue Item. We will process your data which is necessary to provide shipping services. The transferred data includes:
2.4 Use of Platform for transactions
We will store and Process Data on your transactions on the Platform (eg item, price, time of transaction etc.). You can see this Data in the transactions overview of your account.
If you sell items on our Platform, we collect additional Data that you create when you offer the items for sale, particularly photos and video as well as text and other descriptions (eg brand, price, size, condition, colour etc.), payment methods accepted, location, item comments etc. This Data will be visible only to visitors to the Website and users of the App.
We might also ask you to provide us with a proof of payment authorization (ie bank statement, phone verification, PayPal account screenshot, credit card picture).
2.6 Communication, comments and reviews
When you use our services, we also collect the following Data:
For technical reasons, this content generated by you will remain online after the end of your user agreement. Nonetheless your member name will not be visible and there will be a note stating that the content comes from a member who is no longer active (see our TC).
2.7 Location data
When you register at Platform we will process the location data collected via your App or web browser (as part of your IP address). This data (your country, city) will be shown on your profile. You can edit information on your city at any time.
3. PURPOSES FOR WHICH WE PROCESS YOUR DATA
Insofar as not already specified under 2, we will Process your Data for the following purposes.
3.1 Provision of our services
We will Process your Data for the purposes of performing the usage agreement, for providing the services used by you on our Platform
3.2 Legal rights, improvement of our Platform, prevention and detection of inadmissible activity, system security
We will also process your Data to protect the following legitimate interests of Stufful and/or any third parties:
3.3 Creation of anonymous user profiles
Stufful will use the Data gathered during registration and during profile creation, your logfiles and your usage data as collected via cookies to create an anonymous user profile ("User Profile").
Unless permission is provided, Stufful will under no circumstances use this User Profile in such a way as to allow a connection to be established between it and a specific person. This means that Stufful will not be able to establish the member's identity. Stufful further guarantees that, without permission, anonymous user profiles will not be combined with users' other personal Data for any technical, personal or administrative purpose.
Stufful will create and use User Profiles in pursuit of the following legitimate interests:
3.4 Email newsletter and other marketing emails
You can register for our newsletter and for other marketing emails ("Marketing Emails"). When you register, we will ask you for your permission to Process your email address for the purposes of sending you Marketing Emails containing the latest information on our products and services, especially with regard to goods available on the Platform, special offers and marketing campaigns. You will receive Marketing Emails only if you have given permission.
Your permission for the sending of Marketing Emails can be withdrawn by you at any time with future effect. You can click "Unregister" at the end of the Marketing Email. Withdrawal of permission will not affect the lawfulness of Processing carried out prior to withdrawal of permission.
3.5 Account verification for security purposes
We may request you to give us your phone number for the purposes of account verification. You will receive a code via a text massage sent to the phone number you have provided. You will not be able to continue using the App until you have entered the code. Until then, your usage of the Platform will be blocked. In addition, we encourage you to secure your account to verify it yourself via telephone number. Your phone number will not be visible to Platform users (unless you allow it) and will not be used by us for any other purpose, and especially not for marketing purposes.
We might also ask you to provide us with a proof of payment authorization (ie bank statement, phone verification, PayPal account screenshot, credit card picture).
3.6 Personalization of feed
In order to show you the items that are relevant to you we will profile you and personalize your feed based on your preferences, the information about category, brand, color, condition, price, size of the purchased items and purchasing history. Our platform will be more convenient for our users and, due to personalization, you will see offers from other members that might interest you the most.
3.7. Contacting you for opportunities
We may contact you via e-mail or inbox message to offer you to share your content on our social media profiles or to participate in our marketing campaigns. This is to increase yours and Stufful's publicity or to provide you with earning possibilities.
3.8. Sharing your photos and other content on Stufful's social media
If you allow us, we will post your content on our social media accounts. In this case we will use your content only for the said purpose based on your consent.
4. ONLINE SECURITY
Access to your account is protect by a password set by you. Do not disclose your password to anyone. Once you have finished using Stufful, remember to log off by using the logout button, especially if you're using a public computer. Please note that the transfer of data via the Internet (eg via email) is not always totally secure and the prevention of access by third parties cannot be guaranteed.
5. CONTRACT PROCESSING
Stufful may appoint external service providers to provide specific services. These service providers will undertake data processing procedures on our behalf and at our instruction (contract processors). Stufful will select contract processors carefully and in accordance with applicable data protection laws. It will also ensure that Processing is carried out in accordance with the provisions of any written contract and with statutory data processing regulations.
The procedures carried out on our behalf include:
The contract processors appointed by us may under certain circumstances be granted access to your personal Data but solely for the purpose of the data processing requested. Contract processors are also contractually required to ensure that the level of their data protection is at least equivalent to that provided by us. All Data processed on our behalf remains under our control. We continually monitor compliance with our instructions, with guaranteed levels of data security and with contractual agreements formed with the data processor.
Some of these service providers may be in countries outside the EU/EEA whose data protection levels are viewed within the EU/EEA as inadequate. We have nonetheless formed appropriate agreements with these service providers (or there are other guarantees in place) that ensure that all necessary measures will be taken to protect your data in accordance with the applicable requirements. If you have any questions about our service providers, please contact our Platform help center. If our question is not answered there, please contact us via email at email@example.com. As a minimum, we will always supply on request any additional information on the guarantees we have put in place (or where applicable a copy of this information via email).
6. CAPTURE OF PUBLIC CONTENT BY EXTERNAL SEARCH ENGINES
Your member name, selected language, profile photo and all other content published by you, eg items offered for sale, comments on items as well as the date of your registration and the time of your last log-on will be freely available online and thus included in external search engine results. We therefore advise you not to publish any contact data or sensitive or private information.
7. DISCLOSURE OF YOUR DATA TO THIRD PARTIES
Stufful is statutorily obliged to provide personal and/or usage Data to investigative, criminal prosecution or supervisory authorities if and insofar as required for the avoidance of risk to the public and for the prosecution of criminal acts.
Stufful may share your Data with third parties when transferring rights and obligations pertaining to the contractual relationship between you and Stufful to such third parties in accordance with the TC, in particular in the case of the transfer of a sector of activity, a merger through the foundation of a new company, a merger through absorption, de-merger or any change in control affecting Stufful. Prior to such event Stufful will inform you separately about the details of sharing your Data and will obtain your consent where legally necessary.
In all other cases your Data will be passed on to third parties only where you have granted permission or have yourself given third parties access to your Data (not including third parties that we have commissioned as contract processors).
8.1 Required cookies
Cookies are small text files that our Platform wants to place on your computer or other online devices such as tablets or smartphones. Provided your browser settings accept cookies, your browser adds the text in the form of a small file.
8.2 Cookie consent
When you access our platform, we may place additional cookies on your device. These cookies help us
Further information on cookie usage by Stufful and on how you can withdraw your consent or decline to accept cookies can be found below.
8.3 Managing your cookie settings
You can configure your browser to decline some or all cookies or to ask for your permission before accepting them. If however you decline cookies, some of our services may have restricted functionality. For information on how to adjust or change your browser settings, visit www.aboutcookies.org or www.allaboutcookies.org. If you use multiple devices to access our Platform (eg smartphone, tablet, computer etc.) you must ensure that each browser is adapted to each device in accordance with your cookie preferences.
8.4 Use of third-party cookies
You can prevent storage of, and tracking by, such third-party cookies by adjusting your browser settings.
We always look for ways to improve your experience when using Platform. That is why we might invite you to participate in survey and use your feedback. We'll temporarily connect your responses to your user ID and your profile information (eg the amount and the average value of items you've bought or sold, the number and types of paid services you've bought) and anonymize this information straightaway - this means that the responses will no longer be associated with you.
10. RIGHT OF AMENDMENT
11. DURATION OF STORAGE OF YOUR DATA
We may store your personal Data longer than the above mentioned periods to the extent that your personal Data is necessary for compliance with our legal obligations, in particular statutory retention periods, and for the establishment, exercise or defense of legal claims.
12. YOUR STATUTORY RIGHTS REGARDING YOUR DATA
Under statutory data protection provisions, you have the right at any time:
You also have the right on exceptional grounds to opt out of the statutory Processing of your Data. Where your personal Data are Processed for direct marketing purposes, you can object to such Processing (right to object).
You can withdraw your permission for the sending of our newsletter by click "Unregister" at the end of the Marketing Email.
To exercise any of the rights specified in this section, you can contact Stufful using the contact details below. Regardless of any other legal remedy, you also have the right at any time to submit a complaint to the supervisory authorities.
13. OUR CONTACT DETAILS
If you have any queries regarding the Processing of your data as part of your use of the Platform, or regarding your rights, please contact us at Stufful SIA, Parka 10, LV-2164 Adazi, Latvia, firstname.lastname@example.org