1. The information we collect and process
When you use our Online Marketplace, we’ll collect from you the following information:
Creating an Account.
When you create an Account with us, we’ll ask you to provide us with your email address and to choose a secure password. You can also use a social media account, like your Facebook account, to create an Account. If you create an Account using social media, we’ll receive some basic information from your social media account, which we use to create your Account. This includes the email address associated with your social media account. We might also receive information about your status updates or content you’ve viewed or clicked on while using that social media account. You can always check and change the privacy settings of the relevant social media platform, and this will update what data we have access to.
Creating your Catawiki profile.
After you’ve created your Account, we’ll ask for some extra information before you can use all the features of our Online Marketplace. This includes your full name, email address, telephone number, date of birth and address. We might also ask for your bank account number and, if applicable, the VAT number and Chamber of Commerce number of your company (for instance if you’d like to become a Seller). We need this information to ensure you are at least 18 years of age, to contact you, to make sure that the Lot(s) you bought in an Online Auction can be shipped to you or picked up at your address and to make sure you can make or receive payments or refunds.
Providing you customer support.
Verifying your identity.
If you’re looking to sell on Catawiki, we might ask for a scan or photo of your valid proof of identification (government-issued photo ID). We or our third-party payment providers may have to verify your identity to comply with financial regulations. That’s why we ask for proof of identification, which clearly shows at least your full name, date of birth and ID (document) number. For the Netherlands, please make sure your citizen service number (BSN) is redacted.
Your transactional information.
When you purchase or sell something on Catawiki, we’ll keep records of transaction and payment data, such as the Lot(s) that you’ve purchased or sold on our Online Marketplace, invoices, price and date of payment, the payment method, payment status, bank account- or credit card details. We securely store such information for payment and billing purposes and for our internal administration. This may be more detailed than the concise overview you see in your Account.
We might ask you to provide us with feedback through an email or online survey. In these cases, we’ll only process personal data (such as your email address or User ID) for our internal analytics, which help to enhance our Services. We may also process the opinions, experiences, preferences and interests and reviews that you provide to us or share with us online or through social media.
Your communications with other Users
We also process your information when you communicate with other Users in light of an Online Auction, through the internal messaging system offered on our Online Marketplace.
Your cookie data
2. Why we use this information
For the performance of our agreement with you:
To fulfil our contractual obligations towards you, while also making sure you can enjoy all the exciting features of our Online Marketplace, we use your personal data as described above to:
Provide you with our Services and information you request. Give you access to use all the features of our Online Marketplace, including by means of creating your Account and Catawiki profile, to facilitate Online Auctions, to facilitate communication between Users and to facilitate the payment and shipment of Lots. Support you if you have any questions, complaints or encounter issues with your Account or transactions. Send you status updates, invoices and/or payment reminders by email, SMS, Whatsapp, any other direct messaging platform, or push notifications. Send you service-related emails related to your Account, transactions or security. Examples of such service-related emails include email address confirmations, welcome emails when you’ve registered your Account and emails relating to your Lot status, transactions or messages from other Users.
For our legitimate business interests:
In light of our, or a third party’s, legitimate interests, we may use your personal data as described above to:
Contact you via email, telephone, regular mail or otherwise for marketing or other commercial purposes, if you have not opted out of receiving such communications. If you have not given consent, we will only send you commercial communications via email to service you as an existing customer. If this is the case, we may send you newsletters, surveys, inform you about additional Catawiki services, events, offers, promotions and/or benefits. At any time, you may opt out of such commercial communications by sending an email to email@example.com or by following the instructions in any communication you receive from us.
Improve our Services and better understand you as a User both on an aggregate and an individual basis. We analyse your use of our Services and use this information to better understand you (for example, what pages you visit, which Lots you are interested in), to optimize navigation on our Online Marketplace and to give you a better user experience. We also use your personal data as described above to allow us to provide, personalise, measure, and improve our advertising and marketing. For example, to send you personalized marketing communications, show you suggestions (such as interesting Lots) and targeted adverts (on other websites) based on how you interact with our Online Marketplace. We may also use the personal data as described above to send you a gift, for example at the end of year.
Facilitate our business operations, to generate aggregate statistics, to perform market analysis, to operate company policies and procedures, to respond to any claims against us and, to protect the rights, property, or personal safety of Catawiki, our Users, or the public, to enable us to make corporate transactions, such as any merger, sale, reorganization, acquisition, bankruptcy or similar event and for other legitimate business purposes permitted by applicable law.
Subject to your prior consent
Provided that we’ve received your prior explicit consent, we may use your personal data as described above to:
Send you personalised direct marketing communications via email, SMS, other electronic means or otherwise. For example, to send you personalised recommendations, newsletters, tips and promotions or to send you updates with respect to followed auctions, favorited Lots, auction categories or auction alerts. You can withdraw your consent at any time using the unsubscribe link in these communications or by adjusting the Emails and Notifications settings in your Account.
Record your communication with our Customer Experience team via telephone for internal quality and training purposes.
Please note that you can withdraw your consent at any time (see the section 3. Your choices about our use of your personal data or section 7. Your rights below).
To comply with legal obligations
Your personal data may also be used to maintain appropriate business records, to comply with lawful requests by public authorities or court orders or to comply with applicable laws and regulations (such as to verify your identity as a Seller in light of AML requirements) or as otherwise required by law.
3. Your choices about our use of your personal data
Internal Messaging System
After the Online Auction, you have the option to contact the Seller of a Lot using our internal messaging system. The availability of the internal messaging system may be subject to certain conditions. If you use the internal messaging system, you’ll get an email every time you get a response. If you want to stop getting these emails, you can opt out via the Emails and Notifications settings in your Account. If you’re a Seller, you can opt out of receiving these messages from potential Buyers by adjusting your Account settings.
If you no longer wish to receive our marketing emails, you can unsubscribe using the link in one of these marketing emails. Alternatively, you can unsubscribe by adjusting the Emails and Notifications settings in your Account. If for any reason you can’t adjust these settings yourself, you can contact our Customer Experience Team who will be happy to help.
If you use our app, push notifications are a great way for you to quickly find out about interesting auctions or messages from our experts. You have the option to opt in and opt out of push notifications in our app.
4. Cookies and personalisation
5. Sharing information with third parties
We might need to share information with other Users
If you buy or sell Lots, we might need to share some of your information with other Users for you to complete the transaction. This can include your name, address, email address, and phone number. For example, if you buy a Lot from another User and they need to ship the Lot to you, we will share your address and contact information (including phone number and email address) with them so they can arrange shipping. If there’s an issue between you and another User, we might also provide this information to help you resolve the issue directly with that User. Please note, if you change your contact details during an auction, during a dispute, or shortly after a dispute, we can provide the ‘old’ contact details to the other User if we have reason to believe this is necessary for the other User to obtain their rights under the Contract of Sale.
With your consent
We may also provide your personal data to other Users if you have given us permission to do so. For example, if another User wants to refund you directly, we will ask for your permission to share your financial information with that User. In some cases, we might need to share your information with other Users before you enter into a Contract of Sale. For example, if a User needs to view a Lot on site before entering into the Contract of Sale we may share this information so that a viewing can be arranged.
For services from third-party service providers
We may also use the services of third-party service providers. As part of their services, they might need to process your personal data. For example, service providers might provide us with payment, advertising, customer, or sales support services. Or they might support us in sending emails, analysing feedback, or securing our Online Marketplace against fraud. Consistent with applicable legal requirements, these service providers have a duty to maintain confidentiality, may only use the specific data necessary for providing services to us, and may only use this data in accordance with our instruction.
We may also disclose your personal data to third parties:
- If we are obliged to do so, for instance if there’s a dispute or if your User material is manifestly unlawful.
- To comply with statutory obligations, such as court orders.
- To cooperate with authorities, such as the police or tax authorities, whether this is legally required from us or whether it’s in our legitimate interest to cooperate.
In light of a corporate transaction
In addition, your personal data may be disclosed as part of any merger, (partial) sale or (partial) transfer of our assets. We’ll always make sure to timely inform you should a corporate transaction involving your personal data occur.
6. International transfers of personal data
Please note that in certain cases, third parties we share your personal data with (as set out above) might be based outside the European Economic Area or might use servers that are outside the European Economic Area. The laws of these countries may not provide the same level of protection to your personal data. That’s why we make sure your personal data is protected in accordance with applicable law. This means that we entered into legally necessary contracts with recipients of your personal data, including standard contractual clauses as approved by the European Commission where required and ensuring the appropriate technical and organisational information security measures are in place.
7. How we secure your personal data and how long we store it for
In addition to the security measures on our end, such as encryption of your personal data, we highly recommend you carefully select a strong password and make sure you keep your login details secret.
8. Your rights
Subject to the conditions set forth in the applicable law, you have the following rights concerning your personal data: right of access, right of rectification, right to erasure, right to restrict data processing, right to object against profiling or processing based on our legitimate interests, the right to withdraw consent and your right to data portability.
If you’d like to exercise any of these rights, you can do by sending an email to firstname.lastname@example.org. Please clarify the nature of your request in the subject line. Furthermore, please note that you can adjust the information associated with your Account using your Account settings. Also, you can delete your Account using the “Delete my Account” button in your Account settings.
If needed, we might ask for additional information to verify your identity, such as a copy of your ID card, before we can start working on your request. In that case, please ensure that you have blacklined all information that is not required to identify you (social security number, photo etc.).
If you’ve asked us to erase your personal information, please note this is not an absolute right. We will erase your personal data when (i) the data is no longer necessary in relation to the purposes for which they are collected; (ii) you withdraw your consent and there is no other legal ground for processing; (iii) you object to the processing in case of direct marketing purposes, or – in any other case - there is no overriding legitimate ground for processing; (iv) we unlawfully processed your personal data.
- We are unable to delete certain information, until you have fulfilled your obligations towards us or another User (for instance, if you still have to deliver a Lot or if you have to pay your outstanding commission invoice).
- The User Material you’ve uploaded to our Online Marketplace (including artists’ names) will continue to be publicly visible on our Online Marketplace.
9. Privacy violations
If you think we’ve infringed on your privacy rights, please notify us by sending an email to email@example.com. We’ll investigate as soon as possible after receiving your email. You can also lodge a complaint at the relevant national supervisory authority.
9401 LA Assen
Tel (United Kingdom) - +44 800 028 7742
Tel (International) - +31 800 090 0056