Privacy Policy


Catawiki processes personal data from Users who visit and use our Online Marketplace. Catawiki B.V. is the data controller for this purpose. In this Privacy Policy, we’ll talk about exactly what data we process, how and why we process it, and what your rights are.


If you want to know more about how we collect personal data using cookies or other tracking methods, read our Cookie Policy. We’ve defined the capitalised terms we use in this policy in our Terms of Use.



1. The information we collect and process


When you use our Online Marketplace, we’ll ask you for the following information:

Creating an Account. When you create an Account with us, we’ll ask you to add your email address with a secure password. You can also use a social media account, like your Facebook, to create a Catawiki Account. If you create an account using social media, we’ll receive some basic information from your social media account, which we use to create your account. This includes the email address associated with your social media account. We might also receive information about your status updates or content you’ve viewed or clicked on while using that social media account. But you can check and change the privacy settings of the relevant social media website, and this will update what data we have access to. 


Creating your Catawiki profile. After you’ve created your Account, we’ll ask for some extra information before you can use all the features of our Online Marketplace. This includes your full name, email address, telephone number, and address. We might also ask for your date of birth, bank account number and, if applicable, the VAT number and Chamber of Commerce number of your company. We need this information to contact you, to make sure Lots can be shipped to you or picked up at your address, and to make sure you can receive payments or refunds.


We support you. When you contact our Customer Support team or when they contact you, we collect information about the reason for this contact. We’ll also collect the information you provide to us over the phone or via email. This includes any communication we have with other Users about you or the Lots you’ve offered or bought. You can also communicate with other Users through our Online Marketplace. If you use this feature, we may review, scan, or analyse your messages for fraud prevention, risk assessment, investigation, or support purposes.

We may need to verify your identity. If you’re looking to sell on Catawiki, we might ask for a scan or photo of your valid proof of identification (government-issued photo ID). Our third-party payment provider, Stripe, has to verify your identity to comply with strict financial regulations. That’s why we ask for proof of identification, which clearly shows at least your full name, date of birth and ID (document) number. In performing its services, Stripe acts as a data processor for Catawiki. As a payment services provider, Stripe has its own obligations with regard to your personal data. Stripe can therefore also be regarded as a data controller. Stripe’s Privacy Policy applies to any data processing Stripe performs as a data controller.


We love feedback. We might ask you to provide us with feedback through an email or online survey. In these cases, we’ll only process personal data (such as your email address or User ID) for our internal analytics, which help to enhance our Services.


We collect the following information automatically when you use our Online Marketplace:


Your clicks and likes. We collect data on your interests, characteristics, location, and which Lots you like. We use this information to personalise your experience on our Online Marketplace. For instance, based on your browsing behaviour, we might send you emails about promotions or items we think you’ll be interested in. You can unsubscribe from these emails at any time, either through your Account settings or via the unsubscribe link in the email. 


Your browser information. When you use Catawiki, we automatically collect certain information sent by your internet browser, even if you haven’t created an Account or aren’t logged in. This information includes details about how you’ve used the platform, your IP address, access times, hardware and software information, and information about the device you used.


Your transactional information. We keep records of transaction and payment data. This may be more detailed than the concise overview you see in your Account.

Cookies. We also use cookies (small text files your computer sends each time you visit our Online Marketplace) or similar tracking methods, such as mobile advertising ID numbers on our (mobile) website and app. We use these tracking methods to give you a better Catawiki experience. For instance, they help us to recognise your device, store your language preferences, and keep you signed in so you don’t need to keep signing in every time you use Catawiki. Find out more about how and why we use cookies in our Cookie Policy.

 

2. Why we collect this information 

We use your personal data for the following reasons:

To make your Catawiki experience as smooth and easy as possible


We use your data to fulfil our contractual obligations towards you, while also making sure you can enjoy all the exciting features of our Online Marketplace. That’s why we use your data to:


  • Give you access to use all the features of our Online Marketplace, including payment features.
  • Make sure the display you see is compatible with your internet browser and device.
  • Support you if you have any questions or encounter issues with your Account or transactions. 
    • There are a few different ways we can get in touch with you to help you solve issues including via email, phone, text messages, or push notifications.
  • Send you status updates, invoices and/or payment reminders by email, SMS, Whatsapp, any other direct messaging platform, or push notifications.
  • Keep our internal administration in order.


To provide, personalise, measure, and improve our advertising and marketing


We want to give all of our Users a great experience on our Online Marketplace. To help us do this, we want to know what Users click on and what you think of our Services. In this light, we process your data to:


  • Show you suggestions (such as interesting Lots) and targeted adverts (on other websites) based on how you interact with our Online Marketplace.
  • Let you know about extra services, events, offers, promotions, or benefits.
  • Contact and communicate with you via email, telephone, or SMS (or any other direct messaging platform)
  • Invite you to give us feedback about our Services.
  • Work with anonymous statistical information to better understand who uses Catawiki, perform market analysis, improve our marketing and transactional emails, and optimise navigation on our Online Marketplace.


To optimise our Services and marketing, we may use ‘cross-device tracking’ from third-party service providers (such as Google and Criteo). We use cross-device tracking to track your behaviour across different devices that are linked using a unique User ID. This User ID is assigned to you during registration. By tracking your behaviour, we can provide personalised content for you across your devices. For instance, we may show you personalised content on your computer based on your behaviour on our mobile application. You can find more information about managing cross-device tracking in our Cookie Policy.


To make sure Catawiki is a secure, trusted platform for both Buyers and Sellers


Maintaining a trusted and safe Online Marketplace is very important to us. We might have to process and store your data to keep our Users safe or to comply with legal obligations. As part of this, we process personal data to: 

  • Prevent, trace, and counter fraud or any other unlawful or non-compliant use of our Online Marketplace. For instance, our Fraud team uses this data to look into Users who don’t comply with our Terms of Use and our systems can match various data points to (temporarily or permanently) block these Users from using our Online Marketplace.
  • Register, mediate, and resolve possible disputes or irregularities.
  • Comply with our legal obligations, such as keeping records and assisting with criminal or other investigations by the relevant authorities.
  • Enforce our Terms of Use and other policies.
  • Use prediction models to determine whether we need to ask certain Users for a form of payment security or obstruct their Bid or payment. For example, we use a User’s bidding, buying, or selling history and location to predict the chances of the purchase agreement being cancelled. Based on the outcome of this model, we may ask them to verify their credit card before placing a Bid as a safety measure.

 

3. Your choices about our use of your personal data


Chat function


During the Online Auction, you have to option to contact the Seller of a Lot using our chat function. The availability of this function may be subject to certain conditions. If you use the chat function, you’ll get an email every time you get a response. If you want to stop getting these emails, you can opt out via your email and notification settings. If you’re a Seller, you can opt out of receiving these messages from potential Buyers by adjusting your Account settings.


Marketing emails


If you no longer wish to receive our marketing emails, you can unsubscribe using the link in one of these marketing emails. Alternatively, you can unsubscribe by adjusting your email and notification settings. If for some reason you can’t adjust these settings yourself, you can contact us and we’ll be happy to help. 


Push notifications


If you use our app, push notifications are a great way for you to quickly find out about interesting auctions or messages from our experts. You have the option to opt in and opt out of push notifications in our app. 

Personalised adverts


We want to make sure you’re always seeing content that interests you, which is why we personalise our adverts to your interests. If you don’t want to see personalised banners or other adverts on third-party websites, you can turn off your marketing cookies. Read our Cookie Policy to find out how to do this. Keep in mind, you will still see adverts from us, but these adverts will no longer be tailored to your interests. 

 

4. Sharing information with third parties


We might need to share information with other Users


If you buy or sell Lots, we might need to share some of your information with other Users for you to complete the transaction. This can include your name, address, email address, and phone number. For example, if you buy a Lot from another User and they need to ship the Lot to you, we will share your address and contact information (including phone number and email address) with them so they can arrange shipping. In some cases, we might need to share your information with other Users before you enter into a Contract of Sale. For example, if a User needs to view a Lot before entering into the Contract of Sale, we will share this information so they can arrange a viewing. If there’s an issue between you and another User, we might also provide this information to help you resolve the issue directly with that User. Please note, if you change your contact details during an auction, during a dispute, or shortly after a dispute, we can provide the ‘old’ contact details to the other User if we have reason to believe this is necessary for the other User to obtain their rights under the Contract of Sale.


With your consent


We may also provide your data to others if you have given us permission to do so. For example, if another User wants to refund you directly, we will ask for your permission to share your financial information with that User. 


For services from third-party service providers


We may also use the services of third-party service providers. As part of their services, they might need to process your personal data. For example, service providers might provide us with payment, advertising, customer, or sales support services. Or they might support us in sending emails, analysing feedback, or securing our Online Marketplace against fraud. These service providers have a duty to maintain confidentiality, may only use the specific data necessary for providing services to us, and may only use this data on our instruction. 


To ensure safe payment, we use Stripe as a third-party payment service provider. We use Stripe to process most payments made to us and to other Users. For these purposes, we share information, including your name, bank account number, date of birth and, if applicable, Chamber of Commerce and VAT identification number, with Stripe via an encrypted connection. Stripe uses and processes this information in accordance with Stripe’s Privacy Policy.


The third parties we share your data with might be based outside the European Economic Area or they might use servers that are outside the European Economic Area. The data protection could be lower in those countries, compared to protection in the European Economic Area. That’s why, if necessary, when we share data to third parties or servers outside of the European Economic Area, we make sure there is a legal basis for the transfer and that your data is protected according to applicable law. For example, we might use standard agreements approved by the relevant authorities while ensuring the appropriate technical and organisational information security measures are in place.


We also use third parties to show you Catawiki banners on other websites. These parties use cookies or other tracking methods to show you content that interests you. See our Cookie Policy to read more about cookies and what they mean for you.


When we are (legally) obliged to or need to enforce our Terms of Use


We may also disclose your data to third parties:

  • If we feel obliged to do so, for instance if there’s a dispute or if your User material is manifestly unlawful.
  • To comply with statutory obligations, such as court orders.
  • To cooperate with authorities, such as the police or tax authorities, whether this is legally required from us or whether it’s in our legitimate interest to cooperate.
  • To make sure our Terms of Use are upheld. 

 

5. How we use Social Media


We use social media in various ways to make our Online Marketplace as user-friendly as possible. 


Login or registration


You can create an Account or login using Google or Facebook. This makes it easy for you to create an Account and means you don’t need to remember extra login details to use Catawiki. 


Chats


You can reach out to us through your social media account, for example via Facebook Messenger. But keep in mind, we don’t use this chat as our official channel for handling questions or complaints. Nonetheless, we try to respond to your messages in time and to provide you with further information or assistance if necessary. With this in mind, we expect you to be reasonable and respect our decisions when you reach out in a social media chat. Sometimes, your message might contain personal or other relevant information for us to process. We may use that information to provide you with the best service. The privacy policy of the relevant social media provider is applicable when you use their services. 


Plug-ins


On certain pages or in our app, we might have integrated social media plug-ins (e.g. Facebook and Instagram). This means that when you click on one of the plug-in buttons, certain information is shared with the relevant social media provider. Third parties might be able to place cookies via these plug-ins. For more information about how to turn these cookies on and off, take a look at our Cookie Policy.

 

6. How we secure your information and how long we store it for


We take the security of your data very seriously. That’s why we have security procedures and technical restrictions in place to protect your data from unauthorised access, destruction, or alteration. In addition to the security measures on our end, such as encryption of your data, we highly recommend you carefully select a password and make sure you keep your login details secret.

We retain your information for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The retention period for your personal data can vary depending on the processing purpose (e.g. for payment services or fraud prevention) and our legal obligations. For instance, we are legally obligated to retain information about your purchases and sales (including financial data) for a period of 10 years.

 

7. How to access, control, and adjust your personal data


You can adjust the information associated with your Account using your Account settings.


If you’d like to know what information we have about you, you can ask us to send you an overview of your personal data. You can also ask us to erase your personal data. You can do this by sending an email to privacy@catawiki.com. Please clarify in the subject line whether you’re asking for access to the data or deletion of the data. This makes it easier for us to help you as soon as possible. Keep in mind, we might ask for additional information to verify your identity, such as a copy of your ID card, before we can start working on your request. Furthermore, in certain cases, you may object to or ask us to restrict certain processing. 


If you’ve asked us to erase your personal information:

  • We may refuse to remove or anonymise your information if you still have to fulfil certain obligations towards us or another User (for instance, if you still have to deliver a Lot or if you have to pay your outstanding commission invoice).
  • We may retain some of your personal information if it’s necessary for our legitimate interests, such as for fraud detection and prevention. For example, if you delete your Account and we have good reason to believe you have not acted in accordance with our Terms of Use, we may retain certain information from that Account to prevent you from opening another Account in the future.
  • The User Material you’ve uploaded on our Online Marketplace (including artists’ names) will continue to be publicly visible on our Online Marketplace.

 

8. Privacy violations


If you think we’ve infringed on your privacy rights, please notify us by sending an email to privacy@catawiki.com. We’ll investigate as soon as possible after receiving your email. You can also lodge a complaint at the relevant national supervisory authority.

 

9. Changes to our Privacy Policy


We are entitled to update or supplement this Privacy Policy at any time. If we do so, we’ll post the updated version on our Online Marketplace. Therefore, you’ll find the most up-to-date version of our Privacy Policy on our Online Marketplace. We’ll let you know via email if an update significantly affects how you use our Online Marketplace. If there is any conflicting information between the English version of our Privacy Policy and any of the translations into other languages, the English version prevails. 

 

10. Contact


If you have questions about this Privacy Policy, you can contact us at any time:

Catawiki B.V.

Overcingellaan 5

9401 LA Assen

The Netherlands

T - +44 20 3856 4102