Privacy Policy

1. Introduction

This Privacy Policy describes how orderaglsu B.V. ("we", "us", "our", or "orderaglsu") collects, uses, and protects your personal information when you use our online marketplace platform. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable European privacy laws.

2. Data Controller

orderaglsu B.V. is the Data Controller for the personal data processed through our platform. Our company is registered in the Netherlands with registration number 68935024 and VAT number NL847205936B01. Our registered address is Parkweg 40, 9747 UD Groningen, Netherlands.

3. Data Collection

The data we collect includes personal information that you provide directly to us, information collected automatically when you use our services, and information we receive from third parties. This includes:

• Account information (name, email address, phone number)
• Profile information (business details, preferences)
• Transaction data (purchase history, payment information)
• Communication records (messages, support inquiries)
• Technical data (IP address, browser type, device information)
• Usage data (pages visited, features used, time spent)
• Location data (for delivery and fraud prevention)
• Marketing preferences and communication history

4. How We Use Your Information

We explain how we use your information for various purposes based on legitimate legal bases under GDPR. The use of your data includes:

• Providing and maintaining our marketplace services
• Processing transactions and payments
• Communicating with you about your account and transactions
• Providing customer support and resolving disputes
• Preventing fraud and ensuring platform security
• Improving our services and user experience
• Complying with legal obligations and regulations
• Marketing our services (with your consent where required)
• Analytics and business intelligence

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal bases:

• Contract Performance: Processing necessary for the performance of our service agreement
• Legitimate Interests: For fraud prevention, security, and service improvement
• Legal Obligation: To comply with applicable laws and regulations
• Consent: For marketing communications and certain data processing activities
• Vital Interests: In rare cases to protect someone's life or safety

6. Data Sharing and Disclosure

We may share your personal data with:

• Other users on our platform (as necessary for transactions)
• Service providers and business partners who assist our operations
• Payment processors and financial institutions
• Legal authorities when required by law or to protect rights
• Professional advisors (lawyers, accountants, auditors)
• Potential buyers in case of business sale or merger

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Account information is retained for the duration of your account plus seven years for legal and tax obligations. Transaction data is kept for ten years to comply with financial regulations. Marketing data is retained until you withdraw consent or for three years of inactivity. Technical and usage data is typically retained for two years for security and analytics purposes.

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right of Rectification: Request correction of inaccurate data
• Right of Erasure: Request deletion of your data in certain circumstances
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing
• Right to Lodge a Complaint: File a complaint with supervisory authorities

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including adequacy decisions, Standard Contractual Clauses, or other approved mechanisms under GDPR.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption, access controls, regular security assessments, and staff training on data protection principles.

11. Cookies and Tracking

Our platform uses cookies and similar tracking technologies to enhance user experience, analyse usage patterns, and provide personalised services. For detailed information about our cookie practices, please refer to our separate Cookie Policy.

12. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes through our platform or via email. The updated policy will be effective from the date specified in the revised version.

14. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

15. Supervisory Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your EU member state of residence.