Privacy & your data
We collect what we need to run the marketplace — not more. Here is the short version. The full version is the Privacy Policy.
What we store
- Account data — email, name, address, phone (optional), country, language preference
- Transactions — orders you placed or received, prices, dates, item details
- Messages — the platform-side conversations with sellers and buyers
- Ratings — both ratings you left and ratings about you (sellers)
- Saved items and search history — to power your watchlist and recommendations
- Membership and billing data — what tier, payment method, invoices
- Technical data — IP, browser, basic analytics; cookies (see Cookie Policy)
Why we store it
- To run your account and process transactions
- To meet legal obligations (invoicing, tax records, DAC7 reporting, dispute resolution)
- To improve the marketplace and prevent abuse
We do not sell your data. We do not share it with third parties for advertising. Email service providers (Resend, Brevo), payment processors (Stripe, PayPal), and hosting (Hostinger) see only the data they need to function — listed in the Privacy Policy.
Sharing between buyer and seller
When you place an order, the seller gets your name and shipping address so they can ship the parcel. This is a legitimate interest under GDPR Article 6(1)(b) (contract performance). They do not get your email unless you message them. The same applies in reverse.
We use a PII-protected projection when displaying sellers publicly — a projectPublicSellerView filter that strips home addresses and direct contact emails from the public seller profile.
Cookies
Essential cookies (session, authentication) — always on. Analytics and tracking — opt-in via the cookie banner on first visit; you can change your choice any time via "Cookie Settings" in the footer.
Your rights (GDPR / DSGVO)
You can:
- Export your data — from
/account/settings, "Download my data". Includes orders, messages, ratings, profile. JSON format. - Correct your data — most fields editable in
/account/settings. For anything you can't edit yourself, email privacy@vod-auctions.com. - Delete your data — from
/account/settings, "Delete my account". We anonymise the data we are legally required to keep (transactions, invoices, ratings) and delete the rest. - Object to processing — email privacy@vod-auctions.com with details.
- File a complaint with your local data protection authority.
What we keep after account deletion
A small set of data we are legally obliged to retain:
- Invoices and transaction records — 10 years (German tax law)
- Ratings you left for sellers — anonymised (so the seller's history stays intact, but your name is removed)
- DAC7 reports for past calendar years — minimum 5 years
Everything else (profile, watchlist, messages, search history) is deleted.
Contact
Data protection lead: privacy@vod-auctions.com Operator: Frank Bull, VOD-Records, Alpenstrasse 25/1, 88045 Friedrichshafen, Germany (impressum)
This is a summary. The legal text is in the Privacy Policy. For specific questions about your data, email privacy@vod-auctions.com.