Privacy Policy
Preliminary remark
This privacy policy applies to individuals who use our website or online presences within social networks, register on our website or otherwise communicate with our company.
1. Person responsible for data processing
1.1 Responsible for data processing within the meaning of Art. 4 No. 7 GDPR is:
AUCTIONCENTER.de
Adam Krumbach
Berggartenstrasse 19
01277 Dresden
+49 351 41892617
email@auktionszentrum.de
1.2 If you use our online presence on Facebook (so-called "fan page") or Instagram, we are jointly responsible for the collection of Insight data with the operator of the platforms, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter "Meta"). We have concluded a controller agreement with Meta regarding the joint processing of personal data (Controller Addendum), which specifies which data processing operations we or Meta are responsible for when you visit our fan page or Instagram page. This agreement can be viewed at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
For further information, please see Section 6.
2. General information on data processing when using our websites
2.1 Server log files
Type and purpose of processing:
When you visit our website and each time you access a file, our website provider automatically collects and stores information in so-called server log files. These include: browser type and version, operating system used, referrer URL, host name of the accessing computer, date and time of access, and IP address.
The data will be processed in particular for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring smooth use of our website,
- Evaluation of system security and stability as well as
- to optimize our website.
We do not use your data to draw conclusions about you personally. We may statistically evaluate this type of information anonymously to optimize our website and the technology behind it.
Legal basis:
The processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. For this purpose, the server log files must be temporarily recorded.
Recipient:
Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website. We have concluded a contract for order processing with these service providers in accordance with Art. 28 (3) GDPR, which guarantees that your personal data will only be processed in accordance with our instructions and in compliance with the GDPR.
Third country transfer:
The data collected will not be transferred to third countries.
Storage period:
The data is deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this generally occurs when the respective session ends. If the data is stored in log files, this occurs after 14 days at the latest. Longer storage is possible. In this case, the users' IP addresses are anonymized so that the accessing client can no longer be identified.
Provision required or necessary:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Furthermore, individual services may be unavailable or restricted.
2.2 Cookies
Type and purpose of use:
These websites use cookies that enable the use of our website's technical functions (technically necessary cookies). Cookies are small data packets and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Most of the cookies we use are automatically deleted after your visit. You can set your browser to inform you when cookies are set, to allow cookies only in individual cases, to exclude cookies for certain cases or generally, and to activate the automatic deletion of cookies when closing the browser. Depending on your browser provider, you can find the necessary information under the following links:
- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
- Opera: http://www.opera.com/de/help
- Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE
If cookies are deactivated, the functionality of this website will be limited.
Legal basis:
To the extent that personal data is processed with the help of cookies that are necessary for the electronic communication process, this is done on the basis of Art. 6 (1) (f) GDPR, and otherwise on the basis of Section 25 (2) No. 2 TTDSG. We have a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of our services.
3. Special information when registering on our website
Registration on our website is required if you wish to participate as a bidder/buyer in one of our online auctions.
Type and purpose of processing:
To register on our website, we require some personal data, which is transmitted to us via an input mask. This data includes the following: company name, first and last name, user name, address and contact details, date of birth, VAT identification number, acceptance of general terms and conditions, newsletter desired yes/no, and the date and time of your registration. The purpose of processing is to identify you in the bidding process and to verify your eligibility to participate. If you are awarded a bid, contract data, payment transaction data, data about correspondence with you or other parties, and receivables and payment data will also be processed. The purpose of processing is to fulfill our mutual contractual obligations.
Legal basis:
The processing of the data entered during registration is based on Art. 6 (1) (b) GDPR for the initiation and execution of a contractual relationship.
Recipient:
Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website. If a purchase contract for the auctioned item is concluded, your first and last name, as well as your address and contact details, may be transmitted to the seller.
Third country transfer:
The data collected will not be transferred to third countries.
Storage period:
If you have not participated in an auction or have not been awarded a bid, your registration data will be stored until you request that we cancel your registration. If a purchase contract has been concluded, the personal data will be stored until the mutual obligations arising from this contractual relationship have been fully fulfilled. Storage beyond this point in time will occur if this is required due to commercial and tax law regulations for the recording of business transactions and the retention of documents. The periods stipulated in commercial and tax law are 2-10 years. If the data is no longer required to fulfill contractual or legal obligations, it will be deleted. A review of whether the conditions for deletion are met is generally carried out annually.
Provision required or necessary:
There is no legal obligation to provide data. However, there is a contractual obligation to provide data if you wish to participate in an auction as a bidder. Without providing the data, you cannot participate in any auction.
4. Special information on data processing when registering for our newsletter
Type and purpose of processing:
If you sign up for our free newsletter, the data you provide, i.e., your email address, will be transmitted to us. The email address is processed for the purpose of delivering the newsletter and to verify that the registration was actually made by the owner of the email address. For this purpose, we use the "double opt-in" procedure. We log the newsletter registration, the sending of a confirmation email, and the receipt of the requested response. No further data is collected.
Legal basis:
The legal basis for the processing is your consent in accordance with Art. 6 (1) (a) GDPR.
Recipient:
Recipients of the data may be our technical service providers (website and email account providers).
Third country transfer:
The data collected will not be transferred to third countries.
Storage period:
In this context, the data will only be processed as long as the corresponding consent has been obtained. After that, it will be deleted.
Provision required or necessary:
The provision of your personal data for the purpose of sending the newsletter is voluntary. However, without your consent, we unfortunately cannot send you our newsletter.
Revocation of consent:
You can revoke your consent to the processing of your data for the purpose of sending the newsletter at any time with future effect. A corresponding link is included in every newsletter. You can also unsubscribe directly on this website at any time or notify us of your revocation using the contact option provided at the end of this privacy policy.
5. Special instructions for contacting us by email or other electronic means of communication
Type and purpose of processing:
If you contact us via email or other electronic means of communication, the data you provide will be processed. This data may include your email address and other contact details, your name, and your request. We process the data to respond to your message or answer your inquiry.
Legal basis:
The data is processed on the basis of a legitimate interest (Art. 6 (1) (f) GDPR). We have a legitimate interest in the effective processing of inquiries and requests addressed to us. If you contact us to request a quote, the data transmitted to us will be processed to carry out pre-contractual measures (Art. 6 (1) (b) GDPR).
Recipient:
Recipients of the data may be our technical service providers, e.g. the email service provider.
Third country transfer:
The data collected will not be transferred to third countries.
Storage period:
The data you provide will remain with us until you request its deletion or the purpose for storing it no longer applies (e.g., after your request has been processed). Storage beyond this point in time will occur if required by commercial and tax law for recording business transactions and retaining documents. The retention periods stipulated in commercial and tax law are 2-10 years. If the data is no longer required to fulfill contractual or legal obligations, it will be deleted.
Provision required or necessary:
Providing your personal data is voluntary. However, we can only process your request if you provide us with your name, email address, and the subject of your request.
6. Special information on data processing when using our Facebook fan page and our Instagram page
To inform our target audience and communicate with interested parties, we operate a fan page on the Facebook platform and an Instagram page on the Instagram platform. We are jointly responsible for these social media platforms with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter "Meta") (see Section 1.2 of our Privacy Policy).
Type and purpose of processing:
If you contact us via our Facebook fan page or Instagram page or comment on a post, we process the data you provide, such as your name, profile name, account name, and the content of the communication. We use the data you provide to process your request. We obtain usage statistics from Meta to improve the posts published there and make them as interesting as possible for users.
When you visit our pages on the Facebook and Instagram platforms, Meta uses certain usage data, such as whether you have "liked," shared, or commented on our posts, to provide us with certain usage statistics. The usage statistics do not allow conclusions to be drawn about the behavior of individual users; they merely provide us with an overview of the general use of our fan page (e.g., which posts were clicked most frequently). We do not have access to the data Meta uses to compile the statistics. Furthermore, we have no influence on which usage actions are logged by Meta. When you visit our fan page or other subpages of www.facebook.com, Meta may also collect additional usage data. Meta is solely responsible for this data processing under data protection law. Meta provides information on this in its privacy policy:
https://www.facebook.com/privacy/policy and
https://www.instagram.com/legal/privacy/
and their cookie policies
https://www.facebook.com/privacy/policies/cookies and https://www.instagram.com/legal/cookies/
available.
Meta will also process the personal data for its own purposes, e.g., for market research and advertising purposes. For example, user profiles can be created based on user behavior and the resulting interests of the users. These user profiles can then be used, for example, to place advertisements within and outside of the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' end devices in which the user behavior and interests are stored. Furthermore, data can also be stored in the user profiles regardless of the device you use (especially if you are registered with Facebook or Instagram and logged into the platform).
Legal basis:
Your personal data is processed for the aforementioned purposes to protect our legitimate interests, taking into account your interests in accordance with Art. 6 (1) (f) GDPR. We have a legitimate interest in effective public relations, which also includes the use of social media platforms such as Facebook.
If you are logged in to Facebook or Instagram yourself, the processing will also be carried out in accordance with Art. 6 (1) (b) GDPR in accordance with the terms of use that apply between you and Meta. The legal basis for data processing by Meta may also be consent pursuant to Art. 6 (1) (a) GDPR, which you have granted to Meta. You can revoke this consent at any time with effect for the future by notifying Meta in accordance with Art. 7 (3) GDPR.
Recipient:
If you communicate with us via our Facebook and Instagram pages, your personal data will also be transmitted to Meta. We have entered into an agreement with Meta regarding the joint processing of personal data. This agreement specifically regulates the security measures Meta must observe and in which Meta has agreed to comply with the rights of data subjects (for more information on data subject rights, please see Section 7 of our Privacy Policy). However, your rights vis-à-vis us are not restricted by the agreements with Meta. However, we would like to point out that these can be most effectively asserted with Meta Platforms Ireland Limited. Only Meta has access to the data and can directly take appropriate measures or provide information.
Storage period:
The data we collect directly from our Facebook and Instagram pages will be deleted from our systems as soon as you request deletion or the purpose for storing the data no longer applies. Cookies stored by Meta remain on your device until you delete them. We have no influence on the storage period of your data, which Meta stores for its own purposes. For details, please refer to Meta's privacy policy.
https://www.facebook.com/privacy/policy and
https://www.instagram.com/legal/privacy/
and their cookie policies
https://www.facebook.com/privacy/policies/cookies and
https://www.instagram.com/legal/cookies/ .
Third country transfer:
Please note that Meta may also process your data outside the European Union, particularly in the USA. This may pose risks because it could make it more difficult to enforce your rights. Data transfer to the USA is based on an adequacy decision of the European Commission (EU-US Data Privacy Framework).
7. Information about your rights
7.1 You have the following rights with regard to the data concerning you:
- Right to information, Art. 15 GDPR
- Right to rectification, Art. 16 GDPR
- Right to erasure, Art. 17 GDPR
- Right to restriction of processing, Art. 18 GDPR
- Right to object to the collection, processing and/or use, Art. 21 GDPR (for legal reasons, we will specifically inform you of this right in section 7.4 of this privacy policy)
- Right to data portability, Art. 20 GDPR
7.2. If the processing of personal data is based on your consent pursuant to Article 6 (1) (a) GDPR, you can freely revoke this consent at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of the consent up to the time of revocation. To exercise your revocation, please use the contact details provided in Section 1 or the technical options we referred to in Section 4.
7.3. You can lodge a complaint with a supervisory authority at any time, e.g., the competent supervisory authority in the federal state of your residence or the authority responsible for us as the controller. The address of the supervisory authority responsible for us is:
The Saxon Data Protection and Transparency Commissioner
Postal address: PO Box 11 01 32, 01330 Dresden,
House address: Devrientstraße 5, 01067 Dresden
Telephone: 0351/85471 101
Fax: 0351/85471 109
Internet: www.datenschutz.sachsen.de
Email: post@sdtb.sachsen.de
7.4 Information about your right of objection under Art. 21 GDPR
1) Individual right of objection
You have the right to object at any time to the processing of personal data concerning you based on Article 6 (1) (f) GDPR (data processing based on a balance of interests), for reasons related to your particular situation; this also applies to profiling based on this provision within the meaning of Article 4 (4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
2) Right to object to the processing of data for advertising purposes
If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such advertising purposes; this also applies to profiling insofar as it is related to direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection can be made informally using the following contact details:
AUCTIONCENTER.de
Adam Krumbach
Berggartenstrasse 19
01277 Dresden
+49 351 41892617
email@auktionszentrum.de