Privacy

Template to be completed by the operator.

Data controller

[legal name], [address]. Contact: [email address].

What is collected, and why

Account: email address, name, hashed password — to identify you. Listings: title, description, photos, city, price — to publish them. Messages: content of exchanges — to deliver them and handle a dispute. Orders: amount, delivery address, payment method (never the card number, held by the payment provider) — to perform the sale and keep accounts.

Retention

Account: for as long as it exists, then [period]. Withdrawn listings: [period]. Messages: [period] after the conversation closes. Accounting records: the statutory retention period.

Recipients

The payment provider, the host, the email delivery service and, for a sale, the other party — limited to what the transaction requires.

Your rights

Access, rectification, erasure, objection, portability, and withdrawal of consent. Write to [email address]. You may lodge a complaint with the competent supervisory authority.

Trackers

Analytics trackers are set only after your consent, which you may withdraw at any time.