Privacy Policy

Welcome to the Vintage app!

Vintage is the local digital flea market application for used, second hand and new items. Vintage provides you with access to your local marketplace. Vintage LLC, A. Eristav-Khoshtaria str. 32, Apt 10, 0108, Tbilisi, Georgia (hereinafter referred to as "Operator") operates website (evintage.io) and mobile apps (Vintage app for Android, Vintage app for iOS) (hereinafter collectively "Vintage" / "Vintage services"), under the name "Vintage". The Operator is the controller of personal data within the meaning of the General Data Protection Regulation (GDPR). The Operator decides on the purposes and means of processing personal data and is ultimately responsible for ensuring that the processing takes place in accordance with governing personal data legislation.

I. Preamble

The Operator takes data privacy very seriously and wants to reveal openly and transparently how this topic is dealt with. When Vintage is used, the Operator is provided with a set of personal data. Personal data means information which can directly or indirectly be linked to a living natural person. Examples of personal data include name, address, telephone number and email address; however, information about IP numbers and user behavior when using the services may also constitute personal data. Below, the Operator explains to the users of Vintage (hereinafter referred to as “user” or “users”) how data, what kind of data and for what purpose data is collected and to whom this data may be shared with. Finally, the Operator informs users about their rights as well as internal rules for data storage. This Privacy Policy is a supplement to the terms and conditions and applies to the use of the Vintage services and the utilization of all other offered services on Vintage. The privacy policy applied refers to the policy available online at Vintage at the time of a user’s specific visit or at the time of the specific use of a Vintage service.

II. Data collection and processing

The Operator collects data in connection with the registration of an account and also in connection with subsequent use of the Vintage services. In order to give a good overview of how the processing of personal data is carried out, the personal data has been divided into three categories based on how it is collected:

1. Data that is given to us by the user

When an account is created or activities are carried out through the framework of the account, personal information about the individual user is needed. Personal data in this category is characterized by the fact that the user actively provides the data to us by, e.g. completing a web form, reporting incidents to support, or providing us with feedback through functions created for such purposes. To facilitate the registration for users and to reduce the threat of scammers and spammers the user has three ways of registering an account:

a. Registration via Facebook Connect:

The Operator accesses user data, which is saved in the individual’s Facebook-Profile. The user agrees to share this data with the Operator during the registration process. This permission can be revoked at Facebook at any time. Of course, the Operator does not have access to the users’ Facebook-Login data. The Operator is not liable or responsible for wrong or unauthorized data transfers from Facebook. In order to preserve a certain amount of anonymity towards other users, only the profile picture of the user, the first name and the last name abbreviated to the first letter (Jane D.) instead of the full name (Jane Doe) is shown to other users.

b. Registration via Google Sign in:

The Operator accesses user data, which is saved in the individual’s Google-Profile. The user agrees to share this data with the Operator during the registration process. This permission can be revoked at Google at any time. Of course, the Operator does not have access to the users’ Google-Login data. The Operator is not liable or responsible for wrong or unauthorized data transfers from Google. In order to preserve a certain amount of anonymity towards other users, only the profile picture of the user, the first name and the last name abbreviated to the first letter (Jane D.) instead of the full name (Jane Doe) is shown to other users.

c. Registration with E-Mail:

The Operator hereby accesses the data of the user, which he has specified during the registration process, i.e. name, e-mail address and telephone number. The profile data given by the user must be correct, complete and must continuously be kept up-to-date. In order to preserve a certain amount of anonymity towards other users, only the profile picture of the user, the first name and the last name abbreviated to the first letter (Jane D.) instead of the full name (Jane Doe) is shown to other users.

2. Data collected when you use the Vintage services

By using the Vintage services and carrying out activities, the user provides data which is stored by the Operator in its database. This process takes place for user recognition and to ensure the delivery of the service that the user has requested. The Operator will also store information when the user contacts the Operator, for example when the user e-mails the Operator’s customer support, so that the Operator can assist the user and answer open questions. The Operator may use anonymous and aggregated data about such inquiries to improve its services. By using the Vintage services, the Operator gathers information about individual user’s activity, e.g. which services and screens are visited within Vintage and how they are used. The collected data can be divided into the following types:

a. Technical information about the user’s device and internet connection

Through server logs and other tools, the Operator records information about the user’s device and internet connection, including operating system, browser version, IP addresses, cookies and other unique identifiers. The technical information is usually processed as aggregated data in order to analyze how the Operator’s services are used. The Operator may, however, link such data to the user’s account, for instance so that the Operator can customize the Vintage-services to the User’s device.

b. Information about the use of the Vintage services

The Operator registers the user’s account activities such as logging in or out of the user account, and any purchase of products or services through the Vintage services. The Operator also stores information about a user’s visit on Vintage. The Operator uses this information, amongst other things, to prevent abuse and fraudulent activities, to improve the Vintage services and to provide users with personalized services, recommendations and information.

c. Information about users’ location

When Vintage is used, the individual user’s location may be estimated through the IP or Geo-location detected on the individual’s device. This information is, for instance, used to show content or provide offers relevant to the user’s location. This is done to improve the Vintage services and to identify and display the location of the classified ads listed by the user. In order to avoid the identification of a user’s actual exact location, a displaced location of the seller is shown in the published classified ads.

d. Cookies and locally stored content

When the user uses the Vintage services, the Operator applies various technologies in order to recognize the user. The Vintage website uses “cookies” in order to enable all functionalities of the Vintage website and to facilitate the use of the page. For instance, the Operator uses cookies so that the user does not have to log in every time he visits the Operator’s services. The Operator may also store anonymous identifiers locally on the user’s device, especially mobile devices that are incapable of using cookies. See Clause VII below for more information on cookies and anonymous identifiers.

3. Information from other sources

The Operator may from time to time receive information from other sources such as partners, ad networks and other third parties that help the Operator understand user activity and preferences. This is collected to improve the Vintage services. Examples of this include when the user creates a user account by connecting with his/her Facebook profile, and the Operator may add basic profile information. An advertising partner may also share information about what happened after the user had clicked on an ad on the Operator’s website, so that the Operator can measure the impact of an ad and provide more relevant content or advertisements. The analysis is usually carried out at an aggregated and anonymized level.

III. Processing purpose

The Operator uses data of the user for the following purposes: The Operator processes data for the purposes of (1) delivering the Vintage services; (2) improving and developing the Vintage services; (3) delivering personalized advertisements, offerings and recommendations to the users; (4) identification of market trends; (5) preventing, limiting and investigating abuse of the Vintage services. More detailed information about purposes is available here below.

1. Delivery of the Vintage-Services

For the usage of Vintage-Services it is necessary, that the Operator identifies the users’ current location. This allows Vintage to show classified ads located close to the user and is also used when publishing classified ads by sellers. In order to avoid the identification of a user’s actual exact location, a displaced location of the seller is shown in the published classified ads. In addition, the Operator uses other personal information to personalize a user’s account and offer a good user experience. This relates primarily to user experience in connection with registration, login, surfing between services and purchases of products and services.

2. Improvement and further development of the Vintage Services

The Operator uses information to improve its services, for instance by trying to make the registration, log in and payment processes for premium services as user-friendly as possible. This may result in, for instance, registering all steps (screen views, clicks) related to the search of a particular product in order to understand if certain elements of the process are confusing to the users or not. The analysis is usually carried out at an aggregated and anonymized level, but the Operator may also use identifiable data to provide technical support and to understand how each individual uses the Vintage services. To improve the Vintage services and to detect and analyze errors, the Operator uses certain tracking-tools. Therefore, the Operator traces user behavior independently as well as via third-party suppliers (e.g. Google Analytics, Firebase). The Operator may inform the user about changes to or improvements of the Vintage services by using his e-mail address or – if the user uses mobile devices - through push notifications. In addition, the user will recurrently receive the Vintage newsletter. The newsletter can be unsubscribed in the user profile or by directly clicking on the unsubscribe link within the newsletter. Push notifications can be easily turned off directly in the settings of the used mobile device.

3. Personalized contents, offerings and recommendations

The Operator uses information to personalize and tailor services, and to also provide the users with a content that may be relevant to them. Sometimes the Operator serves content based on the user’s explicit wishes, such as if the user opts in to receive search alerts. The Operator may also serve content and recommendations based on user activities; for instance, when the Operator recommends products based on popularity among users. The Operator can advertise via the Vintage services and collaborates with third party providers in order to optimize the impact of the advertisement. In order to display personalized advertisements in the Services, data such as birthday (if shared by the user), gender (if shared by the user), approximate geographic location, language, internet service provider (ISP), categories of interest, can be shared with advertising network operators such as Google, Facebook, AppNexus and other comparable providers. If explicit user consent for such data transfer is required, consent will be collected. In this case the user consent can be withdrawn at any time in the user settings.

4. Identification of market trends

The Operator analyses data to understand market trends in order to improve, develop and customize the Vintage services. Such analysis can be made both by the Operator directly or by so called data processors, which analyze the data on behalf of the Operator (subject to strict data processing agreements that maintain data confidentiality and integrity).

5. Preventing, limiting and investigating abuse of the Vintage services

We use information to restrict various forms of abuse of the Vintage services, such as fraudulent activities, denial of service attacks, spamming, unauthorized logins and other actions that violate our Terms & Conditions, or are prohibited by law.

IV. Legal Basis for data processing

If the operator processes personal user data such processing is necessary for the performance of the contractual services or for the purposes of the legitimate interests pursued by the operator. Any further data processing not necessary for the aforementioned purposes will be only carried out if the user has given consent to the processing or if necessary, for compliance with a legal obligation to which the operator is subject.

V. Usage of data by third parties

For all services, that use social networking functionalities such as the Facebook-like button or the Google +1 button, please be aware, that Facebook and other suppliers of social networks can collect user data even if the user is not registered on the page or has not specifically approved the data transfer. By using popular functions such as the Facebook “Like-Button” or the Google “+1 Button” the providers of these features can draw conclusions concerning page visits and the individual user’s behavior. Further information can be found in the terms and privacy policy of the respective supplier (amongst others http://www.google.at/intl/en/policies/privacy/, http://www.facebook.com/policy.php).Users may prevent such data collection by logging out of social media networks before logging in to the services.

VI. Transfer of data

The Operator will not share, sell, convey or otherwise disclose personal data other than as stated in this Privacy Policy, unless it is required to do so by law or the user has given his/her explicit consent to do so. However, the operator may collaborate with service providers who process data based on corresponding data processing agreements. Service providers processing user data on behalf of the operator will only do so for the purposes as prescribed in the data processing agreement and as explicitly instructed by the operator. Personal data may be transferred due to the following reasons:

1.Transfer of personal data within the Vintage LLC

Personal data may be transferred to other companies within Vintage and companies owned wholly or partially, directly or indirectly by Vintage LLC insofar it is relevant for achieving the purposes under this privacy policy except where the interests of the user in confidentiality prevail. Such companies may independently process personal data with the aim of personalizing and improving user’s experience and/or their own products and services, in accordance with the privacy policy applicable to each specific company.

2. Disclosure of personal data to a third party

If there is suspicion of illegal activities in connection with the use of our services, information may be disclosed to the police and other public authorities subject to a court or administrative order. The Operator may share information with other third parties if they can prove an overriding interest in the identity verification of a user as well as in the determination of certain unlawful facts. Further third parties have to substantiate that the knowledge of this information is essential evidence for a prosecution act.

3. Data processors

The operator collaborates with service providers (data processors within the meaning of the GDPR) especially for displaying adverts, to analyze user behavior and to integrate third party services. The operator enters into data processor agreements according to Article 28 GDPR with such service providers.

4. Transfer of personal data to a country outside the EU or the EEA

The Operator transfers personal data only to a third country, i.e. a country outside the EU or the EEA where there is either a decision of the European Commission on sufficient data protection standards, or there is an agreement on the EU Standard Contractual Clauses (http://ec.europa.eu/justice/data-protection/international-transfers/transfer/index_en.htm; and https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en) or they are certified under the privacy shield (https://www.privacyshield.gov/welcome).

VII. Cookies and other technologies

The Vintage website uses “cookies” in order to enable all functionalities of the Vintage website and to facilitate the use of the page. "Cookies" are small text files that allow the Operator to store specific information on the user’s PC while he/she visits the Operator’s website. A list of the cookies placed directly by the operator can be found here. The User may disable cookies in general, restrict them from certain websites or adjust his/her browser to notify him/her about cookies. Cookies can be removed from a PCs hard disk at any time. Please note that in this case the display of the website might be restricted and that the user guidance might be limited.

VIII. User Rights

1. Right to Information

The user has the right to be informed on if and what personal data of the user the operator processes and to request a copy of such data. To exercise this right the user can contact Vintage Customer Service (support@evintage.io).

2. Right of rectification and restriction

The user has the right to rectification, restriction, addition or deletion of personal data concerning him where the data is inaccurate or the processing unlawful.

3. Right to object

The user is in certain cases entitled to object against processing personal data concerning him and to withdraw consent where consent has been given.

4. Right to data portability

The user has the right to demand data portability of registration data concerning him. In order to exercise the right to data portability the user has to contact Vintage Customer Service (support@evintage.io).

5. Right to complaint

The user has the right to contact data protection officer; Our data protection officer can be reached under support@evintage.io.

IX. Duration of storage

Personal data is kept no longer than necessary in order to be able to satisfy the purpose of the processing. Personal data is deleted or anonymized on a regular basis when it is no longer relevant for the purposes for which it has been collected. The Operator will, for example, retain personal data as long as the account has not been deleted or the user has revoked his consent according to Clause VI or as long as necessary for the provision of the Vintage services or as otherwise necessary to comply with applicable laws. Vintage LLC, A. Eristav-Khoshtaria str. 32, Apt 10, 0108, Tbilisi, Georgia.