Welcome to the Vintage app!
Vintage is the local digital flea market application for used, second hand and new items. Vintage provides you with access to your local marketplace. Vintage LLC, A. Eristav-Khoshtaria str. 32, Apt 10, 0108, Tbilisi, Georgia (hereinafter referred to as "Operator") operates website (evintage.io) and mobile apps (Vintage app for Android, Vintage app for iOS) (hereinafter collectively "Vintage" / "Vintage services"), under the name "Vintage". The Operator is the controller of personal data within the meaning of the General Data Protection Regulation (GDPR). The Operator decides on the purposes and means of processing personal data and is ultimately responsible for ensuring that the processing takes place in accordance with governing personal data legislation.
II. Data collection and processing
The Operator collects data in connection with the registration of an account and also in connection with subsequent use of the Vintage services. In order to give a good overview of how the processing of personal data is carried out, the personal data has been divided into three categories based on how it is collected:
1. Data that is given to us by the user
When an account is created or activities are carried out through the framework of the account, personal information about the individual user is needed. Personal data in this category is characterized by the fact that the user actively provides the data to us by, e.g. completing a web form, reporting incidents to support, or providing us with feedback through functions created for such purposes. To facilitate the registration for users and to reduce the threat of scammers and spammers the user has three ways of registering an account:
a. Registration via Facebook Connect:
The Operator accesses user data, which is saved in the individual’s Facebook-Profile. The user agrees to share this data with the Operator during the registration process. This permission can be revoked at Facebook at any time. Of course, the Operator does not have access to the users’ Facebook-Login data. The Operator is not liable or responsible for wrong or unauthorized data transfers from Facebook. In order to preserve a certain amount of anonymity towards other users, only the profile picture of the user, the first name and the last name abbreviated to the first letter (Jane D.) instead of the full name (Jane Doe) is shown to other users.
b. Registration via Google Sign in:
The Operator accesses user data, which is saved in the individual’s Google-Profile. The user agrees to share this data with the Operator during the registration process. This permission can be revoked at Google at any time. Of course, the Operator does not have access to the users’ Google-Login data. The Operator is not liable or responsible for wrong or unauthorized data transfers from Google. In order to preserve a certain amount of anonymity towards other users, only the profile picture of the user, the first name and the last name abbreviated to the first letter (Jane D.) instead of the full name (Jane Doe) is shown to other users.
c. Registration with E-Mail:
The Operator hereby accesses the data of the user, which he has specified during the registration process, i.e. name, e-mail address and telephone number. The profile data given by the user must be correct, complete and must continuously be kept up-to-date. In order to preserve a certain amount of anonymity towards other users, only the profile picture of the user, the first name and the last name abbreviated to the first letter (Jane D.) instead of the full name (Jane Doe) is shown to other users.
2. Data collected when you use the Vintage services
By using the Vintage services and carrying out activities, the user provides data which is stored by the Operator in its database. This process takes place for user recognition and to ensure the delivery of the service that the user has requested. The Operator will also store information when the user contacts the Operator, for example when the user e-mails the Operator’s customer support, so that the Operator can assist the user and answer open questions. The Operator may use anonymous and aggregated data about such inquiries to improve its services. By using the Vintage services, the Operator gathers information about individual user’s activity, e.g. which services and screens are visited within Vintage and how they are used. The collected data can be divided into the following types:
a. Technical information about the user’s device and internet connection
Through server logs and other tools, the Operator records information about the user’s device and internet connection, including operating system, browser version, IP addresses, cookies and other unique identifiers. The technical information is usually processed as aggregated data in order to analyze how the Operator’s services are used. The Operator may, however, link such data to the user’s account, for instance so that the Operator can customize the Vintage-services to the User’s device.
b. Information about the use of the Vintage services
The Operator registers the user’s account activities such as logging in or out of the user account, and any purchase of products or services through the Vintage services. The Operator also stores information about a user’s visit on Vintage. The Operator uses this information, amongst other things, to prevent abuse and fraudulent activities, to improve the Vintage services and to provide users with personalized services, recommendations and information.
c. Information about users’ location
When Vintage is used, the individual user’s location may be estimated through the IP or Geo-location detected on the individual’s device. This information is, for instance, used to show content or provide offers relevant to the user’s location. This is done to improve the Vintage services and to identify and display the location of the classified ads listed by the user. In order to avoid the identification of a user’s actual exact location, a displaced location of the seller is shown in the published classified ads.
d. Cookies and locally stored content
3. Information from other sources
The Operator may from time to time receive information from other sources such as partners, ad networks and other third parties that help the Operator understand user activity and preferences. This is collected to improve the Vintage services. Examples of this include when the user creates a user account by connecting with his/her Facebook profile, and the Operator may add basic profile information. An advertising partner may also share information about what happened after the user had clicked on an ad on the Operator’s website, so that the Operator can measure the impact of an ad and provide more relevant content or advertisements. The analysis is usually carried out at an aggregated and anonymized level.
III. Processing purpose
The Operator uses data of the user for the following purposes: The Operator processes data for the purposes of (1) delivering the Vintage services; (2) improving and developing the Vintage services; (3) delivering personalized advertisements, offerings and recommendations to the users; (4) identification of market trends; (5) preventing, limiting and investigating abuse of the Vintage services. More detailed information about purposes is available here below.
1. Delivery of the Vintage-Services
For the usage of Vintage-Services it is necessary, that the Operator identifies the users’ current location. This allows Vintage to show classified ads located close to the user and is also used when publishing classified ads by sellers. In order to avoid the identification of a user’s actual exact location, a displaced location of the seller is shown in the published classified ads. In addition, the Operator uses other personal information to personalize a user’s account and offer a good user experience. This relates primarily to user experience in connection with registration, login, surfing between services and purchases of products and services.
2. Improvement and further development of the Vintage Services
The Operator uses information to improve its services, for instance by trying to make the registration, log in and payment processes for premium services as user-friendly as possible. This may result in, for instance, registering all steps (screen views, clicks) related to the search of a particular product in order to understand if certain elements of the process are confusing to the users or not. The analysis is usually carried out at an aggregated and anonymized level, but the Operator may also use identifiable data to provide technical support and to understand how each individual uses the Vintage services. To improve the Vintage services and to detect and analyze errors, the Operator uses certain tracking-tools. Therefore, the Operator traces user behavior independently as well as via third-party suppliers (e.g. Google Analytics, Firebase). The Operator may inform the user about changes to or improvements of the Vintage services by using his e-mail address or – if the user uses mobile devices - through push notifications. In addition, the user will recurrently receive the Vintage newsletter. The newsletter can be unsubscribed in the user profile or by directly clicking on the unsubscribe link within the newsletter. Push notifications can be easily turned off directly in the settings of the used mobile device.
3. Personalized contents, offerings and recommendations
The Operator uses information to personalize and tailor services, and to also provide the users with a content that may be relevant to them. Sometimes the Operator serves content based on the user’s explicit wishes, such as if the user opts in to receive search alerts. The Operator may also serve content and recommendations based on user activities; for instance, when the Operator recommends products based on popularity among users. The Operator can advertise via the Vintage services and collaborates with third party providers in order to optimize the impact of the advertisement. In order to display personalized advertisements in the Services, data such as birthday (if shared by the user), gender (if shared by the user), approximate geographic location, language, internet service provider (ISP), categories of interest, can be shared with advertising network operators such as Google, Facebook, AppNexus and other comparable providers. If explicit user consent for such data transfer is required, consent will be collected. In this case the user consent can be withdrawn at any time in the user settings.
4. Identification of market trends
The Operator analyses data to understand market trends in order to improve, develop and customize the Vintage services. Such analysis can be made both by the Operator directly or by so called data processors, which analyze the data on behalf of the Operator (subject to strict data processing agreements that maintain data confidentiality and integrity).
5. Preventing, limiting and investigating abuse of the Vintage services
We use information to restrict various forms of abuse of the Vintage services, such as fraudulent activities, denial of service attacks, spamming, unauthorized logins and other actions that violate our Terms & Conditions, or are prohibited by law.
IV. Legal Basis for data processing
If the operator processes personal user data such processing is necessary for the performance of the contractual services or for the purposes of the legitimate interests pursued by the operator. Any further data processing not necessary for the aforementioned purposes will be only carried out if the user has given consent to the processing or if necessary, for compliance with a legal obligation to which the operator is subject.
V. Usage of data by third parties
VI. Transfer of data
1.Transfer of personal data within the Vintage LLC
2. Disclosure of personal data to a third party
If there is suspicion of illegal activities in connection with the use of our services, information may be disclosed to the police and other public authorities subject to a court or administrative order. The Operator may share information with other third parties if they can prove an overriding interest in the identity verification of a user as well as in the determination of certain unlawful facts. Further third parties have to substantiate that the knowledge of this information is essential evidence for a prosecution act.
3. Data processors
The operator collaborates with service providers (data processors within the meaning of the GDPR) especially for displaying adverts, to analyze user behavior and to integrate third party services. The operator enters into data processor agreements according to Article 28 GDPR with such service providers.
4. Transfer of personal data to a country outside the EU or the EEA
The Operator transfers personal data only to a third country, i.e. a country outside the EU or the EEA where there is either a decision of the European Commission on sufficient data protection standards, or there is an agreement on the EU Standard Contractual Clauses (http://ec.europa.eu/justice/data-protection/international-transfers/transfer/index_en.htm; and https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en) or they are certified under the privacy shield (https://www.privacyshield.gov/welcome).
VII. Cookies and other technologies
The Vintage website uses “cookies” in order to enable all functionalities of the Vintage website and to facilitate the use of the page. "Cookies" are small text files that allow the Operator to store specific information on the user’s PC while he/she visits the Operator’s website. A list of the cookies placed directly by the operator can be found here. The User may disable cookies in general, restrict them from certain websites or adjust his/her browser to notify him/her about cookies. Cookies can be removed from a PCs hard disk at any time. Please note that in this case the display of the website might be restricted and that the user guidance might be limited.
VIII. User Rights
1. Right to Information
The user has the right to be informed on if and what personal data of the user the operator processes and to request a copy of such data. To exercise this right the user can contact Vintage Customer Service (firstname.lastname@example.org).
2. Right of rectification and restriction
The user has the right to rectification, restriction, addition or deletion of personal data concerning him where the data is inaccurate or the processing unlawful.
3. Right to object
The user is in certain cases entitled to object against processing personal data concerning him and to withdraw consent where consent has been given.
4. Right to data portability
The user has the right to demand data portability of registration data concerning him. In order to exercise the right to data portability the user has to contact Vintage Customer Service (email@example.com).
5. Right to complaint
The user has the right to contact data protection officer; Our data protection officer can be reached under firstname.lastname@example.org.
IX. Duration of storage
Personal data is kept no longer than necessary in order to be able to satisfy the purpose of the processing. Personal data is deleted or anonymized on a regular basis when it is no longer relevant for the purposes for which it has been collected. The Operator will, for example, retain personal data as long as the account has not been deleted or the user has revoked his consent according to Clause VI or as long as necessary for the provision of the Vintage services or as otherwise necessary to comply with applicable laws. Vintage LLC, A. Eristav-Khoshtaria str. 32, Apt 10, 0108, Tbilisi, Georgia.