This Privacy Policy explains how PopAuctioon (hereinafter, "we") collects, uses, stores and protects the personal information of users who access, register or participate in our online auction platform.
- National ID, NIE or passport, where required to comply with legal obligations or issue invoices.
- Payment information (payments are processed through a secure payment gateway provided by our financial institution. PopAuctioon does not store or have access to your full payment card details).
Information we collect automatically
- IP address, browser and operating system
- Browsing activity
- Recordings in live events (only the auctioneer or host video stream is recorded. Users participating as viewers are not recorded or captured in video or audio).
- Cookies (see Cookies Policy)
What we use your data for
- Manage your registration and user account
- Manage auctions, bids and purchases made through the platform
- Verify your identity when necessary
- Process payments, shipments and, where applicable, issue invoices
- Send communications related to our services
- Improve user experience and our services
- Prevent fraud and ensure platform security
- Comply with legal, tax and regulatory obligations
Legal basis for processing
- Consent, where applicable
- Contract execution
- Legal obligation
- Legitimate interest
Who we share your information with
- Technology providers required for operating the platform
- Payment service providers
- Email and customer support providers
- Shipping companies for delivery management
- Public authorities where legally required
- We never sell your personal data or share it with third parties for advertising purposes.
Data retention
We keep your personal data for as long as you maintain an active account or a relationship with us. Afterwards, it will only be retained for the time necessary to comply with our legal, tax or contractual obligations and for the establishment, exercise or defence of legal claims.
International data transfers
Some of our technology providers may access or process personal data outside the European Economic Area. Whenever this occurs, appropriate safeguards required by the General Data Protection Regulation (GDPR) will be applied.
Information security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or disclosure. You are also responsible for protecting your account credentials.
Your rights
- Right of access
- Right to rectification
- Right to erasure
- Right to object
- Right to restriction of processing
- Right to data portability
- Right to withdraw your consent at any time
- You may exercise these rights free of charge
- Right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority
To exercise any of these rights, you can contact us at [email protected]. We will respond within a maximum of 30 days.
Minors
Our platform is not intended for users under 18 years old. If you are a minor, you should not register or use our services.
Changes to this policy
We may update this Privacy Policy whenever necessary to reflect legal, technical or operational changes to our services. We will notify you of any material changes through our website or by email.