Privacy Policy

Data Controller

peabeavsyg B.V. is the data controller for the personal data processed through our marketplace platform. We are registered in the Netherlands with registration number 81763945 and are located at Stationsweg 193, 1076 QW Amsterdam, Netherlands.

Data Collection

The data we collect includes personal information that you provide directly to us, information we collect automatically when you use our services, and information we receive from third parties. This may include:

• Personal identification information (name, email address, phone number)
• Account information and login credentials
• Transaction and payment information
• Communication records and customer service interactions
• Device information, IP addresses, and usage data
• Location data when you use location-based services
• Cookies and similar tracking technologies data

How We Use Your Information

We explain how we use your information to provide and improve our marketplace services, process transactions, and communicate with you. The use of your data includes:

• Providing and maintaining our marketplace platform
• Processing transactions and managing vendor relationships
• Communicating with you about your account and transactions
• Providing customer support and responding to inquiries
• Improving our services and developing new features
• Ensuring security and preventing fraud
• Complying with legal obligations and regulatory requirements
• Marketing communications (with your consent)

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds: performance of a contract, legitimate interests, legal compliance, vital interests, and consent where explicitly given. We ensure that all processing activities have a valid legal basis and are necessary for the stated purposes.

Data Sharing and Disclosure

We may share your personal information with:

• Verified vendors on our marketplace platform (limited to transaction-related information)
• Payment processors and financial institutions for transaction processing
• Logistics and delivery partners for order fulfilment
• Service providers who assist us in operating our platform
• Legal authorities when required by law or to protect our rights
• Business partners with your explicit consent

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this privacy policy, comply with legal obligations, resolve disputes, and enforce agreements. Account information is retained for the duration of your account plus 7 years for legal compliance. Transaction records are kept for 7 years as required by Dutch law. Marketing communications data is retained until you withdraw consent. We regularly review and delete data that is no longer necessary.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Request transfer of your data
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for consent-based processing

International Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including adequacy decisions, Standard Contractual Clauses, or other approved mechanisms under GDPR. We work only with service providers who provide adequate protection for your personal data.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, access controls, regular security assessments, staff training, and incident response procedures. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform. For detailed information about our use of cookies, please refer to our Cookie Policy. You can manage your cookie preferences through your browser settings or our cookie consent tool.

Third-Party Services

Our platform may contain links to third-party websites or integrate with third-party services. This privacy policy does not apply to third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access through our platform.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Information

If you have questions about this privacy policy or wish to exercise your rights, please contact us at:

Supervisory Authority

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data in accordance with GDPR. Contact details: Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ Den Haag, Netherlands.