Privacy Policy

We collect several types of information to provide and improve our Services: **Information You Provide Directly:** • Account registration data: name, email address, phone number, business name, country. • Profile information: profile picture, business description, dealer licence details. • Listing data: vehicle or part details, photographs, pricing, location, descriptions. • Communications: messages sent through our platform, enquiries, support requests. • Transaction data: details of purchases, sales, and any associated payment information. • Verification data: identification documents submitted for seller verification. **Information Collected Automatically:** • Device and browser information: IP address, browser type, operating system, device identifiers. • Usage data: pages visited, listings viewed, search queries, time spent on pages, click patterns. • Location data: approximate geographic location derived from your IP address. • Cookies and similar technologies: session identifiers, preferences, and analytics data (see Section 4). **Information from Third Parties:** • Authentication providers if you sign in through a third-party service. • Publicly available business information for seller verification purposes. • Analytics and advertising partners who provide aggregated usage insights.

We use the information we collect for the following purposes: **Platform Operation & Delivery:** • To create, maintain, and secure your account. • To display your listings to potential buyers. • To facilitate communication between buyers and sellers. • To process transactions and provide shipping support. **Improvement & Analytics:** • To analyse usage patterns and improve platform features. • To understand market trends and provide seller analytics (e.g., listing views, buyer demographics). • To develop new features and services based on user behaviour. • To monitor and prevent fraud, abuse, and security threats. **Communication:** • To send you service-related notifications (e.g., new enquiries, listing updates). • To respond to your support requests and enquiries. • To send marketing communications where you have opted in (you may opt out at any time). • To notify you of changes to our Terms of Service or Privacy Policy. **Legal & Compliance:** • To comply with applicable laws, regulations, and legal processes. • To enforce our Terms of Service and protect our legal rights. • To detect and prevent illegal activities, including fraud and money laundering.

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction where GDPR or equivalent data protection laws apply, we process your personal data on the following legal bases: **Contractual Necessity (Article 6(1)(b) GDPR):** Processing necessary to perform our contract with you — including providing the Platform, managing your account, displaying your listings, and facilitating transactions. **Legitimate Interests (Article 6(1)(f) GDPR):** Processing necessary for our legitimate interests, provided these are not overridden by your rights. This includes platform security, fraud prevention, analytics, service improvement, and direct marketing to existing customers. **Consent (Article 6(1)(a) GDPR):** Where you have given clear consent — for example, opting in to marketing emails or allowing non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. **Legal Obligation (Article 6(1)(c) GDPR):** Processing necessary to comply with a legal obligation to which we are subject, such as tax reporting, regulatory requirements, or responding to lawful requests from authorities. For special categories of data (if any), we will obtain your explicit consent or rely on another appropriate legal basis as required by law.

VehicleMarkt uses cookies and similar tracking technologies to enhance your experience. **Essential Cookies:** These are strictly necessary for the Platform to function. They include session cookies for authentication, security tokens, and user preferences. These cannot be disabled. **Analytics Cookies:** We use analytics tools to understand how visitors interact with the Platform. These cookies collect information such as pages visited, time on site, and referral sources. Data is aggregated and anonymised where possible. **Functional Cookies:** These remember your preferences (e.g., language, currency, saved searches) to provide a more personalised experience. **Marketing Cookies:** With your consent, we may use cookies from advertising partners to deliver relevant advertisements and measure campaign effectiveness. **Managing Cookies:** You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling essential cookies may impair the functionality of the Platform. For more information about the specific cookies we use, please refer to our Cookie Banner settings available on the Platform.

We do not sell your personal data. We may share your information with the following categories of recipients: **Other Users:** When you create a listing or send an enquiry, certain information (e.g., your name, business name, location, listing details) is visible to other users as part of the Platform's functionality. **Service Providers:** We engage trusted third-party companies to perform services on our behalf, including: • Cloud hosting and infrastructure providers. • Email delivery services. • Analytics and monitoring tools. • Payment processing partners. • Image processing and storage services. All service providers are bound by data processing agreements and may only process data on our instructions. **Legal & Regulatory:** We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others. **Business Transfers:** In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data. **With Your Consent:** We may share your information with other third parties when you have given us explicit consent to do so.

VehicleMarkt operates globally, and your data may be transferred to, stored, and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. When we transfer personal data outside the EEA or UK, we ensure appropriate safeguards are in place, including: • **Standard Contractual Clauses (SCCs):** We use European Commission-approved standard contractual clauses with our data processors and partners located outside the EEA. • **Adequacy Decisions:** Where applicable, we transfer data to countries that the European Commission or UK Secretary of State has determined provide an adequate level of data protection. • **Additional Safeguards:** We implement supplementary technical and organisational measures where necessary to ensure data is protected to EEA/UK standards. By using the Platform, you acknowledge that your data may be processed in jurisdictions outside your own. We take all reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. **Account Data:** Retained for the duration of your account and for up to 24 months after account closure or deletion, unless longer retention is required by law. **Listing Data:** Active listings are displayed on the Platform. Expired or removed listings are retained in archived form for up to 12 months for analytics and dispute resolution purposes. **Transaction Records:** Retained for a minimum of 6 years after the transaction to comply with tax and financial record-keeping obligations. **Communication Records:** Messages and enquiries are retained for 24 months after your last interaction, unless required longer for dispute resolution. **Analytics & Log Data:** Aggregated analytics data is retained indefinitely. Individual-level log data (e.g., IP addresses, page views) is retained for up to 12 months before anonymisation. **Verification Documents:** Retained for the duration of your account and for up to 12 months after closure for regulatory compliance. When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you.

Under the GDPR and applicable data protection laws, you have the following rights regarding your personal data: **Right of Access (Article 15 GDPR):** You have the right to request a copy of the personal data we hold about you, along with information about how it is processed. **Right to Rectification (Article 16 GDPR):** You have the right to request correction of any inaccurate or incomplete personal data we hold about you. **Right to Erasure / Right to Be Forgotten (Article 17 GDPR):** You have the right to request deletion of your personal data where there is no compelling reason for its continued processing. This right is not absolute and may be subject to legal retention obligations. **Right to Restriction of Processing (Article 18 GDPR):** You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data. **Right to Data Portability (Article 20 GDPR):** You have the right to receive the personal data you provided to us in a structured, commonly used, machine-readable format, and to transmit that data to another controller. **Right to Object (Article 21 GDPR):** You have the right to object to the processing of your personal data based on our legitimate interests, including direct marketing. We will cease processing unless we can demonstrate compelling legitimate grounds. **Right to Withdraw Consent:** Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. **Right to Lodge a Complaint:** You have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. To exercise any of these rights, please contact us using the details in Section 11. We will respond to your request within 30 days, as required by law. We may ask you to verify your identity before processing your request.

VehicleMarkt is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children under 18 years of age. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately using the details in Section 11, and we will take appropriate action.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will: • Post the updated Privacy Policy on this page with a revised "Last updated" date. • Notify you through the Platform (e.g., via a banner or notification) or by email if the changes are significant. • Where required by law, obtain your consent to material changes. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, you may contact us: **General Enquiries:** • Email: privacy@vehiclemarkt.com • Contact Form: Available on our Contact page **Data Protection Officer (DPO):** • Email: dpo@vehiclemarkt.com • Postal Address: Data Protection Officer, VehicleMarkt Ltd, United Kingdom We take all privacy enquiries seriously and aim to respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority. **UK Supervisory Authority:** Information Commissioner's Office (ICO) Website: ico.org.uk Telephone: 0303 123 1113