INFORMATION ON THE PROCESSING OF PERSONAL DATA
Information provided according to Article 13 of EU Regulation 679/2016 (hereafter GDPR), the "General Data Protection Regulation" and Article 13 of Law n. 171, dated 21st December 2018, and subsequent amendments and additions, "Protection of natural persons concerning the processing of personal data"
Shortly, everything you need to know.
Data Controller is Maraja S.r.l.
Through the website https://www.bidinside.com/ corresponding to the homepage of the online auction portal BID INSIDE, managed entirely by the Data Controller, we process your data mainly for these reasons:
to allow you to register for the BID INSIDE portal for the use of the services provided by the Data Controller through the portal, that is to enable you to participate in the online auctions of the various Auction Houses;
to provide feedback when you use contact data on the website (e.g., telephone, email, active social pages);
to allow you to subscribe to our newsletter.
We will keep requests for information received through these channels for 12 months if no commercial and/or contractual relationship has arisen due to contact. Otherwise, it will be necessary to keep them further for contractual or fiscal reasons (generally 10 years).
Based on the applicable law, we store navigation data for 30 days, except in computer crimes requiring a more extended storage period.
Some types of website users' data may be accessible to those who provide us with the website's hosting services and email. In addition, Maraja's employees or collaborators, who have received a specific authorization, can access it.
You will always have the right to receive all the information you need regarding your personal data processing, obtain access, and copy it. You also have the right to obtain the update, integration, correction, or deletion of your personal data.
You are entitled to object to all or part of the processing of your data or ask for its limitation at any time. For data processed based on consent or due to the execution of a contract, you may also ask for portability.
Requests shall be addressed to the Data Controller:
If you think that the processing of your data violates the applicable privacy legislation, you have the right to complain to the competent authority.
If you want to learn more, read on.
1. WHO PROCESSES YOUR DATA?
As the sole and exclusive owner and operator of the website https://www.bidinside.com/, Maraja S.r.l. is the Data Controller of the user's data who browse its pages.
The information is provided only for the BID INSIDE portal managed by Maraja S.r.l. and not for other websites that the user may consult through links on the website.
The contact details are as follows:
Registered Office: Via Ventotto Luglio, 211 - 478963 Borgo Maggiore (RSM)
Phone: +39 393 8589723
2. WHAT DATA DOES THE WEBSITE PROCESS?
Personal data is voluntarily provided by the user. These are the personal data that you wish to provide to us in these ways voluntarily:
when you register to the BID INSIDE portal to allow you to use the services that we provide through the portal, that is, to participate in the online auctions of the different Auction Houses;
when you contact us by phone or email, through the social networks or platforms indicated on the same site that link to our active social pages;
when you fill in our newsletter's optional, explicit, and voluntary subscription form. We remind you that you can unsubscribe at any time and that every newsletter we send always provides the button to unsubscribe or update your data.
This data consists of your personal information and, in particular: name, address, billing data, shipping address, tax code, ID reference, place and date of birth, email address, and information about the offers to the online auctions, including the categories of collectibles you are interested in and your preferred payment method.
We may process personal data with automated tools for the time strictly necessary to achieve the purposes for which they were collected. We have implemented specific security measures to prevent data loss, unlawful or incorrect use, and unauthorized access.
B) Navigation data. It is the data transmitted through internet communication protocols, collected by hardware devices and software procedures in support of the website. This data includes the IP addresses or domain names of the computers used by users connecting to the site, the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the state of the response given by the server (good end, error, etc.) and other parameters related to the user's operating system and IT environment.
3. WHAT ARE THE LEGAL BASES AND THE PURPOSES OF THE DATA PROCESSING?
A) The personal data that you voluntarily provide us when you wish to contact us through the references on the website and when you register for the BID INSIDE portal to participate in online auctions are collected and processed based on the execution of the pre-measures contract and the subsequent contractual fulfillments, in particular, concerning the registration on the portal, based on the Terms and Conditions of Service that you find at this link. We may use the personal data you provide us when you wish to subscribe to the newsletter to send you periodic information about service updates, new features, promotions, upcoming auctions, or other related services, including the updating of the Terms and Conditions of Service that you accept when registering on the BID INSIDE portal.
B) Navigation data are processed on the basis of a legitimate interest of the Data Controller in order to ensure the correct and efficient functioning of the web pages. We would like to remind you that the computer systems and software procedures responsible for the operation of this website acquire, during their regular operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by their very nature, could, through processing and association with data held by third parties, allow the users' identification.
The purpose of collecting this data is solely to obtain anonymous statistical information on the use of the site and to check its correct functioning. These data are deleted immediately after processing.
4. WHERE IS MY DATA PROCESSED?
The processing related to the web services of this site takes place at the aforementioned registered office of the Data Controller. It is handled only by technical personnel authorized explicitly for the processing. No data deriving from the web service is unlawfully communicated or disseminated.
5. HOW LONG WILL THE DATA BE STORED?
We keep personal data collected through the messages sent to our website's references for 12 months.
If there is no professional and/or commercial relationship after this period, we will delete them. Otherwise, we will keep them up to 10 years from the termination of processing for the purpose of exercising the legitimate right of defense in any actions of contractual or non-contractual liability. Navigation data are not stored for more than 30 days, except for any liability assessment in case of hypothetical cyber-crimes against the website. In this case, they could be kept for longer, based on the applicable criminal law.
6. WHO IS THE RECIPIENT OF MY DATA?
Exclusively for the purposes indicated above, your data may be transmitted to:
DATA PROCESSORS: They are third parties that process data on our behalf, ensuring adequate security measures to protect your information better. In particular, they may process your data:
Hosting service providers with their data center in EU;
Email Provider (Ehiweb) when we receive an email from you; Ehiweb complies with the standard contractual clauses as a security measure for non-EU data transfers.
PERSONS IN CHARGE OF PROCESSING: they are employees or internal collaborators of our company who have received a special appointment and training to process the data according to their duties.
RECIPIENTS OF THE PROCESSING: they are professionals or companies that receive communications of personal data by the Data Controller but act as independent Data Controllers as a result of such communication.
Among these are:
Facebook, Twitter, Instagram, LinkedIn. When you click on the social networks' icons, you will be redirected to pages outside the website and agree to share some of your data with the Owners of that service. The information you share will then be governed by the privacy policies of the relevant Social Network.
Google Maps. When you access Google Maps for more information on the location of our offices, we remind you that you will be subject to the privacy policies of Google.
Auction Houses. Following your registration on the BID INSIDE portal for participation in the online auctions managed by the Auction Houses, every time you want to participate in an online auction, you will be redirected to the Auction House portal for online auction registration, and you will be asked to agree to share some of your data with the Owners of that service. The information you share will then be governed by the privacy policies of the respective Auction House. Some of the data that you may agree to share with the Auction Houses consists of your personal information and the information related to your registration on the BID INSIDE portal, also to allow the Auction House to comply with the same obligations imposed by the applicable legislation in the country in which it is located.