Privacy Policy

2. Data We Collect

2.1 Personal Information

We collect the following personal data:

• Name and contact details (email, phone number, address)
• Account identifiers (username, password)
• Payment information (processed securely by third-party providers)
• Bidding and purchase history
• Delivery and billing addresses
• Communications with our support service

2.2 Data Collected Automatically

• IP address and device information
• Browser type and version
• Pages visited and time spent on the site
• Referring URL
• Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Data

We use your personal data to:

• Process your bids and purchases
• Create and manage your account
• Send you updates on sales, invoices, and notifications
• Process payments and prevent fraud
• Provide customer support
• Improve our platform and user experience
• Comply with our legal obligations
• Send you marketing communications (with your consent)

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Performance of a contract: to fulfil our contractual obligations when you place bids or make purchases
• Legitimate interest: to improve our services, prevent fraud, and ensure the security of our platform
• Legal obligation: to comply with tax, accounting, and regulatory requirements
• Consent: for marketing communications and non-essential cookies (you can withdraw your consent at any time)

5. Third-Party Providers

We use the following third-party providers who may process your data:

• Supabase: database and authentication services (data hosting and account management)
• Resend: transactional email and notification service
• Payment providers: secure payment processing (we do not store full credit card details)

These providers are contractually obligated to protect your data and only use it for the purposes we define.

6. Data Retention

We retain your personal data for as long as necessary for the purposes described in this policy, particularly to comply with our accounting and tax obligations. You may request the deletion of your data at any time, subject to applicable legal retention periods.

7. Your Rights

In accordance with the FADP and, where applicable, the GDPR, you have the following rights:

• Access: to obtain a copy of your personal data
• Rectification: to correct inaccurate or incomplete data
• Erasure: to request the deletion of your data
• Restriction: to restrict the processing of your data
• Portability: to receive your data in a structured, machine-readable format
• Objection: to object to processing based on legitimate interest
• Withdrawal of consent: to withdraw your consent for marketing or non-essential cookies

To exercise any of these rights, please contact us at mdpauction@gmail.com.

8. Data Security

We implement security measures compliant with industry standards, including encryption, secure servers, and access controls, to protect your personal data. However, as no transmission over the Internet is completely secure, we cannot guarantee absolute security.

9. International Data Transfers

Your data may be transferred to and processed in countries outside of Switzerland. We ensure that appropriate safeguards are in place, such as recognised standard contractual clauses.

10. Cookies

We use cookies and similar technologies to enhance your experience. For more information, please see our Cookie Policy.

11. Protection of Minors

Our services are not intended for individuals under the age of 18. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through our platform.

13. Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact us at:
Email: mdpauction@gmail.com
Phone: +41 76 325 19 19
Address: Avenue centrale 120 Turrian, 1884 Villars-sur-Ollon, Suisse
Support Centre: mdpauction.com/support