Privacy policy

Privacy policy according to the General Data Protection Regulation (DSGVO)

On this platform oldthing.de (hereinafter referred to as "oldthing"), we provide various services, including the oldthing marketplace, on which the goods and services offered by members in their oldthing stores in the antiques, second-hand goods and second-hand industry, including related industries, are published. Oldthing mediates transactions in this way, but does not itself become a party to the contracts concluded between the buyer and seller.

In order for us to provide you the services via oldthing and to fulfill our contractual obligations in this regard, it is necessary to process your personal data.

We finance ourselves without annoying advertising. Therefore, a certain amount of self-advertising is necessary for us to keep it that way. We send promotional emails to buyers after completed purchases to draw attention to similar products. Furthermore, an evaluation of the purchase experience is requested via email so that we can continuously improve our services.

The protection of your data is an important concern for us. Of course, we collect, store and use your data only in accordance with the legal requirements, in particular, your data is processed on the basis of the authorization of Art. 6 para. 1 p. 1 lit. a), b) and f). In the following, you will be informed about the specific manner in which we collect, store and process your data.

I. Responsible Person

Responsible for the processing of your data is:

Regina Pröhm & Michael Schrottmeyer GbR
Stechlinstr. 5
10318 Berlin
Germany
Phone: +49 (30) 50 15 48 90
Fax:  +49 (30) 50 96 88 71
E-Mail: service@oldthing.de

II. Data subject rights

1. You have the right,
  • according to Art. 15 DSGVO to get informations about the personal data processed by us concerning you and the information listed in Art. 15 para. 1 lit. a)-h) DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if they have not been collected from us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details ("right to information");
  • in accordance with Art. 16 DSGVO without undue delay the rectification of inaccurate personal data concerning you and the completion of incomplete personal data ("right to rectification");
  • in accordance with Art. 17 DSGVO to request the erasure of personal data concerning you, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims ("right to erasure");
  • to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO ("right to restriction of processing");
  • according to Art. 20 DSGVO to receive your personal data, which you have transmitted to us in the course of consent or for the performance of a contract, in a structured, common and machine-readable format or to request the transmission to another controller, insofar as this is technically possible and the rights and freedoms of other persons are not affected ("right to data transmission");
  • to revoke your consent at any time in accordance with Art. 7 (3) DSGVO. In that case, we may no longer continue the data processing based on this consent for the future, whereby the lawfulness of the processing carried out on the basis of your consent until the revocation is not affected ("right to revoke consent");
  • not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you, unless the decision is necessary for the conclusion or performance of a contract between you and us, is permitted by law or is based on your explicit consent, in accordance with Art. 22 DSGVO.

2. Right of objection

If data processing is based on legitimate interests pursuant to Art. 6 (1) (f) DSGVO, you also have the right to object the processing to us pursuant to Art. 21 DSGVO at any time, provided that there are reasons for this that arise from your particular situation or the objection is directed against direct advertising or related profiling. In the event of an objection by you, we may no longer process your personal data unless there are demonstrably compelling legitimate reasons for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims. This exception does not apply insofar as your objection is directed against direct advertising or related profiling. In that case, we may no longer process your personal data for this purpose under any circumstances. To exercise your right of objection, you can, for example, send us an appropriate e-mail.

3. Right of complaint
According to Art. 77 DSGVO, you finally also have the right to complain to a supervisory authority. Usually, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

III. Processing of your personal data and purpose of processing

1. Your visit to our website
When you visit our website, the browser you use automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The collection and processing of data is based on our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) DSGVO for the purpose of a smooth connection establishment of the website, a comfortable use of our website, the evaluation of system security and stability and for other administrative purposes.
These are the following informations, which are collected without your intervention and stored until automated deletion:
  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which the access is made (so-called referrer URL),
  • the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

2. Contract processing, data transfer to contractual partners in the purchase process
2.a
When you register with oldthing as a member, you provide us your personal data. We process your data in accordance with Art. 6 para. 1 lit. b) DSGVO for the fulfillment and processing of the user contract concluded with you. This includes the transfer of your personal data (name, address (delivery and billing address), e-mail address) to your respective contractual partner in the context of a purchase transaction. Furthermore, your data may be used for invoicing purposes and for communication with you.
2.b
If you register with oldthing as a member, the data you provide will be stored permanently until you delete your member account or object to the processing. Apart from that, we store your data for the period corresponding to the regular statute of limitations (3 years beginning with the end of the year in which you made the data known to us), taking into account the legitimate interests. Thereafter, your data will be deleted, unless we are required by law to retain it for a longer period, e.g. to retain invoices (10 years) or business letters (6 years) in accordance with § 147 AO. In such cases, your data will be blocked for use for the duration of further storage and then deleted.
3. Promotional emails
When you register with oldthing as a member, you consent in accordance with Art. 6 para. 1 p. 1 lit. a) DSGVO to receive promotional emails on the email address you have registered with oldthing regarding similar products you have purchased through oldthing or similar markets & exchanges organized by oldthing if you have previously booked an oldthing event online. Furthermore, you agree to receive an e-mail evaluating the respective purchase transaction after a purchase has been made via oldthing. Last but not least, this data processing is also carried out on the basis of our legitimate interest pursuant to Art. 6 (1) p. 1 lit. f) DSGVO, for efficient participation in commercial transactions as well as for the purpose of optimizing our services. You may revoke your consent to receive such promotional emails at any time by, for example, clicking on the unsubscribe link contained in the respective email or unsubscribing from them in your member section ("myoldthing section") under "notification settings".
4. PayPal
If you pay by "PayPal", the payment will be processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. You have to log in first with your PayPal account or open a new PayPal account. When opening the account, you give your personal data to PayPal. The data processing by PayPal is therefore carried out in accordance with Art. 6 para. 1 lit. a) and b) DSGVO. PayPal uses your PayPal account information to first identify you and then process the payment.
You can find more information about PayPal's privacy policy here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

5. Cookies
On our website, we use cookies that are used to optimize the user-friendliness of our website and enable the use of certain functions. These are small files that your browser automatically creates and that are stored on your device when you visit our website. Most of the cookies we use are used to recognize that you have already visited individual pages of our website - so-called session cookies - and are deleted from your computer's hard disk at the end of the browser session. Other cookies - so-called temporary cookies - remain on your device for a certain fixed period of time and enable us to recognize your device on your next visit. If you visit our website again, the system automatically recognizes that you have already been with us and which entries and settings you have made, so that you do not have to enter them again. Furthermore, we use cookies to statistically record the use of our website and to create and evaluate user profiles using pseudonyms for the purpose of optimizing our offer, advertising and the design of our website in line with requirements (see in detail section 6).
The data processed by cookies is necessary for the above-mentioned purposes to protect our legitimate interests pursuant to Art. 6 (1) p. 1 lit. f) DSGVO.
Note: You can set your browser to prevent cookies from being stored on your computer or to always display a message before a new cookie is created. As a precaution, we point out that the complete deactivation of cookies can lead to the fact that not all functions of our website can be used.

6. Google Analytics
For analysis purposes, we use the tool "Google Analytics", a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). This serves to protect our legitimate interests in optimal marketing, ongoing optimization and needs-based design of our offer, which are outweighed by a balance of interests. The processing of your data described below is thus carried out in accordance with Art. 6 (1) f) DSGVO.
Google is certified for the so-called "Privacy Shield" (EU-U.S. data protection agreement), which provides a guarantee for compliance with European data protection law. You can find more information about the "Privacy Shield" here: https://www.privacyshield.gov/list 
Google Analytics uses "cookies" (see point 5). The information generated by the cookie, such as browser type/version, operating system used, the previously visited page (so-called referrer URL), IP address (host name of the accessing computer) and time of the server request are transmitted to a Google server in the USA and stored there. IP anonymization is activated on our website, which means that your IP address is shortened by Google beforehand. The shortened IP address transmitted by your browser as part of Google Analytics is also not merged with other data from Google, which excludes conclusions about your person.
The information collected is used to evaluate your use of our website in anonymized form, to compile anonymized statistics on website activity, and to provide other services related to website and Internet use for the purposes of market research and demand-oriented design of our website. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from using your data by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout?hl=de. Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help https://support.google.com/analytics/answer/6004245?hl=de .

7. Google AdSense
We also use "Google AdSense", an advertising tool of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"), to present interest-based advertisements to visitors of our website within the Google advertising network. This is to protect our legitimate interests in an optimal marketing of our offer through targeted advertising, which prevail in the context of a balancing of interests. The processing of your data described below is thus carried out in accordance with Art. 6 (1) f) DSGVO.
Google is certified for the so-called "Privacy Shield" (EU-U.S. data protection agreement), which provides a guarantee of compliance with European data protection law.
For the "Google AdSense" service, "cookies" (see point 5) and "web beacons" (small invisible graphics) are set to enable an analysis of your user behavior and visitor traffic on our website. The information generated by the cookie and/or web beacon about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States in order to evaluate your usage behavior with regard to AdSense ads. Furthermore, this gives Google the opportunity to evaluate and optimize the effectiveness of AdSense ads for statistical and market research purposes. Google does not merge your IP address transmitted in this way with other Google data.
You can prevent the displayed use of your data by Google by downloading and installing the browser plugin available at the following link:
http://www.google.com/settings/ads/plugin?hl=de

8. Social Media Button

8.a Facebook
We use buttons for the social network "Facebook" on our website, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, in order to make the use of our website more personal for you. The advertising purpose behind this is to be regarded as a legitimate interest within the meaning of Art. 6 (1) p. 1 lit. f) DSGVO. The buttons are recognizable by the Facebook logo (white "f" on blue background).
Facebook is certified for the so-called "Privacy Shield" (EU-U.S. data protection agreement), which provides a guarantee for compliance with European data protection law. You can find more information about the "Privacy Shield" here: https://www.privacyshield.gov/list.
The buttons are merely embedded as hyperlinks in our web pages. No personal data is transmitted to Facebook when you access our web pages that contain such a button. Only when you click the button, a connection to the Facebook servers is established.
This provides Facebook the information that you have accessed the corresponding page of our website. This information (including your IP address) is then transmitted by your browser directly to a Facebook server in the USA and stored there. If you are also logged in to your Facebook account, Facebook can directly associate your visit to our website with your Facebook account. Facebook may use this information for the purpose of advertising, market research and demand-oriented design of the Facebook pages. For this purpose, Facebook profiles are created in order to provide further services associated with the use of Facebook. To prevent Facebook from receiving data about you via our website that can be assigned to your Facebook account, log out of Facebook before using the Facebook button.
 Further information on the processing of your data by Facebook, as well as your rights in this regard and setting options for protecting your privacy can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/

8.b Instagram
On our website, buttons for the social network "Instagram" of Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram") are used to make the use of our website more personal for you. The advertising purpose behind this is to be regarded as a legitimate interest within the meaning of Art. 6 (1) p. 1 lit. f) DSGVO. These buttons are marked with an Instagram logo, for example in the form of an "Instagram camera".
The buttons are merely embedded as hyperlinks in our web pages. When calling up web pages on our website that contains such a button, no personal data is transmitted to Instagram. Only when you actively click the Instagram button, your browser establishes a direct connection to the servers of Instagram. This provides Instagram the information that your browser has called up the corresponding page of our website and that you have clicked the button. This information (including your IP address) is transmitted from your browser directly to an Instagram server in the USA and stored there. If you are logged in to your Instagram account, Instagram can immediately assign the information to your Instagram account. If you want to prevent Instagram from directly assigning the data collected via our website to your Instagram account, please log out of Instagram before using the Instagram button.
Further information on the processing of your data by Instagram, as well as your rights in this regard and setting options for protecting your privacy can be found in the privacy notices of Instagram: https://help.instagram.com/155833707900388

Buyer protection

What security do I have if I order via shopping cart and pay for the goods in advance?

In principle, all providers are checked for oldthing and unreliable providers are excluded. When evaluating and assessing how secure and trustworthy a supplier is, we recommend that you check the number of sales already made by the supplier and the latest customer ratings before placing an order.

So that your purchases are worry-free, we additionally secure every order in your shopping basket with up to 250 Euro.

In the unlikely event that something should really go wrong and, for example, the goods don`t arrive and you don`t get your money back, our bank protection program intervenes. We will then refund the purchase price (maximum 250 Euros per item) if no agreement can be reached with the supplier. It can take up to four weeks from the beginning of the claim settlement to the payment of the amount.

Should you still have any questions, or wish to secure your purchases with a purchase price of more than 250 euros,please feel free to contact us.