Privacy

Privacy Policy of Antiques Market

We are pleased that you have shown interest in our enterprise. Along with excellent customer service, the protection of your personal data is of high priority for the management of Antiques Market (in the following, “Antiques Market” or “we” / “us”). This Privacy Policy describes how we collect and use your personal data.

We use the information collected through our website to provide you with access to our website and service, to operate the website as well as to improve and personalize your user experience. If you visit our website without logging in with an account, we may still collect some information that is connected to our website visitors.

As an enterprise, we comply with all data protection laws applicable in the United States and in the European Union (“EU”), especially with the General Data Protection Regulation (“GDPR”).

1. Name and address of the controller

With regard to the processing of personal data in connection with our website, we are the controller within the meaning of the GDPR:

2. Definitions

First, we would like to explain to you some terms that we use in our Privacy Policy:

Personal Data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing means any operation or set of operations that are performed on personal data or on sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or

Controller means a natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.

Processor means a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.

Consent of the data subject means is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

3. Personal data that we process

i) Browsing and logging data

When you visit our website, a so-called log data record (server log files) is stored temporarily and anonymously on our web server. Log data may consist of:

• the type, language, and version of the browser used,
• the operating system used by the accessing system,
• the website from which an accessing system reaches our website (so-called referrers or referrer URLs),
• the sub-websites,
• the date and time of access to our website,
• an Internet protocol address (IP address)of the requesting computer, which is shortened in such a way that it is no longer possible to establish a personal reference,
• the Internet service provider of the accessing system,
• the amount of traffic,
• the message as to whether the request was successful (access status/HTTP status code),
• the GMT time zone difference.

When using log data, Antiques Market does not draw any conclusions about the data subject. This information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as its advertisement, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack.

Therefore, Antiques Market analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise and ensuring an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

ii) Contact and contact data

Our website enables quick electronic contact with our enterprise as well as direct communication with us. If you contact us by e-mail or via a contact form, your personal data will be automatically stored. Such personal data is transmitted by you on a voluntary basis and is stored for the purpose of processing the request or contacting the data subject. We do not transfer such personal data to third parties.

When you use our contact form, we process the following data, which you need to fill in order to make a request:

• name
• e-mail address
• phone number
• country and
• the question you asked.

In order to process every and each of your requests, we generally require two means of contact, as, from our experience, users often make unintentional mistakes either in their phone number or e-mail address. If you do not want to share some of the information asked for in the contact form, you may submit your request directly via e-mail or by phone.

iii) Account registration and account data

You have the possibility to create an account on our website.

If you create an account, we may process the following data:

• your first and last name,
• your email address,
• your shipping and billing addresses,
• your order history,
• your wish list,
• IP address, date, and time of the registration are also stored.

The account data are collected and stored exclusively for internal use by Antiques Market and our own purposes. We may transfer such data to one or more processors (e.g. a parcel service) that also use personal data for our internal purposes attributable to us.

The creation of your personal account enables us to offer you contents or services that may only be offered to registered users due to the nature of the matter in question (e.g. wish list or order history). Registered users are free to change their personal data specified during the registration at any time, or to have the data deleted from our data stock.

iv) Making a purchase through our website and checkout data

You also have the possibility to proceed to checkout without registering an account on our website.

Whether with or without a registered account, when you proceed to checkout, we process the following data:

• Your first and last names,
• Your e-mail address,
• Phone number,
• VAT number and company name, if applicable,
• Shipping and billing addresses,
• Payment method.

You can find the details on the processing of your personal data while using different payment methods in section 10 below.

4. Purpose and legal basis of data processing

We process your personal data described in more detail above in accordance with the GDPR and other applicable data protection laws and only to the extent necessary.

The processing of log data serves statistical purposes and to improve the quality of our website, in particular the stability and security of the connection (legal basis is Art. 6 para. 1 p. 1 lit. f GDPR – legitimate interest).

We process contact forms and account data for handling your inquiries (legal basis is Art. 6 para. 1 p. 1 lit. b or lit. f GDPR – performance of a contract or legitimate interest).

Checkout data is processed for the purpose of the execution of our contract with you (legal basis is Art. 6 para. 1 p. 1 lit. b GDPT – performance of the contract).

5. Cookies/Identifier

5.1. What are cookies?

Our website uses cookies and/or similar forms of identifiers.

Cookies are a piece of data that our website may send to your web browser which may be stored on your computer and can be used to identify your computer.

Using cookies, we can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

By means of a cookie, the information and offers on our website can be optimized with the user in mind. Cookies allow us, as previously mentioned, to recognize our website users. The purpose of this recognition is to make it easier for users to utilize our website. The website user that uses cookies e.g. does not have to enter access data each time the account is accessed, because this is taken over by the website, and the cookie is thus stored on the user’s web browser. Another example is the cookie of a shopping cart in an online shop. The online store remembers the articles that a customer has placed in the virtual shopping cart via a cookie.

5.2 How to prevent the setting of cookies?

The data subject may at any time prevent the setting of cookies through our website by means of a corresponding setting of the web browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies can be deleted at any time via the web browser or other software programs. This is possible in all popular web browsers.

If you deactivate the setting of cookies in your web browser used for browsing our website, not all functions of our website may be entirely usable.

6. Routine erasure and blocking of personal data

We only process and store your personal data for the period necessary to achieve the purpose of storage or as far as this is required by applicable laws.

If the purpose of storage does not apply anymore, or if a storage period prescribed by applicable laws expires, we routinely block such personal data or erase it in accordance with legal requirements.

7. Your rights as a data subject

To exercise the below rights, you can contact us at info@antiquesm.com

7.1 Right of access (article 15 GDPR)

You have the right to request information about and a copy of your personal data stored by us. In particular, you can request information about (i) the purposes of the processing, (ii) the category of personal data, (iii) the categories of recipients to whom your data has been or will be disclosed, (iv) the planned storage period, (v) the existence of a right to rectification, (vi) erasure, restriction of processing or objection, (vii) the existence of a right of complaint, (viii) the origin of your data if it has not been collected by us, as well as (ix) the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

7.2 Right to rectification (article 16 GDPR)

You also have the right to request the rectification of your personal data that you consider inaccurate or incomplete, including by means of providing a supplementary statement.

7.3 Right to erasure (article 17 GDPR)

You also have the right to request the erasure of your personal data without undue delay, and we are obliged to do so, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.

7.4 Right of restriction of processing (article 18 GDPR)

You also have the right to demand the restriction of processing of your data in accordance, insofar as the accuracy of the data is disputed by you or the processing is unlawful.

7.5 Right to data portability (article 20 GDPR)

You also have the right to receive the personal data that you have provided to us in a structured, common, and machine-readable format or to request the transfer of such data to another controller (“data portability”).

7.6 Right to object (article 21 GDPR)

You also have the right to object to our processing of your personal data in accordance with GDPR, insofar as the processing is based on Article 6 (1) lit. e or lit. f GDPR (public or legitimate interest). This is particularly the case if the processing of your personal data is not necessary for the performance of our contract with you.

Unless you object to our processing of your personal data for the purposes of direct marketing, when exercising such an objection, we may ask you to explain the legitimate reasons why we should not process your data. In the event of your justified objection, we will review the merits of the case and either cease or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will need to continue the processing.

7.7 Right to withdraw your consent (Article 7 (3) GDPR)

If you have given your consent to the processing of your personal data, you have the right to withdraw such consent at any time.

8. Use of third-party services

8.1 Google Analytics

On our website, we have integrated Google Analytics with the anonymizer function.

Google Analytics is a web analytics service that collects, gathers, and analyses data about the behavior of visitors to websites. This service collects, inter alia, data about the website, from which a person has come (the so-called referrer or referrer URL), which sub-pages the person visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.

The operator of Google Analytics is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

For web analytics, through Google Analytics we use the application “_gat._anonymizeIp”. By means of this application, the IP address of the Internet connection of the data subject is abridged by Google and anonymized when accessing our website from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.

The purpose of Google Analytics is to analyze the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our websites, and to provide us with other services concerning the use of our website.

Google Analytics places a cookie in your web browser. We have already explained the functioning of cookies in section 5 above. With the setting of the cookie, Google Analytics is enabled to analyze your use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Google Analytics component was integrated, your Internet browser will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During the course of this technical procedure, Google gains knowledge of personal data, such as the IP address, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements.

The Google Analytics cookie is used to store information, such as the access time, the location from which the access was made, and the frequency of visits to our website by the data subject. With each visit to our website, such personal data, including the IP address, will be transmitted to Google in the United States of America (USA). These personal data are stored by Google in the USA. Google may pass the personal data collected through the technical procedure to third parties.

How to prevent the setting of cookies by Google Analytics?

As already described above, you may prevent the setting of cookies through our website at any time by means of a corresponding adjustment of your web browser and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser would also prevent Google Analytics from setting a cookie. In addition, cookies already in use by Google Analytics may be deleted at any time via your web browser settings or other software programs.

In addition, the data subject has the possibility to object to the collection of data by Google Analytics, which is related to the use of our website, as well as to the processing of such data by Google and the chance to preclude any such.

For this purpose, the data subject must download a browser add-on under the link https://tools.google.com/dlpage/gaoptout and install it. This browser add-on tells Google Analytics through JavaScript, that any data and information about the visits of Internet pages will not be transmitted to Google Analytics. The installation of the browser add-ons is considered an objection by Google. However, if your IT system is later deleted, formatted, or newly installed, then you will need to reinstall the browser add-ons to further disable Google Analytics.

Further information and the applicable data protection provisions of Google may be retrieved at https://www.google.com/intl/en/policies/privacy/ and at HTTP://www.google.com/analytics/terms/us.html. Google Analytics is further explained here: https://www.google.com/analytics/.

8.2 Google Ads

We also have integrated Google Ads on our website.

Google Ads is a service for Internet advertising that allows the advertiser to place ads in Google search engine results and the Google advertising network. Google Ads allows us to pre-define specific keywords with the help of which an advertisement (“ad”) on Google’s search results is only then displayed when the user utilizes the search engine to retrieve a keyword-relevant search result. In the Google Advertising Network, the ads are distributed on relevant web pages using an automatic algorithm, taking into account the previously defined keywords.

The operating company for Google Ads is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

The purpose of Google Ads is the promotion of our website by the inclusion of relevant ads on the websites of third parties and in the search engine results of the search engine Google and an insertion of third-party advertising on our website.

If you reach our website via a Google ad, a conversion cookie is filed to your browser through Google. We have already explained the functioning of cookies in section 5 above. A conversion cookie loses its validity after 30 days and is not used to identify the data subject. If the cookie has not expired, the conversion cookie is used to check whether certain sub-pages, e.g., the shopping cart from an online shop system, were called up on our website. Through the conversion cookie, both we and Google can understand whether a person who reached an AdWords ad on our website generated sales, that is, executed or canceled a sale of goods.

The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are used in order to determine the total number of users who have been served through GoogleAds to ascertain the success or failure of each ad and to optimize our Google Ads in the future.

The conversion cookie stores personal information, e.g. the Internet pages visited by the data subject. Each time you visit our website, personal data, including the IP address, is transmitted to Google Ireland. Google Ireland may further transmit or make available these personal data collected through the technical procedure to third parties, e.g., Google LLC in the USA.

How to prevent the setting of cookies by Google Ads?

You can, at any time, prevent the setting of cookies by our website, as stated above, by means of a corresponding setting of your Internet browser and thus permanently deny the setting of cookies. Such a setting of your Internet browser would also prevent Google from placing a conversion cookie. In addition, a cookie set by GoogleAds may be deleted at any time via your Internet browser or other software programs.

You also have the possibility to object to the interest-based advertisement of Google. Therefore, you must access the link www.google.de/settings/ads from each of the browsers used by you and set the desired settings.

Further information and the applicable data protection provisions of Google may be retrieved here: https://www.google.com/intl/en/policies/privacy/.

8.3 Hotjar

We use the web analytics service Hotjar provided by Hotjar Ltd, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta (“Hotjar”).

Among other things, Hotjar uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your terminal device and that enable an analysis of your use of our online presence. This allows personal data to be stored and analyzed, in particular the user’s activity (especially which pages have been visited and which elements have been clicked on), device and browser information (especially the IP address and the operating system), and a tracking code (pseudonymized user ID). The information collected in this way is transmitted by Hotjar to a server in Ireland and stored there anonymously.

For more information on the processing of data by Hotjar, please go here: https://www.hotjar.com/legal/policies/privacy.

9. Use of our payment methods

For the purposes of payment processing, we may share your personal data with the following payment providers to the extent necessary: PayPal, Sofortüberweisung, and Stripe.

9.1 Use of PayPal

If you choose PayPal as a payment method, your payment will be processed via your PayPal account. Any PayPal account is managed via an e-mail address, which is why there are no classic account numbers. PayPal is also able to process virtual payments through your credit card if you do not have a PayPal account.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxemburg.

If you choose PayPal as a payment option, we automatically transmit your data to PayPal. By selecting this payment option, you agree to the transfer of personal data required for payment processing.

Personal data transmitted to PayPal is usually first name, last name, address, email address, IP address, telephone or mobile phone number, and/or other data necessary for payment processing.

The transmission of these data is required for payment processing and fraud prevention. We transfer these data to execute our contract with you. The personal data exchanged between us and PayPal can be transmitted by PayPal to economic credit agencies. This transmission is required for identity and creditworthiness checks.

PayPal can share your personal data with its affiliates and service providers or subcontractors to the extent that this is necessary to fulfill contractual obligations.

The applicable data protection provisions of PayPal may be retrieved here: https://www.paypal.com/us/webapps/mpp/ua/privacy-full

10. Sharing of personal data

In addition to the above, we may also share your personal data with the following categories of recipients:

• Service providers are used for the operation of our website and the processing of data stored or transmitted by the systems (e.g. for data center services, payment processing, online tools analytics, advertising tools, or IT security). The legal basis for the transfer is then Art. 6 (1) lit. b or lit. f GDPR,
• State agencies/authorities, insofar as this is necessary for the fulfillment of a legal obligation. The legal basis for the transfer is then Art. 6 (1) lit. c GDPR,
• Persons appointed to carry out our business operations (e.g. auditors, banks, insurance companies, legal and tax advisors, supervisory authorities, parties involved in company acquisitions or the establishment of joint ventures). The legal basis for the disclosure is then Art. 6 (1) lit. b or lit. f DS-GVO.

In all other cases will only disclose your personal data to third parties if you have given your express consent to do so.

11. Transfer of personal data to third countries

Although we try not to share your personal data with recipients outside the European Union (EU) or the European Economic Area (EEA) (“third countries”), such processing – as an exception – is possible in the course of our use of some Google services (in particular, the USA). However, we have restricted such processing to the absolute minimum which is necessary to operate our business efficiently. In such cases, Google ensures that data protection is sufficiently guaranteed, inter alia, through standard contractual clauses of the European Commission for the protection of personal data. Please contact us or Google if you would like more information on this.

12. Changes to this Privacy Policy

In the context of the further development of applicable data protection laws as well as technical or organizational changes to our website, we regularly check and amend our Privacy Policy.