Privacy Policy
Last Updated
This privacy policy applies to personal data collected and processed through the PaardPlaats platform, including the website paardplaats.com and related services. By using PaardPlaats, you acknowledge that you have read and understood this Privacy Policy.
Table of Contents
Data Controller
The data controller is:
PaardPlaats
Chamber of Commerce (KvK) number: 97070785
Email: info@paardplaats.nl
We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR), the Dutch AVG, and relevant international regulations.
What Personal Data We Collect
- Account Data: Name and email address. We use a passwordless login flow with one-time verification codes sent to your email. We do not store passwords.
- Listing Data: Mandatory information to publish an advertisement: horse description, images, videos, price, seller email, phone number, and postcode. Optional information includes WhatsApp number, stable name, profile image, and other details you choose to provide. Published contact details are visible to all site visitors worldwide as part of your advertisement. You are responsible for ensuring that any uploaded photos or videos do not unlawfully include third parties without their consent.
- Professional/Business Status: If you publish advertisements, you must declare whether you act in a professional or business capacity. This information will be displayed to buyers as required under EU law.
- Transaction Data: Payment details, invoice data, and bank account information processed securely via third-party payment processors (Mollie and Adyen).
- Usage Data: IP address, browser type, device information, approximate location, session duration, interactions (e.g., page views, clicks), and preferences.
- Communication Data: When buyers contact sellers via our contact form, we process their email (mandatory) and phone number (optional). Messages are forwarded by email to the seller. Sellers who reply outside our platform (e.g., by email, phone, or WhatsApp) act as independent data controllers and are responsible for their own compliance with data protection law.
Special Categories of Data
We do not intentionally process sensitive categories of personal data (Art. 9 GDPR). However, profile photos and advertisement images or videos may contain individuals. By uploading such content, you confirm you have the right to share it and that no unlawful sensitive data is disclosed.
Legal Grounds for Processing
- Contractual necessity: We process your data to provide our marketplace services, including creating your account, publishing mandatory listing details (seller email, phone number, postcode), and facilitating buyerāseller inquiries via our contact form.
- Legal obligation: To meet tax, bookkeeping, and other regulatory requirements.
- Legitimate interest: To maintain platform security, prevent fraud/abuse, ensure service continuity, send essential service communications (e.g., contact form forwarding, listing expiry notices, reminders, favorite ad changes, and ad statistics), and improve our services (balanced against your rights and freedoms).
- Consent: For publishing optional listing details (e.g., WhatsApp number, stable name, profile image), for non-essential cookies, analytics, profiling, personalized advertising, and AI-powered ad-generation or translation. You may withdraw consent at any time.
You can withdraw your consent at any time by editing or deleting your listing, using the cookie banner to change your preferences, adjusting settings in your account (where available), or contacting us at info@paardplaats.nl.
How We Use Your Data
- Create and manage your account (passwordless login).
- Publish and manage listings and facilitate buyerāseller inquiries.
- Process payments and provide customer support.
- Improve platform performance, safety, and user experience.
- Send relevant service messages (listing expiry, ad performance statistics, favorite ad changes, reminders).
- Send marketing communications only with your consent or where legally permitted.
- Comply with legal obligations and enforce our terms.
- Profiling for personalized advertising (only with your explicit consent).
- Facilitate review and rating functionality, including displaying reviews about Users. Reviews can be reported and moderated if unlawful or manifestly false.
Data Sharing
- Payment providers: Mollie and Adyen (for secure payment processing and invoicing, based in the EU).
- Hosting and IT service providers: Amazon Web Services (EU ā Frankfurt), Google Cloud (EEA/US, depending on service), OpenAI (US/EU, for AI-enabled features), and Cookiebot (EU ā consent management).
- Analytics and marketing partners: Google Analytics 4 (EEA/US) and Meta/Facebook Pixel (EU/US) ā activated only with your prior consent. For Meta Pixel we act as joint controllers with Meta Ireland, and you can exercise your rights with either party.
- Legal authorities if and when required by applicable law or court order.
- Third parties involved in a merger, acquisition, or sale of the business (subject to confidentiality and data protection requirements).
We never sell your personal data. All processors act under written data processing agreements and are bound to appropriate safeguards.
Data Retention
- Legal/tax data: 7 years (as required by Dutch law).
- Account and listing data: Retained for up to 24 months after your last activity, unless you delete it earlier. You can delete your listings at any time by contacting us.
- Marketing consent: Retained until you withdraw consent or object.
- Buyerāseller communication data: Retained on our servers for up to 12 months for fraud prevention and dispute resolution, unless you request earlier deletion.
Your Rights
- Access your personal data and obtain a copy.
- Rectify inaccurate or incomplete personal data.
- Erase your personal data ('right to be forgotten') where applicable.
- Restrict processing in certain circumstances.
- Receive your data in a portable format and transmit it to another controller (only where processing is based on contract or consent).
- Object to processing, including direct marketing, profiling, and related automated decision-making (Art. 22 GDPR).
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or, if you reside in another EU/EEA country, with your local supervisory authority. (www.autoriteitpersoonsgegevens.nl)
International Data Transfers
- You may report illegal content, advertisements, or reviews via our contact form or by email to support@paardplaats.nl. We review such reports promptly and may remove content where necessary.
- We conduct random and regular checks of advertisements and reviews to detect unlawful or misleading content.
- Advertisements and listings are ranked primarily by recency, relevance, and any paid promotion. Sponsored listings are clearly marked.
- Advertisers must declare whether they act as a business or a private individual. This information is disclosed in advertisements.
Digital Services Act Compliance
If personal data is transferred outside the EEA, we ensure an adequate level of protection through EU-approved Standard Contractual Clauses or by working with recipients in countries with an adequacy decision. Advertisements and any contact details you provide (mandatory or optional) are accessible worldwide, including from countries that may not offer the same level of protection as the EEA. Despite safeguards, your data may still be subject to access by foreign authorities, particularly in the U.S., due to differing surveillance laws.
If you are located outside the EU/EEA, by using our services you acknowledge that your data will be processed in the Netherlands and other jurisdictions where our partners operate. You are responsible for complying with your own local laws when using our platform.
Data Security
We implement appropriate technical and organizational measures to secure your personal data, including encryption in transit and at rest, secure hosting, restricted staff access, and monitoring for unauthorized activity. While no system is fully immune to breaches, we strive to protect your data against unauthorized access, loss, or misuse.
Childrenās Data
Our services are not directed at children under 16. Users must be at least 16 years old to register and use the platform. Users between 16 and 18 years old may only use our services with verifiable consent from a legal guardian. We do not knowingly collect data from children under 16. If we become aware that we have collected such data, we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice on our website.
Contact Us
For questions, concerns, or to exercise your rights, contact:
PaardPlaats
info@paardplaats.nl
Paxlaan 10 Postbus 9177, 2131PZ Hoofddorp, The Netherlands
By using PaardPlaats, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.