1. Who is responsible for your data?

The controller for the processing of your personal data is:

Ani-Malls has assessed whether it is legally required to appoint a Data Protection Officer (DPO). At present, this is not the case. For all your privacy questions — including requests to exercise your rights (see chapter 12) — you can contact the point of contact mentioned above. Should this change in the future, we will update this statement.

2. What exactly does Ani-Malls do?

Ani-Malls is an advertising platform that brings together buyers and sellers of animals and related products and services. We are not a party to the agreement that is concluded between users. However, to keep the platform safe, reliable and user-friendly, we do process users’ personal data. We explain how below.

3. Which data do we collect?

Depending on how you use the platform, we process, among others, the following categories of personal data:

3.1 Data you provide to us yourself

• Registration data: your name, e-mail address, password (stored in encrypted form) and any other account data.
• Identity data: in order to advertise, you must verify your identity. This involves the processing of identity data (see chapter 4).
• Profile and contact data: address, telephone number and — for business advertisers — company details such as Chamber of Commerce number and VAT number.
• Advertisement data: the content of your advertisements, including titles, descriptions, photos, prices and the category, sex, maturity and genetics of the animal offered.
• Communication data: messages you exchange via the platform with other users or with us (for example in the case of questions, reports or complaints).
• Payment data: data required to settle payments. The actual payment processing takes place via our payment service provider (see chapters 5 and 6)

3.2 Data generated automatically

• Usage data: information about advertisements placed, display settings, bids and transactions on the platform.
• Technical data: such as your IP address, device and browser data and the time of your visit.
• Cookie data: data collected via cookies and similar techniques. We only place non-essential cookies with your prior consent. You can read more about this in our Cookie Statement (see chapter 8).

3.3 Special category and criminal data

We do not ask you for special categories of personal data and advise you not to include these in advertisements or messages. In the context of our content moderation and the prevention of fraud and illegal trade, we may process data relating to (suspected) criminal offences. We only do so insofar as this is necessary and legally permitted (see chapters 4 and 7).

4. Why do we process your data and on what legal basis?

We only process your personal data for clearly defined purposes and only where there is a legal basis for doing so (Article 6 GDPR). The table below shows, per purpose, which legal basis applies.

5. Identity verification

To prevent misuse and keep the platform safe, every advertiser must verify their identity before an advertisement can be placed. This verification is carried out via an external, specialised service provider, Stripe. During verification, data from an identity document and, where applicable, a facial image may be processed. Ani-Malls itself retains no more data than is necessary to establish that verification has taken place; the underlying verification data is processed by the service provider in accordance with its own terms and privacy policy.

6. With whom do we share your data?

We never sell your personal data. We only share data where necessary for our services or where we are legally required to do so, with the following categories of recipients:

• Other users: if you place an advertisement or respond to one, certain data (such as the advertisement content and the contact details required for the transaction) becomes visible to or is shared with other users.
• Payment service provider: for the settlement of payments we use Stripe. In doing so, Stripe processes payment data; Stripe’s terms and privacy policy apply to this.
• Processors: service providers that process data on our behalf and under our instructions, such as hosting, IT and verification partners. We enter into data processing agreements with them.
• Distribution channels: for publicity purposes, advertisements (or parts thereof) may be displayed elsewhere, such as on third-party websites or via e-mail, in accordance with the Terms & Conditions.
• Rights holders: in the case of a notice of infringement of intellectual property rights, the advertiser concerned may be informed of the reason why an advertisement has been removed.
• Authorities: such as the police, the judicial authorities or supervisory authorities, where we are legally required to do so or where this is nhttps://ani-malls.com/buying/%22https:/ani-malls.com/platform-terms/ecessary to prevent fraud or illegal trade.

7. Content moderation and disclosure to authorities

To keep the platform safe and lawful, we assess content that may be contrary to the law or to our Terms & Conditions. This is done partly through human evaluation. When we take measures (such as removing an advertisement or suspending an account), we may process personal data in doing so. Where there is cause to do so, we may disclose data to the competent authorities within the limits of the law. The measures we may take and the safeguards involved (including a duty to state reasons and a complaints procedure) are described in the Terms & Conditions.

8. Cookies

Ani-Malls uses cookies and similar techniques. We always place essential cookies, which are necessary for the platform to function. We only place non-essential cookies (such as analytics and marketing cookies) after you have given consent. You can adjust your cookie preferences at any time. A full description of the cookies we use can be found in our Cookie Statement.

9. How long do we retain your data?

We do not retain your personal data for longer than is necessary for the purposes for which it was collected, or for as long as we are legally required to do so. After that, we delete or anonymise the data. Some guiding principles:

• Account data: for as long as you have an account, and thereafter for a reasonable period insofar as this is necessary or legally required.
• Advertisement data after removal: after an advertisement has been removed, Ani-Malls retains only a limited set of data, namely: the ID, the title, the linked account, the price (for a standard advertisement), the current bid (for an auction), the linked buyer (if sold) and the category, sex, maturity and genetics of the animal. This data is not retained for longer than is necessary or legally required.
• Payment and tax data: for the duration of the statutory retention periods, including the tax retention obligation of seven years.
• Communications, reports and complaints: for as long as is necessary for handling them and a reasonable period thereafter, partly with a view to possible disputes.

More specific retention periods may differ per category. If you have a question about this, please contact us.

10. Transfers outside the European Economic Area (EEA)

In principle, your data is processed within the EEA. Where a service provider (such as our payment or verification partner) processes data outside the EEA, we ensure that this takes place with appropriate safeguards as referred to in the GDPR, for example on the basis of an adequacy decision of the European Commission or by concluding the Standard Contractual Clauses. You can ask us which safeguards apply.

11. How do we secure your data?

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. These include encryption of passwords, secure connections and access restrictions. Please note that no method of transmission over the internet is entirely secure; therefore, do not share more personal data than necessary in advertisements and messages.

12. What rights do you have?

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access: you may request which data we process about you.
• Right to rectification: you may have inaccurate or incomplete data corrected.
• Right to erasure: in certain cases, you may request that your data be erased (“right to be forgotten”).
• Right to restriction: in certain cases, you may request that processing be temporarily restricted.
• Right to object: you may object to processing based on a legitimate interest.
• Right to data portability: you may receive the data you have provided in a commonly used format or have it transferred.
• Right to withdraw consent: if you have given consent, you may withdraw it at any time for the future.

You can submit a request via the point of contact in chapter 13 (the Contact option on the Help & Info page, accessible without an account). To verify your identity, we may ask you for additional information. We will respond in principle within one month. If you disagree with the way we handle your data, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

13. Contact

Do you have questions about this privacy statement, or would you like to submit a request to exercise your rights? Please contact us:

14. Changes to this privacy statement

Ani-Malls may amend this privacy statement from time to time, for example due to changes in our services or in laws and regulations. The most current version can always be found on the platform. In the case of substantial changes, we will inform you insofar as this is legally required.