Vinted Go Privacy Policy for Points
We’ve created this Privacy Policy to help you understand how we collect, use and store your personal data when you partner with Vinted Go as a parcel locker host, shop, or neighborhood point, or when you use the Vinted Go Shop mobile app(“App”). Read it carefully as it contains important information about your privacy and the rights relating to it.
Note:
- If you’re looking for information on how we handle your personal data when you you visit our website www.vintedgo.com or use Routes by Vinted Go to ship parcels, see our main Privacy Policy.
- If you’re looking for information on how we handle your personal data when you use Vinted Go delivery services integrated on third-party platforms, see our Privacy Policy for Users.
- If you’re looking for information on how we handle your personal data when you use Vinted Go parcel pick-up/drop-off locations (lockers, shops, or neighborhood points), see our Privacy Policy for Delivery Services.
1. Who is responsible for protecting your data?
Vinted Go is the controller of all data collected during your partnership with us and while you use the App. We take full responsibility for protecting this data.Vinted Go has a designated data protection officer. If you have any questions, comments or complaints regarding how we collect, use and store your personal data, or if you want to assert any of your privacy rights (see Section 6 below), reach out to us via our contact details below:
Vinted Go, UAB
Identification number: 305959706
Address: Švitrigailos st. 13, Vilnius 03228, Republic of Lithuania
2. What data do we collect and why?
2.1. To manage your partnership with us
Purpose. We collect, use and store the data that is necessary for you to join our network as a Vinted Go location (parcel locker host, shop, or neighborhood point). This includes reviewing your application, contacting you, managing the contract, providing access to the App and instructions, administering the partnership, processing payments, etc.
Data categories. For this purpose, we collect, use and store your full name, email address, phone number, address, status (company or individual), SWIFT, SIREN number, opening hours (days/time), maximum quantity of parcels that can be stored, preferences regarding setting up the Vinted Go service in other establishments, photo of the location.
Legal basis. We collect, use and store the data lawfully because it is necessary for the performance of a contract to which you are a party (Article 6(1)(b) of the GDPR).
Retention period. If your application is ineligible, we keep it for 2.5 years in case it becomes eligible. Otherwise, we retain your data until your partnership ends, plus any applicable legal and accounting retention periods.
2.2. To make the App work
Purpose. We collect, use and store the data that is necessary for the App to work as intended, i.e. to allow you to log in to the App and use its functionalities.
Data categories. For this purpose, we collect, use and store your profile data (user ID, username, password, company, role), event data (parcel pick-up/drop-off time, total number of pickups, problems reported, comments), session data (see Section 3 below).
Legal basis. We collect, use and store the data lawfully because it is necessary for the legitimate interest of Vinted Go to ensure the functionality of the App (Article 6(1)(f) of the GDPR).
Retention period. We keep the data for 6 months after the deletion of your account.
2.3. To provide customer support
Purpose. We collect, use and store the data that is necessary to help you report issues, resolve any problems related to Vinted Go and the App, and provide customer support through phone, chat, or other channels.
Data categories. For this purpose, we collect, use and store your full name, phone number or email address, issue type, order ID, message, parcel tracking number, and shop ID (when applicable).
Legal basis. We collect, use and store the data lawfully because it is necessary for the performance of a contract to which you are a party (Article 6(1)(b) of the GDPR).
Retention period. We keep the data for 2 years after solving the issue.
2.4. To analyse and improve the App and services
Purpose. We collect, use and store the data that is necessary to analyse and improve the App and the services related to it. This includes receiving and analysing your voluntary feedback.
Data categories. For this purpose, we collect, use and store your profile data (user ID, username, password, company, role), event data (parcel pick-up/drop-off time, total number of pickups, problems reported, comments), session and device data (session ID, IP address, browser, device type, operating system and its version, geolocation, actions on the App). When you voluntarily leave feedback, we also process your name, email address, and the content of your feedback.
Legal basis. We collect, use and store the data lawfully because it is necessary for the legitimate interest of Vinted Go to analyse and improve the services (Article 6(1)(f) of the GDPR).
Retention period. We keep the data for 6 months after the deletion of your account. Session and device data are kept from 1 millisecond to 15 months after the session (more information).
2.5. To exercise your privacy rights
Purpose. If you send us a request, complaint or other enquiry in relation to your privacy rights (see Section 7 below), we collect, use and store the data that is necessary to handle the enquiry and take appropriate action.
Data categories. For this purpose, we collect, use and store the data contained in your enquiry, in addition to any other data held by Vinted Go as necessary to respond to a specific enquiry.
Legal basis. We collect, use and store this data lawfully because it is necessary for compliance with a legal obligation to which Vinted Go is subject (Article 6(1)(c) of the GDPR).
Retention period. We keep the data for 2 years after resolving the enquiry.
2.6. To defend our rights and interests
Purpose. If you get involved in a dispute with us or we need to otherwise defend, enforce, exercise and uphold our rights or legitimate interests, we collect, use and store the data that is necessary for the specific case.
Data categories. For this purpose, we collect, use and store all data we hold about you as necessary for the specific case.
Legal basis. We collect, use and store this data lawfully because it is necessary for compliance with a legal obligation to which Vinted Go is subject (Article 6(1)(c) of the GDPR).
Retention period. We keep the data for 5 years after we identify the need to defend our specific rights and interests, and, in case of a dispute, until the final execution of the binding decision of the authorised body.
,2.7. To share information about our services
Purpose. We collect, use and store the data that is necessary to communicate information about our services, reach out to potential customers and partners, share relevant offers, and more.
This may include gathering contact information and using targeted advertising or reaching out proactively, especially if you represent a business with potential for collaboration. If we communicate by phone, we might record calls to confirm agreements and improve customer service.
Data categories. For this purpose, we collect, use and store your contact details, professional information such as your job title, along with the communication history, call recordings, and any preferences you have expressed about further communication.
Legal basis. We collect, use and store the data lawfully because it is necessary for the legitimate interest of Vinted Go to establish and maintain contact with customers and partners (Article 6(1)(f) of the GDPR). You can object to further communications at any time, especially when we reach out to you proactively. Just let us know your preferences in your reply to our message.
Retention period. We keep the data for this purpose for 3 years after collection. If you do not want us to contact you anymore, we will put your details in a “Do not contact” list. We save the records in this list for 10 years to respect your choice. If we establish a business relationship, we might keep the data longer, and the duration could depend on what we agree upon. Call recordings are stored for 30 days.
3. What cookies do we use?
Cookies are small text files that are placed on your device by websites and apps. They are widely used to make websites and apps work or function in a better, more efficient way.When you use the App, the following cookies are used:
Cookies | Category | Description | Duration |
UserLoginType | Strictly necessary cookie (ensures basic functionalities of the App; cannot be switched off) | Identifies the system from which the user has logged in | Until the end of session (the cookie is deleted after you logout from the App) |
CurrentRole | Identifies the role assigned the user during the login session | ||
AvailableUserRoles | Identifies the roles assigned to the user in the system | ||
API token | Keeps login information so that the user is not disconnected from the App | ||
OKTA internal savings | Keeps login information |
For more information about cookies, please visit www.aboutcookies.org or www.allaboutcookies.org.
4. Where do we get your data from?
We may get your data from a few different sources:- You provide it directly.
- From companies we acquire.
- Sometimes, we might receive it from government institutions, for example, when you file a complaint.
5. Do we share any data about you?
We only share your personal data with the following recipients when it is permitted by applicable laws and necessary for the purposes set out in Section 2:- The international group of companies to which Vinted Go belongs), including Vinted Go, GmbH, Vinted Go SASU, Vinted Go B.V., Vinted, UAB, Vinted Limited, and others.
- Carrier, IT maintenance, technical support, cloud, hosting, information security, communication, translation, consultancy, financial, legal, and other service providers
- Law enforcement, supervisory and other public authorities
6. Do we disclose any data about you outside the European Economic Area?
In most cases, your data is processed within the territory of the European Economic Area (EEA). However, some of our service providers are established outside of this territory, which may result in your data being transferred to third countries (e.g. USA). Where permitted by applicable laws and necessary for the purposes set out in Section 2, we share your data with the following recipients outside the EEA:
- Okta, Inc. (USA) – access management service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission)
- Datadog, Inc. (USA) – analytical service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission)
7. What privacy rights do you have?
The GDPR and other laws provide you with certain rights. Subject to conditions and limitations, you have the right to:
- Submit a request for confirmation as to whether Vinted Go processes your personal data. If Vinted Go processes your personal data, you can request access to it and certain explanations
- Submit a request to correct inaccurate or incorrect personal data or to supplement it when it is not complete
- Submit a request to delete your personal data held by Vinted Go
- Submit a request to restrict the processing of your personal data
- Object, on grounds relating to your particular situation, to collection, use and storage of your personal data when Vinted Go processes it on the basis of legitimate interest
- Lodge a complaint with a supervisory authority, in particular in the country of your habitual residence or place of an alleged infringement of the GDPR, and seek a judicial remedy
If you’d like to exercise any of your privacy rights, reach out to us using the contact details in Section 1 above.