Privacy Policy
We’ve created this Privacy Policy to help you understand how we collect and use your personal data when you interact with the Vinted Go services, including our website www.vintedgo.com. Read it carefully as it contains important information about your privacy and the rights relating to it.
Note: If you’re looking for information on how we handle your personal data when you use Vinted Go’s delivery services integrated on third-party platforms, please read our User Privacy Policy.
1. Who is responsible for protecting your data?
Vinted Go is the controller of all data collected while you interact with our services and takes full responsibility for protecting this data.
Vinted Go has a designated data protection officer. If you have any questions, comments or complaints regarding how we collect, use and store your personal data, or if you want to assert any of your privacy rights (see Section 6 below), reach out to us via our contact details below:
Vinted Go, UAB
Identification number: 305959706
Address: Švitrigailos st. 13, Vilnius 03228, Republic of Lithuania
Email: [email protected]
2. What data do we collect and why?
2.1. To ensure the functionality of our website
Purpose. We collect, use and store the data that is necessary for our website to function properly (for example, to remember your privacy preferences, allow you to fill in forms, display interactive maps with pick-up and drop-off (“PUDO”) points, etc.).
Data categories. With the help of strictly necessary and functional cookies (see Section 3 below), we collect, use and store the data about your use of our website. If you use our interactive maps, we also use your location data and the addresses you input.
Legal basis. We collect, use and store the data lawfully because it is necessary for the legitimate interest of Vinted Go to ensure the functionality of our website (Article 6(1)(f) of the GDPR).
Retention period. We keep the data for this purpose until the relevant cookies expire (see Section 3 below), usually until you close your browser. In relation to our interactive map, we keep the PUDO-related data until the service contract expires; or in the case of individual neighbourhood PUDO points, for as long as you provide this service.
2.2. To provide the “Buy Shipping Labels” service
Purpose. When you purchase a shipping label through our website, or when someone else buys a shipping label and enters your information, we collect, use and store the data that is necessary to provide the relevant service.
This includes generating the label, enabling checkout, transferring data to carriers, providing tracking details, providing customer support, managing extra coverage, issuing refunds and compensations, complying with accounting and other legal requirements applicable to the service.
Data categories. For this purpose, we collect, use and store the sender’s and recipient’s full name, email address, phone number, shipping address, parcel pick-up/drop-off points, postal (ZIP) code, parcel details (size, weight, content, value, tracking numbers, extra coverage), payment details, IP address, communication with us (including any complaints made) and other data necessary to provide the service.
We also enable you to transmit payment data such as credit card details directly to the payment service provider. To learn more, please read the Privacy Policy of the payment service provider.
Legal basis. If you have purchased a shipping label yourself, we collect, use and store the data lawfully because it is necessary for the performance of a contract (Terms of Service) to which you are a party (Article 6(1)(b) of the GDPR). If we have received your data because someone else purchased a shipping label, we collect, use and store the data lawfully because it is necessary for the performance of a contract between Vinted Go and the purchaser, serving their legitimate interests (Article 6(1)(f) of the GDPR).
Retention period. We keep the data for this purpose for 1 year after the provision of the service, unless applicable laws require longer. We keep the customer support data for 2 years after resolving the issue.
2.3. To analyse and improve our services
Purpose. We collect, use and store the data that is necessary to analyse the usage of our services and to improve them.
This may include using your data to invite you to participate in surveys, interviews, and similar activities.
Data categories. For this purpose, we collect, use and store your email address, country, age, gender, feedback (transcriptions, video/audio recordings), as well as the data relating to your use of our services, such as your purchase history, transaction details, shipping details, and how you interact with our website or other tools.
Legal basis. If you allow us to use analytical cookies, we collect, use and store the relevant data lawfully because we have your consent (Article 6(1)(a) of the GDPR). This also applies if you agree to be invited or participate in surveys, interviews, and similar activities. You can withdraw your consent at any time (see Sections 3 and 7 below). In other cases, we collect, use and store the data lawfully because it is necessary for the legitimate interest of Vinted Go to improve its services (Article 6(1)(f) of the GDPR).
Retention period. We keep the data for this purpose for 1 year after collection. We keep the cookie data until the relevant cookies expire (see Section 3 below).
2.4. To share information about our services
Purpose. We collect, use and store the data that is necessary to communicate information about our services, reach out to potential customers and partners, share relevant offers, and more.
This may include gathering contact information and using targeted advertising or reaching out proactively, especially if you represent a business with potential for collaboration.
Data categories. For this purpose, we collect, use and store your contact details, professional information such as your job title, along with the communication history and any preferences you have expressed about further communication.
Legal basis. We collect, use and store the data lawfully because it is necessary for the legitimate interest of Vinted Go to establish and maintain contact with customers and partners (Article 6(1)(f) of the GDPR). You can object to further communications at any time, especially when we reach out to you proactively. Just let us know your preferences in your reply to our message.
Retention period. We keep the data for this purpose for 3 years after collection. If you do not want us to contact you anymore, we will put your details in a “Do not contact” list. We save the records in this list for 10 years to respect your choice. If we establish a business relationship, we might keep the data longer, and the duration could depend on what we agree upon.
2.5. To respond to your requests and feedback
Purpose. When you submit a “Contact Us” form or reach out to us by other means, we collect, use and store the data that is necessary to respond to your request and provide you with information about our services. This includes situations where you provide feedback and agree to hear back from us.
Data categories. For this purpose, we collect, use and store the data contained in your request, such as your full name, email address, phone number, company details, and the content of your message.
Legal basis. If you allow us to contact you regarding your feedback, we collect, use and store the relevant data lawfully because we have your consent (Article 6(1)(a) of the GDPR). In other cases, we collect, use and store the data lawfully because it is necessary for the legitimate interest of Vinted Go to establish and maintain contact with customers, partners and other interested persons (Article 6(1)(f) of the GDPR).
Retention period. We keep the data for this purpose for 2 years from the receipt of your message.
2.6. To exercise your privacy rights
Purpose. If you send us a request, complaint or other enquiry in relation to your privacy rights (see Section 7 below), we collect, use and store the data that is necessary to handle the enquiry and take appropriate action.
Data categories. For this purpose, we collect, use and store the data contained in your enquiry, in addition to any other data held by Vinted Go as necessary to respond to a specific enquiry.
Legal basis. We collect, use and store this data lawfully because it is necessary for compliance with a legal obligation to which Vinted Go is subject (Article 6(1)(c) of the GDPR).
Retention period. We keep the data for this purpose for 2 years after resolving the enquiry.
2.7. To defend our rights and interests
Purpose. If you get involved in a dispute with us or we need to otherwise defend, enforce, exercise and uphold our rights or legitimate interests, we collect, use and store the data that is necessary for the specific case.
Data categories. For this purpose, we collect, use and store all data we hold about you as necessary for the specific case.
Legal basis. We collect, use and store the data lawfully as it is necessary for the legitimate interest of Vinted Go to defend its rights and interests (Article 6(1)(f) of the GDPR).
Retention period. We keep the data for 5 years after we identify the need to defend our specific rights and interests, and, in the case of a dispute, until the final execution of the binding decision of the authorised body.
3. What cookies do we use?
Cookies are small text files that are placed on your device by the websites you visit. They are widely used to make websites work or function in a better, more efficient way.
To see what specific cookies we use, how long they are stored, and how you can manage them, click on: Cookie settings.
You can configure your browser to decline some or all cookies, or to ask for your permission before accepting them. Please note that by deleting cookies or disabling future cookies, you may be unable to access certain areas or features of our website. For more information on how to adjust or change your browser settings, visit www.aboutcookies.org or www.allaboutcookies.org.
4. Where do we get your data from?
We may get your data from a few different sources:
- You provide it directly.
- If someone else buys a shipping label and puts in your details, we get it from them.
- From our partners and service providers, including parcel shops and companies that allow private individuals to join the delivery networks as neighbourhood PUDO points.
- Sometimes, we might receive it from government institutions, for example, when you file a complaint.
5. Do we share any data about you?
We only share your personal data with the following recipients when it is permitted by applicable laws and necessary for the purposes set out in Section 2:
- Vinted, UAB and Vinted Limited (the international group of companies to which Vinted Go belongs)
- Shipping carrier, IT maintenance, technical support, cloud, hosting, information security, communication, translation, consultancy, financial, legal, advertising, and other service providers
- Law enforcement, supervisory and other public authorities
6. Do we disclose any data about you outside the European Economic Area?
In most cases, your data is processed within the territory of the European Economic Area (EEA). However, some of our service providers are established outside of this territory, which may result in your data being transferred to third countries (e.g. USA). Where permitted by applicable laws and necessary for the purposes set out in Section 2, we share your data with the following recipients outside the EEA:
- Google LLC (USA) – communication software provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission)
- Checkout Ltd (UK) – payment service provider (the destination country offers an adequate level of data protection as recognised by the European Commision)
- Transcom WorldWide Tunisie Sàrl (Tunisia) – customer service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission)
7. What privacy rights do you have?
The GDPR and other laws provide you with certain rights. Subject to conditions and limitations, you have the right to:
- Submit a request for confirmation as to whether Vinted Go processes your personal data. If Vinted Go processes your personal data, you can request access to it and certain explanations
- Submit a request to correct inaccurate or incorrect personal data or to supplement it when it is not complete
- Submit a request to delete your personal data held by Vinted Go
- Submit a request to restrict the processing of your personal data
- Object, on grounds relating to your particular situation, to collection, use and storage of your personal data when Vinted Go processes it on the basis of legitimate interest
- Lodge a complaint with a supervisory authority, in particular in the country of your habitual residence or place of an alleged infringement of the GDPR, and seek a judicial remedy
If you’d like to exercise any of your privacy rights, reach out to us using the contact details in Section 1 above.