Privacy Policy

Publication Date: October 1, 2022 

Version: 1.0 

General Privacy Guidelines 

A.1 Contact & General Information 

A.1.1 Responsible for the data processing of the advertisement platform as well as its associated mobile applications is Nitroxid IT Solutions, Leconskamp 20, 49191 Belm, Germany, represented by Andreas Schaffert. Hereinafter referred to as "nautano". 

A.1.2 In general, you can visit nautano's website(s) without having to provide personal information. Each time the website(s) are accessed, the web server automatically saves a so-called log file, which, for example, contains basic information such as the name of the requested file, your IP address, date and time of file retrieval, the amount of data transferred, and the requesting provider (access data). 

The log files serve exclusively the purpose of ensuring the smooth operation of the website, improving services, and tracing potential legal infringements by authorities. There is a legitimate interest in the collection and storage of this data (correct presentation of the offers, etc.) in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. 

A.2 Hosting by Third Party 

A.2.1 All data of the advertisement platform and the associated mobile applications are hosted by a third-party provider. This not only concerns data of nautano, but also all data provided by buyers and sellers, as well as the log files of every visitor to nautano's offers. In the context of Art. 6 para. 1 sentence 1 lit. f GDPR, there is a legitimate interest in collecting, processing, and storing this data to ensure regular operation. The third-party provider is either located in a country within the European Union or in a country outside the European Union, for which the European Commission has determined an adequate level of data protection by decision. 

Collection, Processing, and Storage of Data 

B.1 Data Collection and Use when Sending Messages 

B.1.1 When contacting by e-mail, nautano stores the personal data that you have provided to nautano in the course of the conversation and clarification of your concern. After the final clarification of your concern and the final processing by nautano, the personal data you have provided will be deleted, unless a longer or permanent storage of the data is necessary due to your individual concern. 

B.1.2 The internal messages and their contents between nautano and buyers, nautano and sellers, as well as between buyers and sellers are stored for the duration of the communication. After mutual deletion of the conversation, the messages are stored for security reasons for another 12 months. 

To protect buyers and sellers, nautano uses a spam filter for our internal messaging system. This automatically analyzes requests, interval, and content of the messages based on certain criteria in order to prevent unwanted messages, such as fraud or advertising, automatically. The legal basis for this is Art. 6 para. 1 sentence lit. f GDPR. 

B.1.3 Furthermore, nautano may automatically and/or manually check the messages left when using the internal messaging function for any existing content that violates our general terms of use and business conditions or applicable law (fraud, terrorism, advertising, etc.). Such messages are not forwarded to the recipient or removed, but stored for evidence. This serves our predominant legitimate interest in preventing abusive or unlawful use of the advertisement platform and/or the associated mobile applications in accordance with Art. 6 para. 1 sentence lit. f GDPR. 

B.2 Data Collection and Use when Opening a Customer Account 

B.2.1 When opening a customer account, nautano collects and stores personal data. For the legitimization and later use of the advertisement platform and associated mobile applications, some details are mandatory, while others are voluntary. Necessary information is highlighted by so-called mandatory fields. Which data is concerned can be taken from the respective input forms. This data is required for contract execution and active use of our services in accordance with Art. 6 para. 1 sentence lit. f GDPR. The collected data will be deleted after processing of the contract or deletion of the customer account. All data will be deleted only after the expiration of the tax and commercial retention periods, provided that you have objected to the further use of your data and the data use beyond that. 

You can delete your customer account at any time. This can be done either by sending an email to nautano with subsequent legitimization or directly via the function provided for this in the customer account. 

B.3 Unrecognizability, Restriction and Blocking 

B.3.1 nautano reserves the right to make individual data unrecognizable, to restrict functions and/or to restrict or completely block access to the user account, should there be any uncertainties, such as unauthorized advertising, false information, fraud, payment arrears, etc. This serves to safeguard our predominant legitimate interest in an effective enforcement or assertion of our general terms of use and business conditions according to Art. 6 para. 1 sentence lit. f GDPR. 

C. Collection, Storage, Use, and Sharing of Data 

C.1 Data Sharing C.1.1 For payment processing, nautano may, depending on the selected payment method, rely on external payment service providers and/or external credit institutions. These third parties are necessary for orderly and lawful payment processing and require personal data for the ordering and payment process. The legal basis for this is Art. 6 para. 1 sentence lit. b GDPR. 

Depending on the chosen payment method, the third party may be based abroad. The cooperation is based on standard data protection clauses of the European Commission. The transmission of personal data to these third parties is only in the context of necessity for contract fulfillment. 

C.1.2 Data voluntarily submitted in the form of the offer is made public on the advertisement platform and the associated mobile applications. Changing or deleting this public data is possible at any time via the customer account. After the change or deletion, the data remains stored with nautano. The data serves among other things for usage analyses, protection against fraud, evidence security, and also for advertising purposes. 

C.1.3 Voluntarily provided data within the internal messaging system is collected and stored within the framework of the data protection declaration section B. Which data buyers and sellers provide to each other is not in the hands of nautano. In addition, nautano does not have control over how the communication party handles the data provided. nautano strongly advises buyers and sellers not to provide sensitive and personal data via the internal messaging system. 

C.2 Cookies and Other Technologies 

C.2.1 For the advertisement portal and the associated mobile applications to function properly, nautano uses various technologies, including so-called cookies. These are small text files that are automatically stored on the user's device. Some of our cookies are deleted after closing the browser (session cookies), others remain stored to recognize the browser upon the next visit (persistent cookies). 

These and other technologies are required for some functions (e.g. login). Through these technologies, the IP address, time of the page view, browser and device information, and information about the use of the advertisement portal and/or the user's mobile applications are collected and processed. This serves predominantly legitimate interests in an optimized presentation and the full functionality of nautano according to Art. 6 para. 1 sentence lit. f GDPR. Furthermore, nautano uses technologies to fulfill the legal obligations to which nautano as a German company is subject as well as for web analysis and marketing. 

C.2.2 nautano uses cookies and other technologies from third parties. For detailed questions about the purpose and use of these cookies and technologies, please refer to the contact listed at the end of the privacy policy. 

C.2.2.1 nautano uses various Google services provided by Google Ireland Ldt., Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google"). The information automatically collected by Google technologies about the use of nautano is usually transmitted to servers of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. The cooperation between Google and nautano is based on standard data protection clauses of the European Commission. If the user's IP address is collected by Google technologies, it is shortened before storage by activating IP anonymization. Only in exceptional cases is the full IP address transmitted to Google's servers and then shortened. Unless otherwise stated for the individual technologies, the data processing is based on an agreement concluded for the respective technology between joint controllers according to Art. 26 GDPR. More information about Google's data processing can be found in Google's privacy notices. 

C.2.2.1.1 For the purpose of analysis, nautano uses Google Analytics. This Google technology automatically stores data (e.g., browser and device information, IP address, time of visit, as well as information about the use of nautano). With this data, user profiles are created using pseudonyms. The IP address of the user is generally not combined with other data from Google. The data processing is based on an agreement on order processing by Google. 

For optimization and marketing purposes, nautano has activated the data sharing setting for Google products and Google services. This allows Google to access the data collected and processed by Google Analytics and then use it to improve Google services. The data sharing with Google within the scope of these data sharing settings is based on an additional agreement between those responsible. nautano has no influence on the subsequent data processing by Google. 

For analysis and advertising purposes, the so-called DoubleClick cookie, an extension function of Google Analytics, enables recognition of the browser and/or the end device when visiting other websites or mobile applications. With this information, Google will compile reports on the activities and provide other services related to the use. 

C.2.2.1.2 nautano markets advertisements from third parties via Google AdSense. These advertisements are displayed at various points on nautano. The DoubleClick cookie enables the display of interest-based advertising by collecting and processing data (e.g., browser and device information, IP address, time of visit, as well as information about the use of nautano) and the automatic assignment of a pseudonymous User-ID, which helps identify interests based on visitors to this and other websites and mobile applications. 

C.2.2.1.3 For advertising purposes in Google search results as well as on third-party websites and mobile applications, the so-called Google Remarketing cookie is set when visiting nautano, which automatically enables interest-based advertising by collecting and processing data (e.g., browser and device information, IP address, time of visit, as well as information about the use of nautano) and using a pseudonymous cookie-ID and based on the pages you have visited. Data processing beyond this only takes place if the "personalized advertising" setting in the Google account is activated. If one is logged into Google during the visit to nautano, Google uses the data together with the Google Analytics data to create and define target audience lists for cross-device remarketing. 

C.2.2.2 nautano also utilizes the Meta Pixel as part of the technologies provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (hereinafter referred to as "Meta"). Meta includes platforms such as Facebook, Instagram, and WhatsApp. With the Meta Pixel, data (e.g., browser and device information, IP address, time of visit, as well as information about the use of nautano) is automatically collected and stored. This data is then used to create pseudonymous user profiles. As part of the so-called Extended Data Matching, information for matching purposes is hashed, collected, and stored, which can identify individuals (e.g., names, email addresses, and phone numbers). For this purpose, a cookie is automatically set by the Meta Pixel when visiting nautano, which automatically enables recognition of the browser and/or end device when visiting other websites or mobile applications using a pseudonymous cookie ID. Meta will combine this information with further data from their Meta profiles and use it to compile reports on the activities and to provide further services related to the use, in particular personalized and group-based advertising. 

The information about the use of nautano automatically collected by Meta Platforms, Inc. 1601 Willow Road, Menlo Park, California 94025, USA technologies is usually transferred to and stored on a server in the United States. This data transfer is based on standard contractual clauses (SCC) as a suitable guarantee for the protection of personal data, which can be viewed at https://www.facebook.com/legal/EU_data_transfer_addendum. The data processing by Meta is in principle based on an agreement for order data processing, which can be viewed at https://www.facebook.com/legal/terms/dataprocessing. 

C.2.2.2.1 For advertising and analysis purposes, the so-called Meta Custom Audiences and Meta Lookalike Audiences functions can be used. This allows nautano to target advertisements to people who are likely to be interested in the products or services based on their behavior on nautano, other websites and mobile applications, and Meta platforms. 

C.2.2.2.2 For advertising and analysis purposes, the so-called Meta Conversion and Meta Event functions are used. This allows nautano to understand how users interact with the advertisements and to measure their effectiveness. 

C.2.2.2.3 For advertising purposes, the so-called Meta remarketing function is used. This allows nautano to display personalized advertising to users of nautano when they visit Meta platforms and other websites and mobile applications. This is based on a pseudonymous cookie ID and the pages you have visited. Please note: Meta uses data to build comprehensive user, interest and demographic profiles. Meta does not provide nautano with any information that could be used to directly identify an individual user. 

C.3 Email Newsletters, Postal Advertising & Notifications 

C.3.1 If there is a confirmed newsletter subscription, nautano uses this data, which is stored separately from the user account, to send you the nautano newsletter based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. Unsubscribing from the newsletter is possible at any time and can either be done by clicking on "unsubscribe newsletter" in the newsletter, by disabling the newsletter in the user account, or by sending a message to nautano. 

C.3.2 If you have provided nautano with your first and last name or the company name as well as your postal address, nautano will use this to send offers and information. This serves to safeguard the predominant legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR in addressing our customers for advertising. The use of this data for these purposes can be objected to at any time by sending a message to nautano. The advertising mailings are carried out on behalf of nautano by a service provider to whom nautano forwards your data for this purpose. 

C.3.3 nautano informs via notifications (e.g. new offers in the personal search filter, price changes of favorites or new messages from interested parties or sellers) by email. The sending of these system mails is done in accordance with Art. 6 para. 1 sentence lit. f GDPR. 

D. Rights D.1 Rights and Contact Opportunities 

D.1.1 As a user, you have the right according to Art. 15 GDPR to obtain information about your personal data processed by us to the extent specified there. 

D.1.2 As a user, you have the right according to Art. 16 GDPR to demand the immediate correction of incorrect or completion of your personal data stored at nautano. 

D.1.3 As a user, you have the right according to Art. 17 GDPR to demand the deletion of your personal data stored at nautano, unless further processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise or defense of legal claims. 

The deletion of personal data can result in the deletion of the user account on nautano, as this information is mandatory for use. 

D.1.4 As a user, you have the right according to Art. 18 GDPR to demand the restriction of the processing of your personal data, insofar as you dispute the accuracy of the data, the processing is unlawful, but you reject its deletion, nautano no longer needs the data, but you need them to assert, exercise or defend legal claims, or you have lodged an objection to the processing in accordance with Art. 21 GDPR. 

D.1.5 As a user, you have the right according to Art. 20 GDPR to receive your personal data, which you have provided to nautano, in a structured, common and machine-readable format or to request its transfer to another controller. 

D.1.6 As a user, you have the right according to Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, workplace, or company headquarters. 

D.1.7 For further questions about the collection, storage, processing, or use of your personal data, for information, correction, restriction, or deletion of data, as well as revocation of granted consents or objection to a specific data use, please contact nautano directly using the contact details in our imprint. 

D.2 Right to Object 

D.2.1 As far as nautano processes personal data as explained above in order to protect legitimate interests that are predominant within the framework of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you have a right to object only on grounds relating to your particular situation. 

After exercising your right to object, nautano will not continue to process your personal data for these purposes, unless nautano can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims. 

This does not apply if the processing is for direct marketing purposes. In that case, nautano will not continue to process your personal data for this purpose.