Privacy Statement LastDodo

LastDodo is the world’s largest catalogue and community for collectors. On our platform you can easily keep track of your own collection, find information about other users' collections, offer objects for sale in your own webshop and buy items from other users in their webshop. You can also set an alert for items you are looking for and get in touch with other collectors. Through the websites of LastDodo, accessible through www.lastdodo.com, www.lastdodo.nl, www.lastdodo.de, www.lastdodo.fr and through other top level domains registered by LastDodo, including all subdomains thereof, as well as the mobile versions of that website and the LastDodo apps (iPhone and Android) ("the Website") you get access to our platform.As a part of our Website, we process personal data. In this Privacy Statement we inform you how we process your personal data

Contact details

LastDodo B.V. (“LastDodo”, “we”, “us” of “our”) is responsible for the processing of your personal data, a company having its address at Vaart Z.Z. 1D, 9401 GE in Assen. LastDodo is registered with the Chamber of Commerce under number 78160871. All questions regarding the processing of personal data by LastDodo can be addressed to info@lastdodo.com.

To whom does this Privacy Policy apply?

This Privacy Statement applies to you when you use our Website. Through our Website you can make an overview of your own collection and view and edit those of others, buy or sell objects in a personal webshop, set an alert for objects you are looking for and get in touch with other users through our collectors forum. You can also contact us via the Website, subscribe to our newsletter and apply for a job with us.

How does LastDodo process your personal data?

We process your personal data for various purposes. We are only allowed to do this if we have a reason to do so (this is called a legal ground). In the overview below we indicate the personal data LastDodo uses for which specific purpose, what the legal ground is for processing these data, and how long LastDodo stores the data. Retention periods mentioned in this Privacy Statement may be extended if and to the extent necessary to live up with a statutory obligation.

1. Visit of the Website.

If you visit the Website, we collect some technical information about your visit. For example, we collect the date and time of your visit, IP address, MAC address or other unique number, browser, items you visit and other log information (such as URL referrer). These personal data are necessary to allow the Website to function optimally and to display information in the desired manner. The processing of these personal data is therefore necessary for the purposes of the legitimate interests pursued by LastDodo. We also collect information about your visit to our Website via cookies. For more information about the cookies we place and for what purpose, please refer to our Cookie Statement https://www.lastdodo.com/en/help/cookie_policy.

2. Newsletter.

LastDodo wishes to inform you on its products and services. If you are interested in our newsletters and/or other marketing communications, you can subscribe for such mailings by providing your email address and click ‘Subscribe’. In addition to your email address, we also use the information we receive via tracking software. These include the time the email was received and opened, the content of the opened email, the hyperlinks clicked on, your IP address, your operating system and the browser you are using. If, at any moment, you do not wish to receive newsletters of LastDodo anymore, you can unsubscribe by using the opt-out option that is provided in every newsletter that LastDodo sends you. We process your email address to send you an email. The other personal data mentioned here is processed by LastDodo because it is important for us to keep improving our emails. The processing of these personal data is necessary for the purposes of the legitimate interests pursued by LastDodo. The personal data we process in the context of email tracking will be deleted 1 month after receipt. The email address and the data that show that you have given your consent to send the newsletter will be deleted 5 years after you unsubscribe from the newsletter.

3. Creating and using a profile

a. Creating a profile. You can create a profile via the Website. We will then register your email address and the password you entered. You can later supplement this profile with the desired information, but this is not mandatory.

b. View, manage and modify collections. After you have created your profile, you can start searching for objects in the catalogue. You can also add objects to the catalogue yourself. You can indicate which objects you own and modify information about other people's objects. This information will be processed by LastDodo and shown to other users.

c. Offer objects for sale. Through our platform you can also offer objects from your collection for sale. You can create a personal webshop, where you provide the objects with a price, description and a number of photos. We also ask you to provide your name and address. If you are trading for purposes relating to your business, we also ask you to provide your trade identity. After buying the object, the buyer will have access to the seller's name and address.

d. Buying through the webshop. When buying objects, we also ask you to register your name and address in your profile, so that we can pass these on to the seller in the event of a sale. This allows the seller to send the object to you.

e. Public forum and private messages. Via LastDodo you can establish online contact with other users and exchange messages via the public forum.

f. Search-list. Finally, you can create a search-list from the central catalogue. You can add the objects to your search-list without adding images or information yourself. We will send you an alert via email when an item is placed on LastDodo. The processing of above-mentioned personal data is necessary for the performance of the user contract. Without these personal data no profile can be created, no objects can be added or modified by the user and objects cannot be offered or purchased. We will only send you the search-list alert if you have created a search-list and indicated that you would like to receive alerts by email. LastDodo stores your personal data for as long as you have a profile and will delete your data 1 year after you deactive your profile. You are also able to reactivate your profile within this term. LastDodo has a legal obligation to retain financial records for a period of 7 years. We therefore register the price at which purchases and sales are made and which objects are involved.

4. Personalized ads.

We use personal data to be able to make relevant offers by email or to tailor (the offer of) the Website to users. We personalize these offers on the basis of your website activity and the resulting interests (such as comics because collections of comic books are often viewed), any purchase and / or sales information and the information you have entered on your profile page, giving us insight into your surfing, searching, and buying behavior. The processing of these personal data is necessary for the purposes of the legitimate interests pursued by LastDodo. That interest consists of making you personalized offers and tailoring the content of the Website to your preferences (direct marketing). We store this personal information for a period of 1 year after your last activity.

5. Security and fraud prevention.

We secure our systems and data and protect our operating assets. We also do our utmost to keep our platform secure and prevent fraud, for example by checking whether purchases of large sums of money are serious. For this purpose, we use your personal data, including the date and time of the visit, IP address, MAC address or other unique number, browser, parts of the Website you visit and other log information and the information we have collected in connection with your profile and related purchasing and/or sales activities. The processing of these personal data is necessary for the purposes of the legitimate interests pursued by LastDodo, namely to offer the Website and platform in a secure and reliable manner. We keep this personal data as long as it is strictly necessary for the protection of our systems and the prevention of fraud.

6. Payments.

When you make a transaction, your transaction data is sent to our payment service provider in order to process your payment. We only administer the amounts for which you have made a purchase or sale. For the actual execution of the payment, you are automatically forwarded to the secure environment of your chosen payment service provider. You will automatically be redirected back to the LastDodo platform if the payment is successful or if the payment cannot be made. These payment service providers are responsible for the processing of your personal data. We advise you to look at the Privacy Statement of these service providers.

7. Careers.

If you apply for a position at LastDodo, we will process your name, email address, information from your CV and / or application letter (references, list of marks, certificates, etc.). We also consult (business) social media, such as LinkedIn and Facebook. The personal data we collect in the first phase of the application process is needed to assess whether you would be suitable for the position. The processing of these personal data is therefore necessary for the purposes of the legitimate interest pursued by LastDodo. LastDodo retains your personal data for 4 weeks after rejection or, with your consent for a period of 1 year.

8. Contact.

If you contact us, we will process personal data that you fill in or provide to us (by telephone), such as your name, email address, telephone number, any company details and the content of your question or complaint. We use this personal data to ensure that we can answer your questions. The processing thereof is necessary for the purposes of the legitimate interests pursued by LastDodo.

If you have a profile, your personal data is stored for as long as you have a profile and will delete your data within 1 year after you deactivate your account. In other cases, LastDodo will delete your personal data within 1 year after responding to your message or resolving you complaint.

9. Other data processing activities.

We process personal data if supervisory authorities and inspection services oblige us to do so, such as the Tax and Customs Administration (‘Belastingdienst’) or the Dutch Data Protection Authority (‘Autoriteit Persoonsgegevens’). These personal data are stored as long as necessary for these purposes or as prescribed by specific legal obligations.

Access to personal data

The following third parties may have access to your personal data.

1. Visitors of LastDodo.

As described under ‘How does LastDodo process your personal data?’, we share personal data of users who purchase an object with the seller and vice versa. Also, visitors of LastDodo can find information about your collections, individual objects and activity on the Website, such as your messages on the forum and your search-lists. Messages to a specific user through our messaging functionality will only be shared with the user. In principle, LastDodo does not take note of the content of this message but only facilitates the transmission.

2. Processors.

We engage parties that process personal data on our behalf (processors), for example to host the Website, store and manage personal data and send newsletters.

3. Other third parties.

LastDodo provides your personal data to external parties (partly) acting as a data controller. This is the case, for example, for payments made through our Website by third party service providers and the collection of receivables. Because these third parties are (partly) responsible for processing your personal data themselves, they must inform you of this themselves.

4. Authorities and legal-aid counsellors.

We may also share personal data with external parties if LastDodo is required to do so on the basis of applicable laws and / or regulations, such as police and government institutions. LastDodo can also share personal data on the basis of a court order, judicial decision or with your consent.

Data processing outside the European Economic Area

LastDodo processes personal data outside the European Economic Area. Through our Website you can for example go to our Facebook or Instagram page. These parties process personal data worldwide. In addition, we use cloud services for web hosting and email software to send newsletters.

To comply with EU data protection laws around international data transfer, these parties are certified under the EU-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield. In addition, they may use standard contractual clauses or adequacy decisions adopted by the European Commission.

Your rights

Under the privacy law, you have a number of rights with regard to your privacy.

1. Right to access.

This is the right to ask us if we have personal data from you and to have access to it.

2. Right to rectification.

You have the right to request the rectification of inaccurate personal data concerning you.

3. Right to be forgotten.

In some cases, you have to right to ask LastDodo to erase your personal data.

4. Right to restriction.

You have the right to obtain restriction of processing of your personal data or to stop the processing temporarily.

5. Data portability.

This is the right to receive your personal data which you have provided to us in order to transmit those data to another controller.

6. Right to object.

You have the right to object to processing of personal data. Where personal data are processed for direct marketing purposes (see ‘How does LastDodo process your personal data?’), you always have the right to object to processing of personal data for such marketing.

7. Withdraw consent.

Where the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You may send your request to info@lastdodo.com. LastDodo shall respond to your request without undue delay and in any event within 1 month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. LastDodo shall inform you of any of such extension within 1 month of receipt of the request, together with the reasons for the delay. If we do not take action on your request, we shall inform you of the reasons for not taking action. We will do that in any case within thirty days of receipt of the request.

Complaints or questions

If you have questions or complaints you can contact us via info@lastdodo.com, for example with regard to the balancing test that we have made in order to base some of our data processing activities on the legal ground ‘legitimate interest’. We will be happy to find a solution, but you can also submit a complaint to the Dutch Data Protection Authority (‘Autoriteit Persoonsgegevens’).

Amendments

LastDodo may amend this Privacy Statement from time to time. If there are subsequent substantive or material changes that may affect one or more of the parties involved to a considerable extent, we inform those involved in advance.

Last update: 1 July 2020