Privacy and GDPR
What Ruilmarkt keeps about you, why, for how long, and what you can do yourself. In short: as little as possible, nothing for advertising, and you can view and delete everything yourself.
Who is responsible
IFM-Projects B.V. offers this swap market and is responsible for your data (data controller). Questions: info@ifm-projects.eu.
What is kept about you
- Your account: username, password (only encrypted, readable by nobody), display name and town. If you fill them in, also your email address, phone number, a short text about yourself and your default location on the map, rounded to about a hundred metres. Also your language choice and whether you want email notifications.
- What you post: your items and photos. All metadata is removed from photos, including where they were taken.
- Your conversations: messages and photos between you and the other person. An administrator can only read a conversation if one of you reports it, and only while that report is open.
- What you report: if you report a listing or conversation, the reason and your explanation.
- Signing in: when you signed in and were last active.
- Visits: for each day you visit while signed in, your member number, to count how many people use the site. Anyone not signed in is counted under a code that changes every week and cannot be traced back to a person.
- The server log: for each request the IP address, the time and the page. That log is overwritten as soon as it is full.
What for
Only to make the swap market work: so you can post items, swap with others and sign in again. Your email address is only used for a reset link if you forget your password, and for notifications of new messages if you turn them on yourself. Never for advertising or a newsletter.
The legal basis is the agreement you make when you create an account. The log and what members report also serve to prevent abuse, and the visit count to know how much the site is used; that is a legitimate interest.
How long
- Your account and everything that belongs to it: until you close it.
- A signed-in session: expires after 45 days without use.
- A reset code: one hour, or three days if the administrator makes it. After use it is gone.
- The visit count: five years.
- Data remains in backups for a while, until they are overwritten.
Who anything is shared with
With nobody, to make money from it. There is no advertising network, no analytics service and no tracking cookie. The map comes from this site itself: your browser requests nothing from a map provider.
- A place name or postcode you type in is looked up by the site at OpenStreetMap. Only that place name is sent, not who is asking.
- An email to you goes through the provider's mail server.
Cookies
Only three, and all three are needed for the site to work: your sign-in, your language choice and a key that protects forms. They do not track you, so no consent is needed.
What you can do yourself
- View and take along: download your data (a zip file with everything, including your photos).
- Correct: change your details under Account.
- Delete: close your account. If you can no longer sign in, ask through Contact.
- Objection or a question: through Contact.
- You can also file a complaint with the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl.