Privacy Policy

Effective Date: November 24, 2025

Data Controller: Digital Flow Jönköping
Data Protection Contact: Contact us at the details below

1. Introduction

We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, disclose, store and protect the personal data of users of our auction platform (the "Service"). We operate within the EU/EEA and comply with the General Data Protection Regulation (GDPR).

2. What personal data we collect

We collect the following categories of personal data:

Contact data: Email address and phone number.
Account & activity data: Your bid history and auction activity, and any associated identifiers.
Authentication & verification data: Email for one-time passcode (OTP) login, phone number for identity verification and for connecting with our payment provider when needed.
Payment forwarding data: We may forward your phone number (and any minimal required details) to our external payment provider. We do not store your card or bank-account details; payments are handled entirely by the external provider.

3. Purposes of processing & lawful basis

We process your personal data for the following purposes on the basis that it is necessary for the performance of the contract you enter by creating an account with us:

To register you as a user and provide you access to the auction service.
To enable you to place bids, track bid history, manage auction participation and recognise winners/losers.
To send you notifications and updates about auctions you participate in (via email and/or SMS or phone).
To authenticate you via one-time passcode (OTP) sent to your email.
To verify your identity and ensure you are a real person bidding, and, if a payment is required, to forward necessary details (e.g., phone number) to our payment provider for payment initiation.

The lawful basis for this processing is Article 6(1)(b) GDPR — "processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract".

We have determined that without processing the above data we could not provide the auction service you have requested (e.g., you could not register or bid).

We will not use this legal basis for processing data for unrelated purposes (for example broad marketing) — such processing would rely on a separate lawful basis (such as consent or legitimate interest).

4. Data sharing / recipients

We will not share your personal email address or phone number with third parties for marketing or promotional purposes without your explicit consent.

We engage third-party service providers (processors) to support parts of our Service (such as hosting, authentication, payment processing). These processors act under our instructions and are bound by written data-processing agreements.

Payment processing: when you make payment via our platform, your phone number (and other minimal required details) may be forwarded to our external payment provider to facilitate the payment. We do not store your card or bank account details.

If data is transferred outside the EU/EEA (for instance if a service provider is located outside the region), we will ensure appropriate safeguards (e.g., standard contractual clauses) are in place.

5. Data retention

We will retain your email address, phone number, bid history and auction activity for as long as necessary to:

Provide you with the Service, manage the current auction event, administer and conclude post-event tasks (e.g., awarding items, notifying winners).
Comply with any legal or regulatory obligations.

Once the data is no longer necessary for these purposes, we will securely delete or anonymise it.

6. Your rights

Under the GDPR you have the following rights (subject to applicable exemptions):

Right of access: you can request a copy of the data we hold about you.
Right of rectification: you can ask us to correct inaccurate or incomplete data.
Right of erasure: you can ask us to delete your data where we have no lawful basis to retain it.
Right to restriction of processing: you can request we restrict processing under certain conditions.
Right to data portability: you can ask for your data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where applicable.
Right to object: because our lawful basis is contract performance, the right to object to the processing (based on legitimate interest) does not apply for the processing described in section 3.
If we ever process your data on the basis of consent (for example for marketing) you have the right to withdraw consent at any time.
Right to lodge a complaint with a supervisory authority (in Sweden: Integritetsskyddsmyndigheten) if you believe your rights are infringed.

To exercise any of these rights, please contact us at [contact email]. We may request verification of identity before fulfilling your request.

7. Security of your data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. Access to your email and phone number is restricted to personnel and systems that need it to deliver the Service. Please note that while we strive to protect your data, no system of transmission or storage is 100% secure.

8. What happens if you do not provide your data

Because your email address and phone number are necessary for delivering the auction service under the contract you enter by registering, if you fail to provide them, we may be unable to allow you to create an account or participate in bidding.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will publish the updated policy on our website with a new "Effective Date". If changes are significant, we may notify you via email.

10. Contact us

If you have any questions about this Privacy Policy or our processing of your personal data, you can contact:

Digital Flow Jönköping
Email: privacy@radiokbryrsig.se
Phone: [Contact Phone]