MatchWornShirt Privacy Statement
1 MATCHWORNSHIRT
1.1 We are MatchWornShirt, located at H.J.E. Wenckebachweg 210, 1096 AS in Amsterdam, The Netherlands (“MatchWornShirt”). You can reach us by email at info@matchwornshirt.com and by phone at 085-9024850.
1.2 When you visit our website https://www.matchwornshirt.com/ (“Website”) or use our mobile application (“App”), place a bid, become a customer, provide services to us, contact us, or apply for a job with us, we process your personal data. We are the "data controller" responsible for processing your personal data, as described further in this Privacy Statement ("Privacy Statement"). In this Privacy Statement, we explain why and how we process your personal data.
1.3 Our website uses cookies. You can find more information about our use of cookies in our Cookie Policy.
2 CATEGORIES OF PERSONAL DATA BEING PROCESSED
2.1 When you visit our Website or use our App, create an account, place bids through our Website, are a (potential) customer, provide services to us, apply for a position with us, visit us, or contact us, we process your personal data. Below, we explain the categories of personal data we process for each category of data subjects. The personal data listed in sections 2.3, 2.4, 2.5, 2.6, and 2.7 are necessary to fulfill a legal or contractual obligation or are a necessary condition for entering into a contract with you.
2.2 Website visitors and App users – When you visit our Website or use our App, we process the following personal data:
2.2.1 IP address;
2.2.2 Login status in the App;
2.2.3 Most visited pages on the Website and in the App;
2.2.4 Website and App usage and browser data
2.2.5 Interactions with our Website and App after receiving notifications or emails.
2.2.6 Data about the device you use to visit our Website or use our App;
2.2.7 Personal data collected automatically through the use of cookies.
2.3 Account holders – When you create an account through our Website or App, we process the following personal data in addition to the above:
2.3.1 Email address;
2.3.2 Password (in pseudonymized form).
2.4 Bidders – When you place a bid through the Website or App, we process the following personal data in addition to the above:
2.4.1 Place of residence;
2.4.2 Phone number;
2.4.3 Bid amount.
2.5 Customers – When you become a customer by purchasing an item through our Website or App, we process the following personal data (in our capacity as seller, depending on the sales territories concerned) in addition to the above:
2.5.1 Shipping address;
2.5.2 Billing address;
2.5.3 Bank account information.
2.6 Service Providers – When you provide services to us, we collect:
2.6.1 Contact person's name, business email address, and/or phone number.
2.7 Job Applicants – When you apply for a position with us, we collect:
2.7.1 Name, address, and contact details;
2.7.2 Your most recent and desired salary;
2.7.3 Interview notes, if applicable;
2.7.4 Résumé, employment history, and qualifications;
2.7.5 Background check information, to the extent permitted by applicable law.
2.8 Visitors – When you visit our offices, we may collect:
2.8.1 Your name and contact details;
2.8.2 Your image captured by our security cameras.
2.9 Other Communications – For all other communications, we may collect:
2.9.1 Name, email address, and phone number;
2.9.2 Any other information you provide when you contact us.
3 SOURCE OF PERSONAL DATA
3.1 We collect and receive the personal data listed in section 2 directly from you. We do not use additional or public sources to collect your personal data unless expressly stated otherwise.
4 PURPOSES OF THE PROCESSING
4.1 Personal data as mentioned under 2 will be processed for the following purposes:
4.1.1 To provide our Website and App, measure how you use them, and improve them (see 2.2);
4.1.2 To offer and promote our products and services to you, or to promote the products and services of our group companies, to the extent you have consented to this data processing (see 2.3, 2.4, and 2.5);
4.1.3 To inform you about the status of your bids or about new items that may interest you based on your previous use of our Website or App (see 2.3, 2.4, and 2.5);
4.1.4 To receive services from you or collaborate with you (see 2.6);
4.1.5 To perform any other agreement between MatchWornShirt and you;
4.1.6 For internal administrative purposes;
4.1.7 To fulfill our obligations under statutory law, such as the tax retention obligation;
4.1.8 To assess and review your job application (see 2.7);
4.1.9 To protect our employees and our assets (see 2.8);
4.1.10 To handle any requests you may have submitted to us.
5 LEGAL BASES FOR PROCESSING
5.1 The legal bases for processing personal data as listed under 2 are:
5.1.1 The necessity of processing to perform an agreement to which you are a party or to take measures at your request before entering into an agreement;
5.1.2 To comply with any statutory provisions applicable to us;
5.1.3 The necessity of processing to serve one of our legitimate interests that outweighs your privacy interests, namely, measuring website usage and bids on our platform, protecting our personnel and assets, improving our products and services, and promoting our products and services to you;
5.1.4 Your express consent to the processing of your personal data, to the extent that no other lawful basis applies.
6 RETENTION PERIODS
6.1 Generally, your personal data will not be kept longer than necessary for the purpose for which it was collected, unless a legal obligation requires us to keep it for a longer period, such as the seven-year tax retention period.
7 AUTOMATED DECISION-MAKING AND PROFILING
7.1 We do not make decisions about you based solely on automated processing and do not engage in profiling.
8 RECIPIENTS OF PERSONAL DATA
8.1 To the extent necessary for any of the aforementioned purposes of processing, we share your personal data with third parties ("recipients"). The following categories of recipients may have access to your personal data:
8.1.1 Affiliated group companies, if necessary for compliance, internal reporting, audit, or security purposes, or for the performance of an agreement with data subjects;
8.1.2 Our auditor, legal advisors, and other professional service providers engaged by us for compliance reasons;
8.1.3 Government agencies, courts, supervisory authorities, law enforcement agencies, or intelligence agencies, if we have a legal obligation to provide them with personal data;
8.1.4 IT service providers we use for our systems or website, such as providers of data analytics and customer engagement services;
8.1.5 Service providers we use to send you emails about our products and services;
8.1.6 Third parties buying or interested in buying (a stake in) MatchWornShirt.
8.2 When transferring personal data to the categories of recipients listed above, we always strive to transfer as little personal data as possible.
8.3 The recipients who receive or have access to your data may be located outside the European Economic Area (EEA). When we transfer data for which we are responsible to countries outside the EEA (so-called "third countries"), we provide appropriate safeguards. More specifically, we impose contractual obligations on the recipients of personal data to protect your personal data using the Standard Contractual Clauses (SCCs) as approved by the European Commission. We will assess in advance (where necessary with the assistance of third-country recipients) on a case-by-case basis whether the legislation or practice of the third country compromises the effectiveness of the SCCs. In such cases, we will take additional measures to fill the protection gaps and bring them up to the level required by EU law. You may consult the SCCs we have concluded with recipients by sending an email to compliance@matchwornshirt.com.
9 YOUR RIGHT TO OBJECT
9.1 You have the right to object to the processing of your personal data based on your specific situation, but only to the extent that this processing is carried out on the basis of one of our legitimate interests. We will then cease processing your personal data unless our interest in processing it outweighs your interests or our interest relates to establishing, exercising, or enforcing a legal claim. Furthermore, you have the right to object to the processing of your personal data for direct marketing purposes, such as promoting our products and services.
9.2 You can object to the processing of your personal data by sending an email to compliance@matchwornshirt.com clearly describing your request. Please note that we need to verify your identity before we can respond to your request. How we do this depends on your specific situation.
10 OTHER RIGHTS REGARDING THE PROCESSING OF YOUR PERSONAL DATA
10.1 Right of access – You have the right to request access to the personal data we process about you, including information about the purposes, the categories of personal data concerned, the (categories of) recipients, the retention periods or the criteria used to determine them, the source of the personal data, and the appropriate safeguards if the data is transferred outside the EEA.
10.2 Right to rectification of data and restriction of processing – You have the right to have incorrect data we process about you corrected and to have incomplete data completed. Furthermore, at your request, you have the right to restrict data processing in the following cases:
10.2.1 If you dispute the accuracy of the data, you may ask us to restrict data processing while we verify its accuracy;
10.2.2 If the processing is unlawful and you ask us to restrict the use of the data instead of deleting it;
10.2.3 If we no longer need your personal data for the purposes of processing it, but you still need it to establish, exercise, or substantiate a legal claim;
10.2.4 If you have objected to the processing of your data and are awaiting our response on whether our legitimate interests outweigh your interests.
10.3 Right to delete data – In the following cases, you may have the right to ask us to delete your personal data:
10.3.1 If we no longer need the data for the purposes for which it was collected or obtained;
10.3.2 If you have withdrawn your consent, to the extent that your data is processed on the basis of consent, and we have no other legal basis for processing your data;
10.3.3 If you have objected to the processing of your data and we have no overriding interest, or if you have objected to the processing of your data for direct marketing purposes;
10.3.4 If we need to delete personal data to comply with a statutory obligation.
Please note that the above does not apply in all cases. We do not have to delete your personal data if, for example, we need it to establish, exercise, or substantiate a legal claim.
10.4 Right to data transfer – If we process your personal data based on your consent or to perform an agreement with you, and the processing is automated, you have the right to obtain your data from us or have us transfer it to a third party in a commonly used file format.
10.5 Right to withdraw consent – If your personal data is processed on the basis of consent, you have the right to withdraw your consent. Please note that withdrawing consent does not affect data processing that took place before you withdrew your consent.
You can exercise all of the aforementioned rights by sending an email to compliance@matchwornshirt.com clearly describing your request. Please note that we need to verify your identity before we can respond to your request. How we do this depends on your specific situation.
10.6 Right to file a complaint – If you disagree with how MatchWornShirt processes your personal data, you have the right to file a complaint with the competent Data Protection Authority.
11 THIRD PARTY WEBSITES
11.1 This Privacy Statement does not apply to third-party websites linked to our Website by hyperlinks. We cannot guarantee that these third parties will handle your personal data in a reliable or secure manner. We advise you to read the privacy statement of these websites before using them.
12 CHANGES IN THE PRIVACY STATEMENT
12.1 We may change this Privacy Statement from time to time. We encourage you to check this page regularly to ensure that you are aware of any changes to this Privacy Statement.