Legal

Privacy Policy

Your privacy matters. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Equipment Balkans platform.

Last updated: July 2025

1. Information We Collect

We collect information you provide directly when you create an account, list equipment, participate in auctions, or contact other users: - Account information: Name, email address, phone number, company details, tax identification number. - Transaction data: Bids, purchases, payments, shipping addresses. - Communications: Messages sent through the Platform, support requests, feedback. - Profile information: Dealer verification documents, company registration details. We also automatically collect certain information when you use the Platform: IP address, browser type, device information, pages visited, and usage patterns.

2. How We Use Your Information

We use collected information to: - Provide, maintain, and improve the Platform. - Process transactions, payments, and auction activities. - Verify user identity and conduct dealer verification checks. - Communicate with you about your account, transactions, and Platform updates. - Detect and prevent fraud, unauthorized transactions, and security incidents. - Personalize your experience with relevant listings and recommendations. - Comply with legal obligations, including anti-money laundering (AML) and know-your-customer (KYC) requirements. We do not sell your personal information to third parties.

3. Information Sharing

We may share your information in the following circumstances: - With other Platform users: Your public profile, listing details, and transaction history necessary to complete transactions. - Service providers: Payment processors, logistics partners, inspection services, and cloud infrastructure providers who assist in Platform operations. - Legal requirements: When required by law, court order, or government authority, or to protect the rights, safety, or property of Equipment Balkans and our users. - Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of due diligence.

4. Data Security

We implement industry-standard technical and organizational measures to protect your personal information: - Encryption: All data in transit is encrypted using TLS 1.3. Sensitive data at rest is encrypted using AES-256. - Access controls: Strict role-based access limits internal access to personal data. - Audits: Regular security assessments and penetration testing. - Compliance: We comply with GDPR (EU General Data Protection Regulation) for EU-based users. Despite our best efforts, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your data.

5. Cookies and Tracking

We use cookies and similar technologies to: - Keep you signed in across sessions. - Remember your preferences and language settings. - Analyze Platform traffic and usage patterns to improve our service. - Display relevant advertisements (where applicable). You can control cookie settings through your browser preferences. Disabling essential cookies may affect Platform functionality.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights under GDPR: - Right of access: Request a copy of your personal data we hold. - Right to rectification: Correct inaccurate or incomplete data. - Right to erasure: Request deletion of your personal data ("right to be forgotten"). - Right to restrict processing: Limit how we process your data. - Right to data portability: Receive your data in a structured, machine-readable format. - Right to object: Object to processing based on legitimate interests or direct marketing. To exercise these rights, contact privacy@equipmentbalkans.com.

7. Data Retention

We retain your personal information only for as long as necessary: - Active accounts: Data is retained while your account is active. - Transactions: Transaction records are retained for 7 years for legal and accounting compliance. - Deleted accounts: Basic data may be anonymized and retained for statistical purposes after 24 months. When data is no longer needed, it is securely deleted or anonymized in accordance with applicable retention policies.

8. Children's Privacy

The Platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us immediately at privacy@equipmentbalkans.com.


Privacy questions? Contact our DPO at privacy@equipmentbalkans.com