Skip to main content

The site is running in testing mode — online payments aren't enabled yet and all platform fees are currently €0.

Rūbas

Privacy Policy

Last updated 2026-09-12

This is placeholder copy pending legal review. The wording below is illustrative and not yet a binding privacy notice — the named data controller and specifics will be confirmed before this page goes live.

This Privacy Policy explains how we handle personal data when you use Rūbas, our marketplace for pre-owned designer fashion sold through live auctions. It covers what we collect, why, who we share it with, how long we keep it, and the rights you can exercise.

Who we are

The Rūbas marketplace is operated by MB Borealis ("we"). Data controller details:

  • Registered name: MB Borealis
  • Company code: 308097538
  • Registered address: Ąžuolų g. 9, Ramučių k., LT-54464 Kauno r.
  • Email: info@rūbas.lt
  • Phone: +370 699 89770 (WhatsApp)

Data we collect

We collect personal data that you provide to us and data generated as you use the service, including:

  • Account data — your name, email address, and login credentials.
  • Transaction data — bids, purchases, listings, and the items you watch.
  • Communications — messages you send us through support or contact forms.
  • Technical data — server logs (IP address, time, browser type) for security and troubleshooting. Analytics data (Google Analytics 4, Microsoft Clarity) is collected only with your consent — see the Cookie Policy for details.

Why we use it and our legal basis

We process your personal data only where we have a lawful basis under the GDPR:

  • To perform our contract with you — running your account, placing bids, and completing sales.
  • For our legitimate interests — securing the platform, preventing fraud, and improving the service.
  • With your consent (GDPR Art. 6(1)(a)) — for site analytics (Google Analytics 4, Microsoft Clarity) and the newsletter. You can withdraw consent at any time: analytics via "Cookie settings" in the footer, the newsletter via the link in each email.
  • To comply with legal obligations — tax, accounting, and consumer-protection requirements.

Who we share it with

We do not sell your personal data. We share it only as needed to operate the service:

  • Data processors: Hostinger (site hosting on a server in Vilnius, EU, and sending system emails); Google Ireland Ltd (Google Analytics 4 — only with your consent); Microsoft Ireland Operations Ltd (Microsoft Clarity — only with your consent). Some data processed by Google and Microsoft may be transferred to the USA under the EU–US Data Privacy Framework (DPF).
  • Payment providers, to process transactions securely.
  • Other users, where limited information is necessary to complete an auction (for example, between buyer and seller).
  • Public authorities, where we are legally required to disclose data.

How long we keep it

We keep account data while your account is active; when it's deleted, data is removed or anonymised, except where the law requires retention (e.g. accounting records). Analytics: Clarity session recordings are kept about 30 days; aggregated Google Analytics data up to 14 months.

Your rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your data.
  • Request that we restrict processing of your data.
  • Receive your data in a portable format.
  • Object to processing based on our legitimate interests.
  • Lodge a complaint with your local data protection authority.

Contact us

For any questions about this policy or to exercise your rights, contact us at info@rūbas.lt.