Privacy Policy

This Privacy Policy explains how we handle personal data when you use Rūbas, our marketplace for pre-owned designer fashion sold through live auctions. It covers what we collect, why, who we share it with, how long we keep it, and the rights you can exercise.

Who we are

The data controller responsible for your personal data is the legal entity behind Rūbas. These details are placeholders and will be finalised before publication:

• Registered name: TODO: registered company name
• Company code: TODO: company code
• VAT ID: TODO: VAT ID
• Registered address: TODO: registered address
• Email: info@rūbas.lt

Data we collect

We collect personal data that you provide to us and data generated as you use the service, including:

• Account data — your name, email address, and login credentials.
• Transaction data — bids, purchases, listings, and the items you watch.
• Communications — messages you send us through support or contact forms.
• Technical data — device, browser, and usage information collected automatically.

Why we use it and our legal basis

We process your personal data only where we have a lawful basis under the GDPR:

• To perform our contract with you — running your account, placing bids, and completing sales.
• For our legitimate interests — securing the platform, preventing fraud, and improving the service.
• With your consent — for optional marketing and non-essential cookies, which you can withdraw at any time.
• To comply with legal obligations — tax, accounting, and consumer-protection requirements.

Who we share it with

We do not sell your personal data. We share it only as needed to operate the service:

• Service providers who process data on our behalf, such as hosting and analytics partners.
• Payment providers, to process transactions securely.
• Other users, where limited information is necessary to complete an auction (for example, between buyer and seller).
• Public authorities, where we are legally required to disclose data.

How long we keep it

We keep personal data only for as long as necessary for the purposes described above, or for as long as the law requires us to retain it — for example, accounting records are kept for the statutory period. When data is no longer needed, we delete or anonymise it.

Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data.
• Request that we restrict processing of your data.
• Receive your data in a portable format.
• Object to processing based on our legitimate interests.
• Lodge a complaint with your local data protection authority.

Contact us

For any questions about this policy or to exercise your rights, contact us at info@rūbas.lt.