Draft, not yet legally reviewed
This draft explains what personal data Tagvara handles today, why, and what you can do about it.
1. Who is responsible
The data controller is To be supplied by the operator: legal name of the operator, To be supplied by the operator: registered address. Contact for privacy questions: To be supplied by the operator: privacy contact email. To be supplied by the operator: Data protection officer, if one is appointed.
2. What we collect, and why
Tagvara only collects what the service needs to work:
- Email address: to send sign-in codes and identify your account. It's never shown to other members.
- Profile: your username, and optionally a display name, city and description. These are public once you have a published listing; the person you're messaging sees your username and display name.
- Listings and photos: what you publish is public. We remove location and other hidden data from photos.
- Messages: stored so the two people in a conversation can read them. Only they can. If one of them reports a message, moderators see that message (not the rest of the conversation) to decide on the report; a message hidden by moderation stays stored but is no longer shown. To be supplied by the operator: Legal basis and limits for moderators reading reported messages, to be confirmed.
- Favourites: private to you.
- Orders: who requested what, the agreed price, status changes, and the carrier and tracking reference the seller enters.
- Reports: what you report (a listing, a message or a member) and why. The member concerned isn't told who reported, though for a message they may guess, since only the two of you see the conversation. Moderators see reports, the reported member's public profile and earlier decisions about them, and record their decisions with a reason.
- Notices and appeals: Tagvara stores the notices it shows you (decisions about your listings, messages or account, outcomes of your reports) and any appeal you send, with its outcome. The moderator who reviews an appeal sees your statement.
- Sign-in sessions: kept in cookies needed to keep you signed in. Tagvara uses no advertising or analytics cookies.
3. Legal bases
To be supplied by the operator: The legal basis for each purpose above (for example contract, legitimate interest, legal obligation) to be determined and stated by the operator with professional advice.
4. Who else handles the data
To be supplied by the operator: Hosting, database and email-delivery providers, where they process data, and safeguards for any transfer outside the EU/EEA, to be listed once chosen. Tagvara doesn't sell personal data or share it with advertisers.
5. How long we keep it
To be supplied by the operator: Retention periods for each kind of data to be decided by the operator. Until then, this is what happens today:
- While your account exists, your data is kept so the service works.
- When you delete your account, your favourites are deleted, your unsold listings are removed, pending purchase requests are cancelled or declined, and your profile loses your name, city, description and phone number. Your email address is removed and the account can't be signed in to again.
- Kept after deletion, without your name: conversations and messages (the other person keeps them), past orders, reports, and moderation records, because other members and the safety of the marketplace depend on them. Photos of removed listings are no longer shown but are not yet erased from storage.
6. Your rights
You can download your data and delete your account yourself in your account settings, and correct your profile at any time. You may also have rights to restriction, objection and portability, and to complain to the data protection authority; in Lithuania that is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija).
For any other request, contact To be supplied by the operator: privacy contact email. To be supplied by the operator: How requests are verified and answered, and within what time, to be decided.