Listed Privacy Policy
1.General
When it comes to your personal data, safety and transparency take top priority here at Listed. To help you understand what information we collect about you, how we use it and what rights you have, we’ve prepared this detailed Privacy Policy.
This Privacy Policy applies to the online platform Listed (“Website”) and to the associated app (“App”). The Website and App are jointly referred to as the (“Platform”). The Platform is operated by Listed Limited in the United Kingdom. The operator is further referred to as “We”, “Us” or “Listed”. Additional details about how to get in contact with us can be found at the end of this Privacy Policy under No. 7. We take your privacy extremely seriously. All personal data will be collected, stored and used by us in accordance with the European Union General Data Protection Regulation or (“GDPR”) and/or other applicable statutory regulations.
The services offered by Listed via the Website and/or App can function only if we collect, store, transfer, delete and/or otherwise use (“collect and use”) specific data relating to you (“personal data” or “data”). Personal data means all information relating to an identified or identifiable natural person such as your name, date of birth, address, or email address. This Privacy Policy describes which of your data we collect and for what purposes we collect and use it when you use the services offered by us on the Platform. This Privacy Policy also contains important information on the protection of your data, especially the statutory rights you have in connection with it.
Specific services on our Platform are offered by third-party suppliers. When you use these services, the data protection regulations of the third-party suppliers will then apply in addition to this data protection statement. Prior to your use of such services, the third-party suppliers may require you to provide permission under data protection law.
Under applicable data protection laws, Listed is obligated to inform you about data processing and Listed fulfils this obligation within this Privacy Policy. This Privacy Policy and any parts of it are not meant as contractual clauses and do not become part of the General Terms and Conditions (“GTC”) as a contract that is concluded with registered users. Under applicable data protection laws, Listed can process data that is necessary for the performance of a contract with you or necessary for taking steps at the request of you prior to entering into a contract (Art. 6 (1) (b) GDPR). References to the GTC should at all times be understood as information on data processing (Art. 13 and 14 GDPR) and never as clauses that become part of the GTC. By using the Platform and our services, you enter into a legally binding contract between you and Listed conditions of which are described in the GTC.
2. Why and how do we collect and use your personal data?
2.1. To enable you to use the Platform and allow us to provide our services and perform our GTC. We collect and use your personal data to allow you to use the Listed Platform, to provide our services and to perform a contract (GTC) with you and especially to undertake commercial transactions via the Platform, to use the electronic payment system or to leave reviews and communicate with other members. To use these services, you need a Listed account. For this purpose, you must register as a member on the Website or App. Most of your personal data is required to perform a contract (GTC) with you.
In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you. Part of your data is required to fulfil our legal obligations when you are a member of our Platform. In the event you do not provide us with this personal data, we will not be able to comply with legal requirements and provide our services.
This data is also used for the improvement of the Platform in order to make it a better experience for our members (see 2.2.12).
We collect and use your personal data for these purposes until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.1.1. To enable registration on Listed
When you register as a member on Listed, you must provide the following data in order to carry out the registration procedure and access your Listed account:
Legal basis for the collection and use of data is the performance of a contract (GTC) to which you are party or in order to take steps at your request prior to entering into a contract (GTC) (Art. 6 (1) (b) of the GDPR).
We also determine your location (country) based on your IP address at the time of registration to show on your profile. You can at any time choose to change your location (country, city or region) and make your city or region not visible to other members under "Settings" in your Listed account.
We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.1.2. To authenticate you via Google, Facebook or Apple ID
If you register using your Google Ireland Ltd. (Ireland), Google LLC (USA) (“Google”) or Meta Platforms Ireland Ltd. (Ireland), Meta Platforms, Inc. (USA) (“Facebook”), or Apple Inc. (USA) (“Apple”) account or later on decide to connect your Google, Facebook or Apple account to your Listed account, you will be transferred from our Platform to the website of Google, Facebook or Apple and asked to enter the log-in details for your Google, Facebook or Apple ID account.
If you enter your Google log-in details, Listed will receive from Google the following data from your Google account (you may choose not to provide some data):
If you enter your Facebook log-in details, Listed will receive from Facebook the following data from your Facebook account (you may choose not to provide your email address):
If you enter your Apple ID log-in details, Listed will receive from Apple the following data from your Apple ID account (you may choose not to provide your email address by using Apple’s Private Email Relay Service):
The data we obtain from Google, Facebook or Apple will be used to set up your Listed account. This means that we will use the member name of your Google, Facebook or Apple ID account as the member name for your Listed account so that it will be visible to other visitors to the Website and users of the App. Other data obtained from Google, Facebook or Apple will not be visible to anyone on the Platform.
You can at any time undo the link with your Google, Facebook or Apple ID account. This can be done under "Settings" in your Listed account. If, however, when you initially registered, you did so without linking to your Google, Facebook or Apple ID account, you can create this link later. Collection and use of data is based on your consent (Art. 6 (1) (a) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.1.3. To enable you to set up your profile information
If you decide to add profile details to the account you create on the Platform, we collect and use the following data when you choose to provide it:
Your profile photo, information on whether you have enabled the Holiday Mode and the information you provide in the "About You" field are visible to other visitors of the Platform, but the remainder of the data entered by you is not visible. Legal basis for such collection and use is your consent (Art. 6 (1) (a) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account. Photo metadata containing personal data is deleted immediately.
2.1.4. To show other members relevant information regarding your activity on the Platform
When you are a registered member on the Platform, we collect, use and make public on the Platform the following information for the purpose of providing other members with the relevant information:
Legal basis for such collection and use is our legitimate interest to ensure that our members would access important information about each other (Art. 6 (1) (f) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.1.5. To enable you to list your items
If you list items on the Platform, we will collect and use the following data for the purpose of creating, publishing and deleting listings on the Platform (list of required information differs depending on the chosen item category):
Legal basis for such collection and use is your consent (Art. 6 (1) (a) of the GDPR).
Personal data collected and used for this purpose are kept for 18 months and 7 days of inactivity. Photos are kept for 3 months after the item is deleted. Photo metadata containing personal data is deleted immediately.
2.1.6. To enable notifications on the Platform for you
When you are a registered member on the Platform, we will provide you with notifications on the Platform regarding your new followers, your favourite items, your activity on the forum and other important messages. Legal basis for the collection and use of data is the performance of a contract (GTC) to which you are party (Art. 6 (1) (b) of the GDPR) We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.1.7. To enable you to communicate with other members
If you communicate with other members on the Platform, we collect and use the following data:
Legal basis for the collection and use of data is the performance of a contract (GTC) to which you are party (Art. 6 (1) (b) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
If you decide to remove a message from a conversation, it will be instantly hidden for you and the recipient, and permanently deleted after 3 months from the moment you remove it. Legal basis for storing the removed message data is our legitimate interest to ensure the safety of our Platform and our members (Art. 6 (1) (f) of the GDPR).
2.1.8. To enable you to leave reviews to other members on the Platform
If you leave reviews to other members, Listed collects and uses the following data for the purpose of making reviews publicly available on the Platform:
Legal basis for such collection and use is your consent (Art. 6 (1) (a) of the GDPR).
You can, at any time, edit or delete your reviews left to other members. We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account. The reviews are anonymized afterwards.
2.1.9. To receive reviews from other members
When you receive reviews from other members, we will collect and use the following data for the purpose of making reviews publicly available on the Platform:
Legal basis for such collection and use is the legitimate interest of our members and Listed to build trust among Listed members (Art. 6 (1) (f) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.1.10. To enable you to post in the forum and discuss with our community
The Listed forum is where our community comes to talk and help each other by sharing experiences and tips. You can create new forum topics or post comments in our forum. We collect and use the following data which you voluntarily submit on the Platform:
If you select to post anonymously, your member name/picture won't be visible to other members. However, your identity will still be visible to the Listed team.
Legal basis for such collection and use is your consent (Art. 6 (1) (a) of the GDPR).
You can delete and edit your own forum topics and posts at any time. Unless you delete your forum topics or posts earlier, we collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.1.11. To send you important communication regarding the Platform
If you register on the Platform, we will send you emails and messages via the Platform’s messaging system for the purpose of providing important notifications such as GTC, Privacy Policy changes.
Legal basis for the collection and use of data is the performance of a contract (compliance with our GTC) to which you are a party (Art. 6 (1) (b) of the GDPR) and compliance with the legal obligations to which Listed is subject (Art. 6 (1) (c) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.1.12. To send you offers via the Platform’s messaging system
If you register on the Platform, we will send you offers related to Listed services via the Platform’s messaging system (“Offers”). Legal basis for the collection and use of data is our legitimate interest to provide offers to our members (Art. 6 (1) (f) of the GDPR, Art. 13 (2) of Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector. We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.1.13. To provide you with customer support service
If you send us a query, request or complaint, we will collect and use the following data for the purpose of providing you with customer support services you request on the Platform:
The type of information we collect can vary depending on your inquiry. Legal basis for the collection and use of data is the performance of a contract (GTC) to which you are a party (Art. 6 (1) (b) of the GDPR). In order to respond to your inquiries, Listed might provide your data to our customer support service providers. If we do this your Personal data collected and used for this purpose are kept for 2 years after the last update related to your inquiry. If your account is deleted, personal data collected and used for this purpose will be deleted along with your account.
2.1.14. To resolve any purchase-related disputes between members
If you purchase and/or sell and/or swap items on the platform and get involved in a dispute with another member, we will collect and use any of your personal data held by Listed necessary to solve the dispute. We base such collection and use on a legitimate interest to settle disputes between our members and defend the rights and interests of Listed (Art. 6 (1) (f) of the GDPR) and, where relevant, compliance with the legal obligations to which Listed is subject (Art. 6 (1) (c) of the GDPR). Personal data collected and used for this purpose are kept for 1 year after a dispute is concluded.
2.1.15. To retain temporarily your deactivated account
If you decide to deactivate your account, we will take all reasonable efforts to make sure it is no longer viewable on the Platform and restrict the use of your personal data. For up to 3 months it is still possible to restore your account if it was accidentally or wrongfully deactivated or in case you change your mind and wish to return to the Platform and take action in case someone else would gain access to your account and delete it without your knowledge.
The legal basis for such storage of your data is the legitimate interest of Listed and our members to restore your account when necessary (Art. 6 (1) (f) of the GDPR) and, where applicable, to comply with the legal obligations to which Listed is subject (Art. 6 (1) (c) of the GDPR). Personal data are kept for this purpose for 3 months from the date of deactivation of your Listed account. After 3 months we delete your account permanently from our Platform.
2.2. To improve your experience when using the Platform
We collect and use your personal data in order to improve your experience when using the Platform by enabling you to personalise your feed and search results, providing you relevant suggestions and keeping your previous searches, sending you notifications and otherwise making the use of Platform more pleasant. A specific applicable legal basis for the collection and use of your data is described in each section below.
2.2.1. To enable your preferences regarding your feed and search results
If you choose to personalise the items presented to you on the Platform (on item feed, catalog and search results), we will collect and use the following data for the purpose of presenting you a feed personalised according to your preferences:
Legal basis for such collection and use is your consent (Art. 6 (1) (a) of the GDPR).
We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.2.2. To personalise your feed and search results
We also personalise the item feed by evaluating your preferences according to the following:
Legal basis for such collection and use is the legitimate interest of Listed and its members (Art. 6 (1) (f) of the GDPR) to make the Platform more convenient for our members and, due to personalisation, allow you to see offers from other members that might interest you the most. We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.2.3. To prioritise good value items by reputable sellers
In order to determine whether you as a seller offer good value items as a reputable seller we will collect and use the following data of you when you sell your items on the Platform:
We use results to prioritise good value items by reputable sellers when showing items to new members, increase the visibility of items uploaded by members that have chosen the same language as you and/or live in the same country or region, items listed by new members, items that have 3 favourites or more, children’s items that have one or more favourites, items that are boosted, show relevant items on the Platform.
Legal basis for such collection and use is our legitimate interest to prioritise good value items by reputable sellers in order to facilitate sales and member satisfaction on the Platform (Art. 6 (1) (f) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.2.4. To suggest you relevant items
If you choose to create item listings on the Platform, we will collect and use data that you provide in the listing (see 2.1.5 above) by analysing it in order to either offer members that visit your items other relevant items or offer members your items that may be relevant to them.
Legal basis for such collection and use is our legitimate interest to improve the Platform and ensure that our members receive relevant suggestions and search results (Art. 6 (1) (f) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.2.5. To improve search results on the Platform
We collect and use data provided in the listings (see 2.1.5 above) about items with no information related to sellers in order to improve search results by evaluating how relevant are certain items to a specific search keyword and to automatically suggest relevant categories for new listings. For this, we only use the item listing with no link to a particular seller.
Legal basis for such collection and use is our legitimate interest to improve the Platform and ensure that our members receive relevant suggestions and search results (Art. 6 (1) (f) of the GDPR). Listed uses service providers who provide data analysis services to Listed. We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.2.6. To save your recent searches
In order to help you find previously searched items on the Platform, we save your search keywords. We collect and use the following data for the purpose of providing information about newly listed items on the Platform based on the keyword you were looking for previously:
Legal basis for such collection and use is the legitimate interest of our members and Listed to improve search results on the Platform (Art. 6 (1) (f) of the GDPR). You can delete your search history at any time. Unless you delete your search history earlier, we collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.2.7. To help you to get more attention to your listings
In case you decide to make orders for extra services, i.e “boosting your item” in order to get more visibility for your items on the Platform, we collect and use the following data:
Legal basis for the collection and use of data is the performance of a contract (your order for extra features under GTC) to which you are a party (Art. 6 (1) (b) of the GDPR). Personal data is required to perform a contract (GTC) with you. In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you. We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.2.8. To suggest a price when an item listing is created
If you choose to create an item listing on the Platform, our algorithms will analyse its price in addition to item category, item brand and item condition. We will then use that information to show you pictures and prices of similar items sold in the last three months in order to help you determine the selling price for your item.
If your chosen selling price is bigger than the price range of similar items sold on the Platform in the last three months, Listed will also give you a tip regarding the recommended price range. Legal basis for such collection and use is our legitimate interest to help our members to choose the right price for their items (Art. 6 (1) (f) of the GDPR).
To achieve the aforementioned functionality, we collect and use pictures and prices of items sold in the last 3 months. When you are listing your items, we collect and use the information used to analyse your items for the duration of the item listing process. When you sell items, we collect and use the data mentioned above for 3 months after the item has been sold.
2.2.9. To enable notifications about your favourite items
If you favourite an item listed by another member on the Platform, Listed will inform you when your favourite item price is reduced or when the item is sold. For this reason, we will collect and use the following data:
Legal basis for such collection and use is the legitimate interest of our members and Listed to facilitate sales on the Platform (Art. 6 (1) (f) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.2.10. To notify sellers when you favourite their items
If you favourite an item on the Platform, Listed will inform the seller that you have favoured their item. Legal basis for such collection and use is the legitimate interest of our members and Listed to facilitate sales on the Platform (Art. 6 (1) (f) of the GDPR).
You can disable the aforementioned notifications by logging in on the Platform, visiting Privacy Settings and changing relevant settings. We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.2.11. To allow you to follow other members
If your followed member listed a new item on the Platform, we will notify you about it. Legal basis for such collection and use is your consent (Art. 6 (1) (a) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.2.12. To improve our Platform
Listed is committed to the best performance of the Platform. When the Platform is being used, Listed gathers information about actions performed on the Platform (button clicks, visiting time, notifications read, other information depending on a particular business case) and other data described under 2.1, 2.2, 2.5, 2.6, and 4 of this Privacy Policy in order to help us make decisions on how to improve the Platform and make it a better experience for our members.
Legal basis for such collection and use is our legitimate interest to maintain performance and improve the Platform (Art. 6 (1) (f) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.2.13. To conduct surveys
We always look for ways to improve your experience when using Listed. That is why we might invite you to participate in a survey and use your feedback. For this reason, we collect and use the following data:
Legal basis for inviting you to participate in the survey is our legitimate interest to receive feedback from our members and use it to improve the Platform (Art. 6 (1) (f) of the GDPR, Art. 13 (2) of Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector.
We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account. If you wish to participate in the survey, the information above will be collected based on your consent (Art. 6 (1) (a) of the GDPR). For our surveys we might use third party service provider Widgix Limited (United Kingdom, which is considered by the European Commission as safe in terms of data protection). We will anonymise your responses after 3 months - this means that the responses will no longer be associated with you.
2.2.14. To conduct interviews
In order to understand our users' needs and improve your experience on the Platform, we conduct on-site or online interviews with you. For this reason, we collect and use the following data:
Legal basis for inviting you to participate in the on-site interview is our legitimate interest to receive feedback from our members and use it to improve the Platform (Art. 6 (1) (f) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
If you wish to participate in the interview, the information above will be collected based on your consent (Art. 6 (1) (a) of the GDPR). We will anonymise your responses after 3 months - this means that the responses will no longer be associated with you.
2.2.15. To enable you to share your user journey
We constantly improve our Platform and look for ways to improve your experience when using Listed. In the case where you consent, we enable you to share your user journey through our Platform. We will collect and use the following data:
Legal basis for inviting you to participate in the sharing of your user journey is our legitimate interest to receive feedback from our members and use it to improve the Platform (Art. 6 (1) (f) of the GDPR. We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account. If you wish to participate in the survey, the information above will be collected based on your consent (Art. 6 (1) (a) of the GDPR). We will anonymise your responses after 3 months - this means that the responses will no longer be associated with you.
2.2.16. To enable automatic content translation
To make the content available in any language preferred by our members, we have integrated an automatic translation solution into the Platform. We collect and use the following data if you or another member wishes to have it translated:
For automatic translation, Listed uses service provider Google LLC (USA) which is established outside the European Economic Area. In this case the personal data is protected by the service provider entering into the EU standard contractual clauses for the transfer of data as approved by the European Commission.
Legal basis for such collection and use of the personal data is the legitimate interest of Listed and its members (Art. 6 (1) (f) of the GDPR) to make the Platform more convenient and easier to understand for our members. We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.3. To ensure the security of your account and the Platform
Listed strives to ensure that the accounts of our members and the Platform itself would be secure and protected from cyber attacks, unauthorised access and other related risks.
2.3.1. To track visits to the Platform for security purposes
When you connect to the Listed Website or App, we collect and use the following data (logfiles), even if you are not logged in to the Website as a member:
In the event of access via mobile devices, the following log files are also captured as part of your use of the Listed App:
This data is used for security purposes, especially the prevention of cyberattacks such as data scraps and denial of service attacks and for preventing impermissible multiple applications. Legal basis for such collection and use is our legitimate interest to protect the Platform and ensure its security and the legitimate interest of our members to ensure the safety of their accounts on the Platform (Art. 6 (1) (f) of the GDPR). Personal data collected and used for this purpose are kept for 3 months.
2.3.2. To help you avoid using a compromised password
If you decide to register using a password or later on decide to change your password, we will check it against a database of passwords compromised in previous data breaches that happened on other platforms and services. To enable this functionality, we take the password, hash it and then use the first 5 characters of the hash to Have I Been Pwned (https://haveibeenpwned.com/) to search in the compromised password database.
By performing this check, we can protect your account by confirming if you are using a password that is not known to be compromised. Legal basis for such collection and use is our legitimate interest to protect the Platform and ensure its security and the legitimate interest of our members to ensure the safety of their accounts on the Platform (Art. 6 (1) (f) of the GDPR). We collect and use personal data for this purpose only for the duration necessary to perform the password check.
2.3.3. To let you reset your password
In case you forgot your password or decide to change it for other reasons and do not have access to your email, we may ask you to answer a few security questions to verify your identity. For this purpose, we will collect and use the following data:
Legal basis for such collection and use of your personal data is our legitimate interest to protect the Platform and ensure its security and the legitimate interest of our members to ensure the safety of their accounts on the Platform (Art. 6 (1) (f) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.3.4. To verify your account in case of suspicious actions related to your account
If we detect actions on your account that Listed considers suspicious, we will request you to perform a basic verification – confirm your email, Facebook or Google accounts. For the purpose of performing a basic verification, we will collect and use the following data:
Legal basis for such collection and use is our legitimate interest to protect the Platform and ensure its security and the legitimate interest of our members to ensure the safety of their accounts on the Platform (Art. 6 (1) (f) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.3.5. To carry out phone number verification and 2-step verification
When you decide to apply an additional layer of protection to your account and activate phone verification, we will use your phone number in order to enable this functionality. Legal basis for such collection and use is our legitimate interest to offer our users additional measures to protect their account (Art. 6 (1) (f) of the GDPR). You may also be requested to verify your phone in case of suspicious activities regarding your account. In that case, verification is mandatory and personal data collection and use is based on the performance of a contract (GTC) to which you are a party (Art. 6 (1) (b) of the GDPR).
When you verify your phone number, Listed will collect and use your phone number for 2-step verification purposes. Personal data for mandatory verification are required to perform a contract (GTC) with you. In case you do not provide us with this personal data, we will not be able to conclude and execute a contract (GTC) with you.
In order to carry out phone number verification and 2-step verification, we might use third party service provider Vonage Holdings Corp. (USA) that enables us to send you verification messages or make verification calls to dictate verification code when you do not verify your phone number in 5 minutes. While this results in your data being shared outside the European Economic Area, the data is protected by the service provider entering into the EU Standard Contractual Clauses for the transfer of data as approved by the European Commission. We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.3.6. To carry out payment source security check
As part of the security process, we request our members to provide verification of their payment source. In order to perform such security checks, Listed collects and uses the following personal data:
Legal basis for such collection and use is our legitimate interest to protect the platform and ensure its security and the legitimate interest of our members to ensure the safety of their accounts on the Platform (Art. 6 (1) (f) of the GDPR). Personal data collected and used for this purpose are kept for 4 days after the security check is passed.
2.3.7. To carry out PayPal account security check
As part of the security process, we request our members to verify the ownership of their PayPal accounts when there was no actual charge. As part of this process, Listed collects and uses the following data:
As part of the security process, we also request our members that use PayPal to verify the ownership of their PayPal accounts. As part of this process, Listed collects and uses the following data:
Legal basis for such collection and use is our legitimate interest to protect the Platform and ensure its security and the legitimate interest of our members to ensure the safety of their accounts on the Platform (Art. 6 (1) (f) of the GDPR). Personal data collected and used for this purpose are kept for 4 days after the security check is passed.
2.3.8. To ensure that listings comply with our Authenticity Policy
For some listings, we collect and use the following data in order to ensure that such listings comply with our Authenticity Policy.
2.3.9. To carry out account ownership check
As part of the security process, we may request our members to verify the ownership of their Listed account. To confirm your identity, we will need one of the following proofs:
Legal basis for such collection and use of your personal data is our legitimate interest to protect the Platform and ensure its security and the legitimate interest of our members to ensure the safety of their accounts on the Platform (Art. 6 (1) (f) of the GDPR). Personal data collected and used for this purpose are kept for 3 days from the receipt of the proof.
2.3.10. To enable you to report inappropriate behaviour or content
If you choose to report inappropriate message, forum activity, member, item, spam or spoof mail, we will collect and use the following data for the purpose of ensuring the security of the Platform and its members:
Legal basis for such collection and use of your personal data is our legitimate interest to protect the Platform and ensure its security and the legitimate interest of our members to ensure the safety of their accounts on the Platform (Art. 6 (1) (f) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.3.11. To report suicidal posts
In exceptional cases, where we notice suicidal posts on our platform, we may report them to the police. In such cases we will collect and use and disclose the following data for the purpose of reporting suicidal posts:
Legal basis for such collection and use is the protection of your vital interests (Art. 6 (1)(d) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.4. To supervise compliance with and enforce GTC
Listed actively supervises compliance with and enforce GTC for the purpose of ensuring the security of your account and the Platform.
2.4.1. To calculate trust score
In order to ensure the security of the Platform and its members, Listed gives each member a "trust you score" calculated using an algorithm and maintains a database of member’s personal data suggesting unlawful activities. The "trust you score" indicates the likelihood of misuse of the Platform.
Our algorithm takes into account members’ comments on a forum, messages to other members, items listed on the platform, transactions, reports on the member by other members, the member's profile and contact information, the member's violations of our GTC, IP addresses, and browser fingerprints, other content the member provides us with.
When evaluation of the member reaches certain thresholds, Listed can trigger a verification procedure (the member is asked to verify his/her telephone number, email, Facebook or Google accounts) or restrict the usage of the Platform. Legal basis for such collection and use is our legitimate interest to protect the Platform and its users and ensure its security and the legitimate interest of our members to ensure their safety on the Platform (Art. 6 (1) (f) of the GDPR). We collect and use your personal data for this purpose until the deactivation of your Listed account or for 5 years of inactivity on your account.
2.4.2. To enforce spam filtering
In order to protect our members and the Platform, we use spam filtering tools. The