GDPR Data Protection Notice
Last updated: 27 July 2026
This notice is provided under Articles 13 and 14 of the EU General Data Protection Regulation (GDPR). The route name is retained for compatibility with earlier links.
1. Controller and contact
- Trading name
- BidArch Auctions
- Legal entity
- Pending operator verification — must be completed before consumer transactions are enabled
- Registered address
- Pending operator verification — must be completed before consumer transactions are enabled
- Trade register / company number
- Pending operator verification — must be completed before consumer transactions are enabled
- VAT number
- Pending operator verification — must be completed before consumer transactions are enabled
- info@bidarch.com
- Website
- https://www.bidarch.com
Privacy and rights requests: info@bidarch.com.
2. Data categories, purposes and legal bases
- Account and contact data: registration, authentication and support; contract steps and performance (Art. 6(1)(b)).
- Identity, KYC and seller data: trust, fraud prevention and legal compliance; legal obligation or legitimate interests (Art. 6(1)(c) and (f)).
- Bids, orders, invoices and delivery data: transaction performance, accounting and claims; Art. 6(1)(b), (c) and (f).
- Security, device and audit data: service security, abuse prevention and legal claims; legitimate interests (Art. 6(1)(f)).
- Optional analytics and advertising data: measurement and campaign attribution; consent where required (Art. 6(1)(a)).
- Communications: responding to requests and documenting service issues; Art. 6(1)(b), (c) or (f), depending on context.
Where consent is the basis, it may be withdrawn at any time without affecting processing that occurred before withdrawal. Providing transaction data is necessary to enter and perform a sale; without it, that transaction cannot be completed.
3. Sources
Data normally comes from you, your account activity, the relevant seller or auction house, payment and delivery providers, and security or identity-verification services. Where another source supplies personal data, you will be informed within the period required by Article 14 unless a lawful exception applies.
4. Recipients
Access may be given on a need-to-know basis to the contracting seller or auction house, hosting, email, payment, fraud-prevention, identity-verification and delivery providers, professional advisers, and competent authorities. BidArch does not sell personal data.
5. International transfers
Transfers outside the EEA use a lawful transfer mechanism, such as an adequacy decision or approved Standard Contractual Clauses, plus supplementary safeguards where the transfer assessment requires them. Details may be requested by email.
6. Retention
Data is kept only for the period needed for its purpose: active account data while the account is used; transaction, tax and accounting records for the period required by applicable law; security logs for a proportionate security period; unsuccessful verification files only as long as needed to review and defend the decision; and consent records while needed to demonstrate compliance. Legal holds may extend a period. Data is then deleted or irreversibly anonymised.
7. Your rights
Subject to the GDPR's conditions, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests or direct marketing. You may withdraw consent and may request human review where a decision with legal or similarly significant effects is based solely on automated processing.
Requests are answered without undue delay and normally within one month. Identity may be verified proportionately. You also have the right to complain to the data protection supervisory authority in the EU/EEA country of your habitual residence, workplace or the alleged infringement.
8. Automated decisions
Automated signals may flag fraud or security risk, but BidArch does not intend to make a solely automated decision producing legal or similarly significant effects without the safeguards required by Article 22.
9. Changes
Material changes will be identified on this page and communicated where required.