Privacy Policy
HUSEIN EDV Dienstleitungs GmbH (“sdev”,"Company", "us", "our" or "we") is committed to protecting your privacy. "You/Your/User(s)" means you as a user of our website and service, including any information, tools, features or functionality available through the website and service. Our Privacy Policy, which applies to all users of our Service, is designed to explain what information we collect and how we use it to provide our Service and provide users with a better experience ("Privacy Policy"). Capitalized terms not defined in this Privacy Policy shall have the meanings set forth in our Terms of Use. This Privacy Policy is part of and incorporated by reference into the Terms of Use.
We obtain your explicit consent through a clear and affirmative action when you use our Service. You may manage your consent preferences at any time through our cookie consent tool. We maintain records of your consent and any changes to your consent preferences.
1. Types of information we collect
We collect both Personal Data and Anonymous Information about our users, adhering to the principles of data minimization and purpose limitation. "Personal Data" is information that can be used to contact or identify you or individuals about whom you submit information as part of your activities on our Service. Anonymous Information" or "de-identified information" is information that cannot reasonably be used to contact or identify you and is not linked to information that can be used to do so. It includes passively collected information about your activities on the Service, such as usage data, to the extent that such information is not linked to your Personal Data.
2. Verification of professional sellers
To ensure a secure and transparent marketplace, we verify the identity of users who want to sell as professional Sellers. To complete this verification, we collect the following information: first name, last name, email address, store name, and, if applicable, a VAT number or business ID. This data is used strictly for verification purposes and to ensure the traceability of professional traders, in line with the Digital Services Act (DSA).
We store verification data for as long as the Seller account remains active or as required by applicable laws. We may request updated information if we identify inconsistencies or changes in your business details. Verified Seller status will be visible to other users to maintain marketplace transparency.
Your data is processed in accordance with our privacy policy and GDPR. You have the right to access, correct, or request the deletion of your verification data at any time. We do not share this data with third parties unless legally required to do so.
3. Report illegal or policy-violating content
If you come across content that you believe is illegal or violates our policies, you can report it using our Report Illegal Content form. We review these reports in accordance with the Digital Services Act (DSA) and aim to respond as quickly as possible, usually within 10 days. When submitting a report, please provide as much detail as possible, such as the location of the content (e.g., a link or description) and the reason for your report.
Once your report is submitted, you will receive a confirmation of receipt. We will review the content in accordance with applicable laws and our Terms of Use, and we will notify you of the outcome or any action taken.
4. Cookies and tracking technologies
We use cookies and similar technologies to improve your experience. Essential cookies are necessary for the website to function and do not require consent. For non-essential cookies, including analytics and marketing cookies, we require your explicit consent. You can manage your cookie preferences and withdraw your consent at any time using our cookie consent tool Onetrust.
5. User-provided data
We collect data that you provide directly to us when you engage in the following activities, ensuring that each data collection point is clearly communicated and necessary for the service provided:
- Creating or updating an online account
- Purchasing or listing a product for sale
- Submitting requests for refunds or store credit
- Adding products to your shopping cart
- Subscribing to our subscription or email list
- Engaging with our support team
- Communicating with us via email, telephone, or social media
- Completing surveys or requesting information
- Inquiring about or initiating employment with Company
6. Sharing with third parties
We share your personal data with third parties under certain conditions, as necessary to provide our services, to comply with legal obligations, or with your explicit consent. These third parties include payment processors, delivery services and marketing partners. A complete list of third party sub-processors is available in our cookie policy.
7. Social media data
You may provide us with access to certain personal data stored by social media sites (e.g., Facebook, Twitter). We only access this information with your explicit consent, which is managed through your social media privacy settings. This information may include your name, email address, and public profile information.
8. Payment processing information
We use third parties to process payments and will not share your payment information with them without your express consent. Please review the third party's privacy policy before providing payment information.
9. Geolocation data
If you access the Service from a desktop or mobile device, we will only access, collect, monitor and/or remotely store geolocation data with your explicit consent. You can manage your geolocation preferences through our cookie consent tool.
10. Legitimate interests
We process your personal data on the basis of legitimate interests for the following purposes: improving our services, ensuring the security of our platform, preventing fraud, conducting direct marketing (where permitted by law), and analyzing user behavior to improve the user experience. We have conducted Legitimate Interests Assessments (LIAs) to ensure that our interests do not override your rights and freedoms. You have the right to object to processing based on legitimate interests at any time by contacting us at support.marimekko@resalepreloved.com.
11. Data retention
We retain personal data for specified periods: (a) account information while your account is active and for a reasonable time after; (b) transaction data for six years for tax and accounting purposes; (c) marketing data until you opt out or withdraw consent; and (d) other data as needed for the purposes outlined in this Privacy Policy or as legally required.
Data retention based on legitimate interests is limited to a reasonable timeframe, considering data subjects' rights. For consent-based processing, data is retained for the necessary duration, with the right to request deletion (see Section 8). Contract-based data retention lasts for the contract term plus any required legal period.
We review retention periods to ensure necessity and proportionality, extending them only when legally mandated or for dispute resolution.
12. User rights implementation
You have the following rights regarding your personal data: access, rectification, erasure, restriction of processing, data portability and objection to processing. To exercise these rights, please follow the steps below:
- Contact Us: Email us at support.marimekko@resalepreloved.com or write to us at HUSEIN EDV Dienstleitungs GmbH, Mariahilfer Straße 84/30, 1070 Wien.
- Verification: We will verify your identity to ensure the security of your data.
- Request Submission: Clearly state which right(s) you wish to exercise and provide any relevant details.
- Response Time: We will acknowledge receipt of your request within 72 hours and respond within one month. In complex cases, we may extend this period by two further months, and we will inform you accordingly.
13. Security and breach notification
We use a variety of technical and organizational measures to protect your personal data, including encryption, access controls, and regular security audits. In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will notify you immediately. Our response will include the following steps:
- Immediate Containment: Take immediate steps to contain the breach and prevent further unauthorized access.
- Assessment: Conduct a thorough assessment to determine the scope and impact of the breach.
- Notification: Informing affected individuals and the supervisory authority of the breach, including the nature of the breach, the likely consequences, and the steps taken or proposed to address the breach.
- Mitigation: Implementing measures to mitigate any adverse impact and prevent future breaches.
14. Third-party websites
While visiting the website, you may link to websites operated by third parties, or you may have arrived at the website through a link found on another website. We make no representations or warranties about, and have no control over, any third-party websites or the information, services, or products they provide, or the manner or methods they use to collect, store, access, or otherwise use your personal data. If you provide personal data to one of these websites, you will be subject to the privacy policy of the operator of that website, not our Privacy Policy. Please make sure you understand the privacy policy of any other website before providing any personal data.
15. Regular policy review and updates
We regularly review and update our privacy policy to ensure it remains compliant with GDPR and other relevant regulations. We conduct a comprehensive review at least once a year, and whenever there are significant changes to our data processing activities. Users will be notified of any material changes to this policy via email and a notice on our website.
16. Data protection officer (DPO)
We have appointed a Data Protection Officer (DPO) to oversee our data protection practices. You can contact our DPO at dpo.marimekko@resalepreloved.com with any privacy related inquiries.
17. Right to lodge a complaint
If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with a supervisory authority. For more information or to make a complaint, you may contact your local data protection authority. In the EU, you can find the contact details here: List of EU Data Protection Authorities.
18. Data accuracy and rectification
We are committed to maintaining the accuracy of your personal data. You have the right to correct, update or review your personal data at any time. To do so, please contact us at support.marimekko@resalepreloved.com. We encourage you to keep your information current and to notify us of any changes. We periodically verify the accuracy of data through routine audits and user confirmations to ensure that the data we maintain is accurate and current.
19. Data portability
You have the right to data portability, which allows you to receive your personal data in a structured, commonly used, machine-readable format. We provide this data in formats such as CSV or JSON so that it can be easily transferred to another data controller. To request data portability, please contact us at support.marimekko@resalepreloved.com. We use secure transmission methods to protect your data during the process.
20. How we use your data
Personal Data: We may use your Personal Data for the following representative purposes:
- Send communications, including information related to your Product purchases, sales, payments, issuance of store credits, support requests, and administrative e-mails
- Provide you specific products, resources and/or services you select on the website or through the Service
- Communicate with our brand partners for the purpose of providing the Services to you, including without limitation
- Allowing you to access Products you previously purchased from the brand in order to offer those Products for sale on the website and through the Services
- Facilitating the issuance of your store credit to the applicable brand partner where you have elected to receive store credit in lieu of cash for the sale of your Products
- To verify the authenticity of the Products you list for sale
- Authenticating the Products you offer for sale for original to the brand partner to which you attribute the Product
- Permitting you to list Products which you have purchased from the brand partner in the past
- Satisfy our contractual obligations to you
- Send you promotional/marketing information, newsletters, offers or other information
- Perform internal operations, processing services, maintain user accounts, resolve disputes, establish, exercise, and defend legal claims, prevent and identify fraud, verify your identity and authenticate users
- Personalize and tailor the features, performance and support of the website and Service
- Analyze, benchmark and conduct research on user data and interactions with the website and Service
- Provide additional services we offer and/or that you request
- Identify your preferences, so we can notify you of new or additional resources or materials that might be of interest to you
- Improve our services, content, customer service, and overall website and/or Service experience by aggregating and analyzing our customer data
- Analyze the use of the website, Service and related offerings and information about users of the website and Service to enhance our marketing efforts
- Communicate with you by e-mail, text message, app notifications, or other means about our company, our products, services, or other information that we believe may be of interest to you
- Provide others with your Personal Data for the limited purposes described in this privacy policy
- Send you notices of a transactional, administrative or relationship nature, or as required by law
Anonymous Information: We may use Anonymous Information for the following representative purposes:
- Perform internal operations on the website and Service
- Improve the website and Service and customize the user experience
- Aggregate the information collected via Cookies and Pixels to use in statistical analysis to help us and our brand partners track trends and analyze patterns
Both Personal Data and Anonymous Information: We may use a combination of Personal Data and Anonymous Information that we collect to target and measure the performance of advertisements to users both on and off the website, both on our own and through various ad networks and exchanges, using the following data, either separately or in combination:
- Data from advertising technologies such as Cookies, Pixels, web beacons, ad tags and device identifiers;
- User-provided information;
- Data from your use of the website;
- Information from others (e.g., advertising partners, publishers and data aggregators); and
- Social media platforms.
Lawful Processing; Legitimate Interests Our processing of your Personal Data for the purposes set out in this Privacy Policy is necessary for one or more of the following:
- Performing a contract with you, or to take steps at your request prior to contracting with you
- Protecting your vital interests or the interests of another person
- Complying with our legal obligations
- Pursuing our legitimate interests, including without limitation:
- Providing, improving and customizing our services and offerings;
- Administration of our operations;
- Understanding how our Website and Service are being used;
- Exploring ways to develop and grow;
- Cybersecurity;
- Enhancing protection against fraud, spam, harassment, intellectual property infringement, crime and security risks; and
- Meeting our obligations and enforcing our legal rights
21. How we share and disclose personal data
We will not rent, sell, or share your personal data with third parties except as described herein. If you do not want us to use or disclose personal data collected about you in the ways described in this Privacy Policy, you may choose not to use the website or provide your personal data at any time. If you choose not to provide personal data that is necessary for us to enroll you in Company programs or provide you with certain products or services, we may not be able to provide those programs, products or services to you.
We may share your personal data with our brand partner to which this website and service relates in order to improve the quality of our web services by, for example, analyzing the products you have listed, sold, viewed and/or purchased, the feedback you have provided, and the sections you have visited. This information will be used in accordance with the applicable Brand Partner's privacy policy, which can be found here - https://www.marimekko.com/fi_fi/tietosuojaseloste.
We may share your personal data with outside individuals and/or companies to help us provide you with the services and products we offer and to create, operate and maintain our website. For example, we may work with third parties to
- Deliver your product order;
- Evaluate and, if applicable, issue any refund you request;
- Authenticate the products you offer for sale;
- Issue store credits to brand partners on your behalf;
- Calculate and, if applicable, remit applicable sales tax on behalf of the Seller;
- Allow you to select products that you have previously purchased from a Brand Partner and offer them as products for sale on the website and/or through the Service;
- Maintain a database of customer information;
- Assist us with email distribution;
- Assist us with direct marketing and data collection;
- Provide data storage and analysis;
- Provide fraud prevention;
- Provide customer service; and
- Provide other services designed to assist us in developing and operating our website and Service and maximizing our business potential.
We require these outside companies to agree to keep all information shared with them confidential and to use the information only to perform their obligations to us.
We may disclose your personal data if required to do so by law or if we believe that such action is necessary:
- Comply with a legal obligation or court order;
- Enforce this Privacy Policy and our Terms of Use, including investigating possible violations;
- Detect, prevent or address fraud, security or technical issues; or
- Respond to user support requests; or
- Protect the rights, property, or safety of our users and the public.
This may include sharing information with other companies and organizations for fraud protection and spam/malware prevention. All disclosures will be made in accordance with applicable privacy laws.
Use of Non-Personally Identifiable Information. We use NPII to maintain and administer the website and to enable us and our brand partners to analyze trends, gather demographic information and comply with applicable law. We may share aggregated anonymous information with third parties, including, without limitation, service providers and brand partners. We may share this information with others without specific notice to or consent from you, and we may exploit, use and disclose your NPII without limitation of any kind. We authorize certain service providers to use NPII for their business purposes and in accordance with their privacy policies, such as reporting usage or industry trends to their customer base.
The website may use cookies. Cookies help us to remember you when you return to the website. Cookies also contain information to personalize and enhance your experience and to collect statistical information about the website, such as which pages are visited, the domain name of your Internet service provider, and the addresses of the websites you visited immediately before and immediately after you left the website. The information in the cookies allows us to track your "clickstream" activity (i.e., the paths taken by users of the website as they move from page to page) in order to better serve you by revealing which portions of the website are most popular. We may also allow our affiliates, service providers and advertisers to serve cookies from the website so that they can assist us in various activities, such as conducting analysis and research on the effectiveness of the website, its content and advertising. Some third-party advertising companies may be advertising networks that are members of the Network Advertising Initiative, which provides a single place to opt out of ad targeting by member companies. For more information, please visit www.networkadvertising.org.
We may also use pixel tags to help us analyze users' online behavior and measure the effectiveness of the website and our advertising and marketing. Pixel tags, or clear gif files, are tiny graphics with a unique label that work similarly to cookies and are used to monitor a user's online activity. Unlike cookies, which are stored on a user's computer hard drive, clear gif files are embedded invisibly in web pages and are about the size of the period at the end of this sentence. We may combine the information collected by such pixel tags with our customers' personal data. We may also use other analytical tools to evaluate website performance by using aggregated data that does not include personal data. We work with service providers who assist us in tracking, collecting and analyzing this information.
Cookies, pixel tags, and/or other analytical tools we may use on the website may collect information about your visit, including the pages you view, the features you use, the links you click, and other actions you take in connection with the website. This information may include your computer's Internet Protocol (IP) address, browser type, operating system, date and time information, and other technical information about your computer. We may also track certain information about the identity of the website you visited immediately prior to coming to the website. Cookies, pixel tags and/or other analytical tools in our emails may also be used to track your interactions with those messages, such as when you receive, open or click on a link in an email message from us. We may also work with companies that use tracking technologies to serve advertisements on our behalf across the Internet. These companies may collect information about your visits to the website and your interaction with our advertisements and other communications, but no personal data is shared with them.
We may combine NPII collected through cookies, pixel tags, and other analytical tools with other information we may have collected from you. This information may be used to improve the website, personalize your online experience, help us deliver information to you, determine the effectiveness of advertising, and for other internal business purposes. We may use and share aggregated and anonymous information to conduct market research and analysis for ourselves and/or our business partners. Because of the anonymous, non-personally identifiable nature of such information, there are no restrictions under this Privacy Policy on how we may use or disclose such information. For example, we may freely share such information with third parties who may use such information for their own marketing, advertising, research or other business purposes. We may also freely share such information with our service providers so that they may perform services for or on our behalf.
The website may contain links to and/or enable certain third party features to enhance your experience on the website, including social plug-ins, tools and APIs. Before using any third-party functionality on the website, you should consult the privacy policies of the third-party providers of such functionality, as we have no control over the information submitted to or collected by such third parties or how they may use that information. The privacy policies and data practices of such third parties may differ significantly from ours, and we make no representations or warranties about their policies and practices. Your communications and interactions with such third parties are solely between you and them and are at your own risk.
22. Opting-out
Unsubscribe: You may opt out of: (a) receiving e-mail communications, such as e-mail newsletters and promotional e-mails, by following the instructions provided at the bottom of each e-mail and clicking the "unsubscribe" button at the bottom of e-mails we send you; and/or (b) receiving promotional e-mail communications and newsletters by e-mailing us at prelovedservice@marimekko.com and including the word "UNSUBSCRIBE" in the subject line. Opting out of receiving website communications will not affect your receipt of service-related and administrative communications, such as payment confirmations, shipping status updates, updates to our Terms of Use and this Privacy Policy, as we need to be able to communicate with you regarding your purchases. If you do not receive a response from us within ten (10) business days, please send us another e-mail as your original e-mail may not have been received.
Google Analytics: Our products and services may use the Google Analytics advertising features and associated tracking technologies to display our ads that you see on other websites and to help us manage and optimize our online advertising efforts. To opt out of the Google Analytics advertising services, please visit the Google advertising settings page, which is currently located at https://www.google.com/settings/ads/anonymous?sig=ACi0TChBBUZhbil6jSzh_t9gc_hilJmxPFILo3fzsOJJ6mtq1DpanjQIychv5x00ayD5xiJnE_7py3LRuGOQtj8YQx5_1ZS2FA&hl=en. website users can also access the Google Analytics opt-out browser add-on, currently located at https://tools.google.com/dlpage/gaoptout or http://tools.google.com/dlpage/gaoptout?hl=en. We may also partner with Facebook and Apple to provide analytics in connection with our website, including our mobile applications. For more information about Facebook's privacy practices, please visit https://www.facebook.com/about/privacy and for more information about Apple's privacy practices, please visit http://www.apple.com/privacy/privacy-policy/.
Ad Industry Opt-Outs: You can opt out of Internet-based and mobile advertising on your mobile device by visiting TRUSTe's Ad Preference Manager, currently available at https://preferences-mgr.truste.com/. You can opt out of receiving online behavioral or Internet-based advertising by using the tools on the Digital Advertising Alliance's consumer choice page, currently available at http://www.aboutads.info/choices/, or the Network Advertising Initiative (NAI) opt-out tool, currently available at http://www.networkadvertising.org/choices/. If you use the advertising industry opt-out tools, please note that: (a) if you opt out, we may still collect some information about your online activity for operational purposes (such as fraud prevention), but it will not be used by us to target ads to you; (b) if you use multiple browsers or devices, you may need to execute the opt-out on each browser or device; and (c) other ad companies' opt-outs may work differently than ours, and we have no control over the practices of third parties. We make no representations or warranties about such opt-out services. Such services are independent from us, and we have no control over or responsibility for their performance.
Cookies: You can choose not to accept cookies or disable them in your browser. The "Help" function of most browsers contains information on how to set your browser to notify you before accepting cookies or to disable cookies altogether. If you choose not to accept cookies, you may not be able to use certain features of the website that are available to other users. For example, we may use cookies to recognize you by name when you return to this website so that you don't have to log in and enter your password each time.
23. Deleting, changing & updating your personal data
You may correct, update or revise your personal data that is inaccurate or request that we delete your personal data from our system. In certain cases, you may also have the right to: (i) restrict or limit the ways in which we use your Personal Data; (ii) object to the processing of your Personal Data; and (iii) obtain a copy of your Personal Data in an easily accessible format.
If you withdraw your consent to the use or disclosure of your Personal Data for the purposes set out in this Privacy Policy, you may not be able to access the related services and we may not be able to provide you with certain or all services.
To submit a request, please send an email message to support.marimekko@resalepreloved.com. We do not want to take any action regarding your Personal Data at the direction of anyone other than you, and therefore may ask you for information to verify your identity.
24. Basis for continued use of your personal data
Please note that in certain cases, after you withdraw your consent and request that we delete your personal data, we may continue to process your personal data if we have a legal basis to do so. For example, we may retain certain information if we need to do so to comply with an independent legal obligation, if we still need the information for the lawful purposes for which we collected it, or if it is necessary to pursue our legitimate interest in maintaining the security of our services and operations. In addition, if we have already disclosed your personal data to third parties in accordance with the terms of this Privacy Policy, we will no longer have access to that personal data and will not be able to compel the parties to whom we have disclosed it to delete or modify that information.
25. Children
This website is not directed to or intended for children under the age of 16. We do not knowingly solicit, collect or maintain personal data from anyone we actually know is under the age of 16, and no part of our website is designed to attract anyone under the age of 16. We also do not send email correspondence to anyone who indicates that they are under the age of 16.
If we learn that a user under the age of 16 has provided us with personal data without verifiable parental consent, we will take steps to promptly remove that user's personal data from our systems. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us at support.marimekko@resalepreloved.com or write to us at HUSEIN EDV Dienstleistungs GmbH, Mariahilfer Straße 84/30, 1070 Vienna, Austria. We will take reasonable steps to verify your identity and promptly remove such information from our systems to ensure compliance with applicable data protection laws.
26. Security; legally required disclosures
Security: We are committed to keeping your Personal Data private and secure. We take commercially reasonable physical, electronic and managerial steps to maintain the security of the Personal Data we collect, including limiting the number of people who have physical access to database servers and using electronic security systems and password protection to prevent unauthorized access. In addition, it is our policy never to send your credit card number via email. All payment transactions are encrypted. We will make any legally required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored personal data or "Personal Data" (as defined in applicable state security breach notification laws) to you by email, text, or conspicuous posting on the website in a timely manner and without unreasonable delay, to the extent consistent with (i) the legitimate needs of law enforcement or (ii) actions necessary to determine the scope of the breach and restore reasonable integrity to the data system. Your consent to this purpose will survive the termination of our relationship with you.
Unfortunately, despite our best efforts, no data transmission over the Internet can be guaranteed to be 100% secure. While we will use reasonable efforts to protect the security of information you transmit through the website, you do so at your own risk. We cannot guarantee that such information will not be intercepted by third parties, and we will not be liable for any breach of the security of your Personal Data resulting from causes or events beyond our control, including, without limitation, your own acts or omissions, corruption of storage media, defects in third party data security products or services, power failures, natural phenomena, riots, acts of vandalism, hacking, sabotage or terrorism, and we will not be responsible for bypassing any privacy settings or security measures contained on the website.
Legally Required Disclosures: We will make all legally required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored "Personal Data" (as defined in applicable state security breach notification laws) to you via email and/or conspicuous posting on the website in the most expedient time possible and without unreasonable delay, to the extent consistent with (i) the legitimate needs of law enforcement; or (ii) actions necessary to determine the scope of the breach and restore reasonable integrity to the data system.
27. Changes to our privacy policy
We may update or modify this Privacy Policy from time to time. When we make significant changes that affect your rights or obligations—such as changes to how your data is processed or shared—we will notify you at least 14 days in advance through clear communication channels, such as email or in-platform notifications.
We will ensure these notifications are available in accessible formats when possible to accommodate all users.
The updated Privacy Policy will include a “last modified” date to indicate when changes were made. You will have the opportunity to review the changes and decide whether to continue using our services or adjust your preferences accordingly.
If the changes involve using your personal data in a materially different manner than previously described, you will have the option to opt out by following the instructions provided in the notification or by visiting [opt-out link or contact method].
Your continued use of the website after the changes take effect will be considered your acceptance of the updated Privacy Policy.
28. Contact us
If you have any questions about our privacy policy or wish to exercise your rights as provided by law, you may contact us by email at support.marimekko@resalepreloved.com or write to us at HUSEIN EDV Dienstleitungs GmbH, Mariahilfer Straße 84/30, 1070 Wien.