Vinted Go Privacy Policy for Delivery Services
Vinted Go, UAB, (“Vinted Go” or “we”) is an EU-based company which provides parcel delivery services.
We’ve created this Privacy Policy to help you understand how we collect and use your personal data when you send, collect or return a parcel through Vinted Go’s smart delivery lockers. Read it carefully as it contains important information about your privacy and the rights relating to it.
Note: For general information on how your personal data is handled when you use Vinted Go’s delivery services, please read our User Privacy Policy.
1. Who is responsible for protecting your data?
When you send, collect or return a parcel through Vinted Go’s smart delivery lockers, Vinted Go acts as your data controller. In this case, Vinted Go takes full responsibility for protecting your data.
Vinted Go has a designated data protection officer (“DPO”). If you have any questions, comments or complaints regarding how we collect, use and store your personal data, or if you want to assert any of your privacy rights (see Section 6 below), reach out to us via our contact details below:
Vinted Go, UAB
Identification number: 305959706
Address: Švitrigailos st. 13, Vilnius 03228, Republic of Lithuania
Email: [email protected]
2. What data do we collect and why?
2.1. To enable sending, collecting and returning parcels through Vinted Go’s lockers
Purpose. We collect, use and store the data that is necessary to enable you to send, collect and/or return parcels through Vinted Go’s smart delivery lockers. This includes creating delivery labels, providing parcel tracking updates, allowing access to lockers, arranging the pick-up of returned parcels, and sending important notifications.
Data categories. For this purpose, we collect, use and store the delivery data, such as the sender’s and recipient’s full names, email addresses and phone numbers, the locker’s address, the PIN code of the locker, the parcel’s weight, the parcel’s tracking number, the parcel’s tracking updates, the date and time the delivery label is created, and the date and time that the parcel is dropped off and picked up.
Legal basis. We collect, use and store the data lawfully because it is necessary for the performance of a contract (Vinted Go’s Terms and Conditions for Locker Services) to which you are a party (Article 6(1)(b) of the GDPR).
Retention period. We keep the data for this purpose for 6 months after the delivery is completed.
2.2. To help you find the nearest Vinted Go’ locker
Purpose. When you use the interactive map of Vinted Go’s smart delivery lockers, we collect, use and store the data that is necessary to suggest the nearest locker to you.
Data categories. For this purpose, we collect, use and store your location data, such as your address or postcode.
Legal basis. We collect, use and store the data lawfully because it is necessary for the legitimate interest of Vinted Go and our users to have a convenient search tool for lockers (Article 6(1)(f) of the GDPR).
Retention period. We keep the data for this purpose until the end of the session.
2.3. To provide customer service and support
Purpose. If we receive a request, complaint or other enquiry in relation to Vinted Go’s smart delivery lockers, we collect, use and store the data that is necessary to handle the enquiry and take appropriate action.
Data categories. For this purpose, we collect, use and store the data contained in the enquiry, such as the sender’s and recipient’s full names, the issue’s description, photo proof of the damage (including metadata thereof), the amount of compensation, as well as delivery information, such as the parcel’s size, the parcel’s value, and the parcel’s tracking number.
Legal basis. We collect, use and store the data lawfully because it is necessary for the legitimate interest of Vinted Go to perform a contract with the e-commerce platform that has integrated our delivery solutions (Article 6(1)(f) of the GDPR).
Retention period. We keep the data for this purpose for 2 years after resolving the enquiry.
2.4. To defend our rights and interests
Purpose. If you get involved in a dispute with us, or we need to otherwise defend, enforce, exercise and uphold our rights or legitimate interests, we collect, use and store the data that is necessary for the specific case.
Data categories. For this purpose, we collect, use and store all data we hold about you as necessary for the specific case.
Legal basis. We collect, use and store the data lawfully as it is necessary for the legitimate interest of Vinted Go to defend its rights and interests (Article 6(1)(f) of the GDPR).
Retention period. We keep the data for 5 years after we identify the need to defend our specific rights and interests and, in the case of a dispute, until the final execution of the binding decision of the authorised body.
3. Where do we obtain your data?
We obtain your personal data:
- From the e-commerce platform that has integrated our delivery solutions and whose services or products you are using
- From carriers (our subcontractors)
- Directly from you
4. Do we share any data about you?
We only share your personal data with the following recipients when it is permitted by applicable laws and necessary for the purposes set out in Section 2:
- The e-commerce platform that has integrated our delivery solutions and whose services or products you are using
- Carriers (our subcontractors)
- Vinted, UAB and Vinted Limited (the international group of companies to which Vinted Go belongs)
- IT maintenance, technical support, cloud, hosting, information security, communication, translation, consultancy, financial, legal, and other service providers
- Law enforcement, supervisory and other public authorities
5. Do we disclose any data about you outside the European Economic Area?
In most cases, your data is processed within the territory of the European Economic Area (EEA). However, some of our service providers are established outside of this territory, which may result in your data being transferred to third countries (e.g. USA). Where permitted by applicable laws and necessary for the purposes set out in Section 2 above, we share your data with the following recipients outside the EEA:
- Google LLC (USA) – communication software provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission)
- Nexmo Inc. (USA) – communication software provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission)
6. What privacy rights do you have?
The GDPR and other laws provide you with certain rights. Subject to conditions and limitations, you have the right to:
- Submit a request for confirmation as to whether Vinted Go processes your personal data. If Vinted Go processes your personal data, you can request access to it and certain explanations
- Submit a request to correct inaccurate or incorrect personal data or to supplement it when it is not complete
- Submit a request to delete your personal data held by Vinted Go
- Submit a request to restrict the processing of your personal data
- Object, on grounds relating to your particular situation, to collection, use and storage of your personal data when Vinted Go processes it on the basis of legitimate interest
- Lodge a complaint with a supervisory authority, in particular in the country of your habitual residence or place of an alleged infringement of the GDPR, and seek a judicial remedy
If you’d like to exercise any of your privacy rights, reach out to us using the contact details in Section 1 above.
7. Changes to this Privacy Policy
We will notify you whenever we update this Privacy Policy by posting a new version on this page and identifying the date of update. In case of material changes to this Privacy Policy, we will take additional steps to make sure you are made aware of them.