Route 66 Auctions
1. About this Statement
When you use our website or app (the “Platform”), we process personal data. The type of data we process depends on whether you are a visitor, buyer or seller.
This statement explains which data we process, the legal basis for processing, how long we retain data, with whom it may be shared and what rights you have.
Route 66 Auctions operates under the GDPR and complies with relevant data protection laws in all countries where we operate.
2. Our Principles
We follow three core data protection principles:
Transparency
We clearly explain what data we process and why.
Trust
We apply technical and organisational security measures, prevent fraud and maintain secure systems.
Data minimisation
We only collect what is necessary and never store data longer than required.
3. Personal Data We Process
Browsing Without an Account
If you visit our Platform without logging in, we may process:
• IP address
• Device and browser details
• Usage times and interaction data
• Approximate location
With your consent, we may use analytical or marketing cookies. See our Cookie Policy for details.
Using an Account
When you create or use an account, we process:
• Name, email address, password, telephone number, address and preferred language
• For sellers: bank account details, business registration/VAT information
• Transaction details: payment method, payment status, invoices, pricing and timestamps
4. Why We Process Your Data
Contractual Necessity
We process your data to:
• Create and manage accounts
• Enable bidding, buying and selling
• Process payments
• Coordinate delivery or pickup of vehicles
• Provide customer service and invoicing
Legitimate Interests
We may process data for:
• Platform improvement and analytics
• Notifications about auctions or bids you follow
• Personalised Platform content
• Fraud prevention and enforcement of our Terms
• Security of systems and mediation in disputes
• Supporting new sellers and monitoring service quality (including limited call monitoring)
Legal Obligation
We process data to comply with:
• Identity verification requirements (e.g., anti-money laundering laws)
• Tax and bookkeeping regulations
• Notice-and-takedown responsibilities
Consent
We only process certain data with your explicit permission, including:
• Non-essential or advertising cookies
• Newsletters or surveys without an account
• Use of image material for specific marketing purposes
You can withdraw your consent at any time.
5. Sharing of Personal Data
With Other Users
Where necessary for a sale, we may share:
• Delivery address and contact details with the seller for arranging pickup or transport
• Limited information in case of disputes or payment issues
Buyer or seller information may only be used for matters relating to the transaction.
With Service Providers (Processors)
We work with trusted partners for:
• Hosting and IT infrastructure
• Email and messaging services
• Payment processing and identity verification
• Logistics and delivery
• Security and fraud prevention
• Data analytics and advertising execution
All partners operate under strict data processing agreements.
Independent Controllers
Certain parties process data independently, such as:
• Payment service providers
• Government authorities and auditors
• Debt collection agencies
• Legal and tax authorities
International Transfers
Data is primarily processed in the Netherlands. If data is transferred outside the EEA, we apply recognised safeguards such as Standard Contractual Clauses and, where needed, encryption.
6. Security and Retention
We use technical, organisational and physical measures to prevent unauthorised access or misuse of personal data. Automated fraud detection mechanisms may temporarily restrict account access.
We retain data only as long as legally required. Financial and tax information may need to be stored for up to 10 years depending on jurisdiction.
7. Account Deletion
You can request deletion of your account through your account settings. We will begin processing your request as soon as possible and within one month.
We will delete or anonymise your data and instruct our processors to do the same.
Deletion may be postponed if legal requirements apply (e.g., ongoing transactions or mandatory retention periods).
Data we are legally required to retain will be stored securely and not used to identify you unless required by law.
8. Your Rights
Depending on your country of residence, you may have the right to:
• Access your personal data
• Correct inaccurate data
• Request deletion of data
• Restrict or object to processing
• Receive a copy of your data (data portability)
• Withdraw consent
For your safety, we may ask you to verify your identity before handling your request.
9. Social Media
Interactions with Route 66 Auctions via social media are subject to the privacy terms of those platforms. When you contact us through social media, your enquiry may be linked to your account to provide proper assistance.
10. Updates to This Statement
We may update this Privacy Statement from time to time. Significant changes may be communicated directly by email. If versions differ, the English version prevails.
11. Contact
If you have questions about this statement, the data we process or your rights, please contact the Route 66 Auctions team.
