BidBurg Privacy & Data Protection Policy
Effective Date: January 1, 2026
This Policy determines the procedure for processing and protecting the personal information of BidBurg platform users. We strive to ensure the highest level of transparency regarding what data we collect, how we use it, and how we protect the interests of international art market participants.
01
Legal Basis for Processing
Processing of personal data is carried out on the basis of applicable laws, General Data Protection Regulation (GDPR) requirements, and Anti-Money Laundering (AML) legislation. Registration on the platform signifies unconditional acceptance of this Policy.
02
Categories of Data Collected
We collect the following categories of data:
• Identification Data: Full name, ID document data, date of birth, Tax ID (VAT/EIN).
• Contact Data: Phone number, email address, legal and physical addresses.
• Financial Data: Bank details, transaction history, security deposit data.
• Technical Data: IP address, browser type, cookies, geolocation data.
• Documentation: Scans of identity documents, corporate registry extracts.
03
Purposes of Information Use
Your data is used for:
• User verification and due diligence (KYC).
• Ensuring the legal clarity of art sales transactions.
• Preventing fraud and participation in the illicit antiquities trade.
• Processing payments and calculating auction premiums.
• Coordinating logistics and high-value cargo insurance.
04
KYC and AML Procedures
BidBurg is required to conduct 'Know Your Customer' (KYC) procedures. We may collect additional data on the source of funds for transactions exceeding regulatory thresholds. This data is stored in encrypted repositories with restricted access.
05
Security and Encryption
We employ comprehensive security measures:
• Encryption of all data in transit (SSL/TLS 1.3).
• Critical information storage on servers with physical and biometric access control.
• Regular security audits by independent cybersecurity experts.
• Strict internal data access segmentation for employees.
06
Third-Party Data Sharing
We do not sell or trade your data for marketing purposes. Disclosure is possible only to:
• Payment providers to facilitate settlement.
• Shipping companies for lot delivery.
• Insurance brokers (necessary for policy issuance).
• Government regulators and customs authorities upon legal request.
• Expert committees for provenance verification.
07
Data Retention Periods
Data is stored for the duration of the account activity. According to financial monitoring requirements, certain categories (transaction history and verification docs) are stored for 10 years after account closure.
08
Your Rights and Data Management
You have the right to:
• Request a list of the data we hold about you.
• Demand correction of inaccurate data.
• Withdraw consent (resulting in account closure).
• Restrict the use of certain data types for analytics.
09
Use of Cookies
Cookies are used for maintaining sessions, language settings, and analyzing art category preferences. Disabling cookies will make the auction system unusable for security reasons.
10
International Data Transfer
Since BidBurg operates globally, your data may be processed in various jurisdictions. We ensure that data protection levels in these jurisdictions meet global security standards.