GiBud.no ("GiBud", "we", "us") is responsible for the personal data described in this policy, unless otherwise stated for a specific service or integration.

You can contact us at kundeservice@gibud.no if you have questions about privacy, your account, or your rights.

• account details such as username, name, email address, password-related credentials and language or country preferences
• profile details, addresses, phone number, payment-related preferences and seller information
• listing content, bids, purchases, invoices, reviews, messages and customer support inquiries
• information you send through forms such as contact requests or account updates

• transaction history, auction activity, cart activity, favorites, notifications and order records
• technical and security information such as device or browser data, log data, timestamps, IP-related information and error reports
• fraud-prevention and abuse-monitoring signals connected to account and marketplace activity

We process personal data to create and manage accounts, publish listings, operate auctions, process purchases, provide chat and customer support, and deliver core platform functionality.

Legal basis: processing necessary for the performance of a contract or to take steps at your request before entering into a contract.

We may process personal data to comply with accounting, bookkeeping, tax, consumer protection, security and law-enforcement related obligations.

Legal basis: compliance with legal obligations.

We may use personal data to prevent fraud, enforce rules, investigate misuse, secure accounts, monitor platform stability, and improve service quality and user experience.

Legal basis: legitimate interests, provided those interests are not overridden by your rights and freedoms.

If we use consent for a specific feature, such as optional marketing or certain non-essential cookies, you may withdraw that consent at any time. Withdrawal does not affect earlier processing carried out before the withdrawal.

We may share personal data with service providers and partners that support the operation of GiBud, for example providers for hosting, authentication, storage, payment-related workflows, messaging, analytics, security monitoring, customer support and technical infrastructure.

We may also share data where required by law, regulation, public authority request, or where necessary to establish, exercise or defend legal claims.

Because GiBud is a marketplace, some profile and transaction-related information must be visible or shared with other users to enable bidding, buying, selling, delivery, invoicing, support and dispute handling.

We keep personal data only for as long as necessary for the purposes described above, including to provide the service, maintain marketplace integrity, resolve disputes, enforce agreements and comply with legal retention obligations.

The exact retention period may vary depending on the type of data, your account status, transaction history and applicable legal requirements.

• request access to your personal data
• request correction of inaccurate or incomplete data
• request deletion where legal conditions are met
• request restriction of processing in certain situations
• object to processing based on legitimate interests
• request data portability where applicable
• withdraw consent where processing is based on consent

To exercise your rights, contact kundeservice@gibud.no.

If personal data is transferred outside the EU or EEA, we aim to use appropriate safeguards required by data protection law, such as adequacy decisions, standard contractual clauses or equivalent protection mechanisms, depending on the relevant transfer.

GiBud may use cookies, local storage, logs and similar technologies to keep you signed in, remember settings, improve stability, measure performance and protect the service.

If we use non-essential tracking or advertising technologies, those should be described in a separate cookie notice or consent flow where required.

We use technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, alteration and disclosure. No system can guarantee absolute security, but we continuously work to improve our safeguards.

If you believe our processing of your personal data does not comply with applicable law, you may contact us first so we can try to help. You also have the right to lodge a complaint with the relevant supervisory authority, including Datatilsynet in Norway.

We may update this Privacy Policy from time to time to reflect legal, technical or operational changes. Material updates should be published on this page.