Privacy Policy

1. Data controller

The data controller is Prime Arena Auctions S.r.l., with registered office in Italy. For any request regarding your data, contact us at: privacy@primearenaauctions.com.

2. Data collected and purposes

We collect the following categories of personal data:

• Registration data: name, surname, email, password (encrypted), date of birth, tax code — necessary for service delivery.
• Payment data: handled directly by our payment processors (Stripe, PayPal) — we do not store card data.
• Navigation data: IP address, browser type, pages visited — used for security and aggregate statistics.
• Preferences: saved lots, notification preferences — to improve your experience.

3. Legal basis for processing

• Contract performance (art. 6(1)(b) GDPR) — for managing registration, auctions, orders and payments.
• Consent (art. 6(1)(a) GDPR) — for marketing communications and non-essential cookies.
• Legitimate interest (art. 6(1)(f) GDPR) — for platform security and fraud prevention.
• Legal obligation (art. 6(1)(c) GDPR) — for the retention of accounting and tax documents.

4. Data retention

Account data is retained until account deletion and for the following 10 years in relation to tax and accounting obligations. System logs are retained for 12 months.

5. Data subject rights

You have the right to:

• Access your personal data
• Request the correction of inaccurate data
• Request deletion ("right to be forgotten")
• Object to processing or request restriction
• Receive your data in portable format
• Lodge a complaint with the supervisory authority (www.garanteprivacy.it)

To exercise your rights write to: privacy@primearenaauctions.com

6. Cookies

We use technical cookies necessary for the site to function and, with your consent, analytical and marketing cookies. For detailed management see our Cookie Policy. Cookie Policy.