Privacy — marketplace
This covers the marketplace: accounts, listings, buying requests and quotes. For the marketing website and its contact form, see the website privacy policy.
Controller
SIA RR Enterprises, Ventspils iela 6, Kuldīga, Kuldīgas nov., LV-3301, Latvia. Contact info@biovern.eu.
What we collect, and why
| Data | Why | Basis |
|---|---|---|
| Email address | To sign you in. Sign-in is by emailed link, so we hold no password. | Contract |
| Company details you enter | To create your public profile and identify who is trading. | Contract |
| Verification documents you upload | So a person can check your company is what it says it is. | Legitimate interests — marketplace integrity |
| Listings, buying requests, quotes | To operate the marketplace. Listings and requests are public. | Contract |
| Moderation records | To record what we decided and why, as required of an intermediation service. | Legal obligation |
| Server logs | Security and diagnosing faults. | Legitimate interests |
Verification documents are never public
A document you upload is stored outside the public web root and no public URL serves it. Only an administrator reviewing your verification can open one, through a signed link that expires within minutes. It never appears on your profile, is never indexed, and is never shared with another user.
What other users see
Your company profile, listings and buying requests are public. Your contact details are not: they are disclosed only when a quote is accepted, and then to both sides at once. Before that, no other user sees your email address or telephone number.
A published buying request does not identify the buyer at all. One caveat worth stating plainly: free text you write is published as written, so if you type your own company name into a description it becomes public — because you published it.
Who else processes it
- Resend — sends our email (sign-in links, notifications). It processes recipient addresses and message content.
- Our hosting provider — runs the server and database, inside the EU.
We do not sell personal data, and we do not share it for advertising.
How long we keep it
- Account and company records — while the account exists.
- Listings and buying requests — expired ones stay readable rather than being deleted, so a supplier’s history stays coherent. They are removed from search engines.
- Verification documents — retained while the tier they support is in force, so we can evidence the decision.
- Moderation records — kept after account closure, because their whole purpose is to evidence what was decided.
Your rights
You may request access, correction, erasure, restriction or portability, and you may object to processing based on legitimate interests. Write to info@biovern.eu and we will respond within one month.
Erasure has one limit we would rather state than bury: we will not delete a moderation record, because it exists to evidence a decision we must be able to account for. Everything else about the account can go.
You may complain to your data protection authority. In Latvia that is the Data State Inspectorate (Datu valsts inspekcija).
Cookies
The marketplace sets one cookie, to keep you signed in. It is required for the service to function and is not used for tracking or advertising.