TRADETOWORLD MARKETPLACE takes with maximum care the privacy of its platform (from now on, ”MARKETPLACE”) members, and uses its best efforts to protect it. In particular, TRADETOWORLD undertakes to ensure a level of protection of personal data that is in accordance with the General laws and guidelines provided by the same authorities in multiple countries, such as “The Personal Information Protection and Electronic Documents Act (PIPEDA)” in Canada, “California Consumer Privacy Act (CCPA)” in the USA, and “General Data Protection Regulation or GDPR, in the European markets, where appropriate.
User: any corporate customer who subscribes to the MARKETPLACE services with the aim to display and sell products to, or buy from, local or international trade partners.
Seller: Subcategory of the Users who display products with the aim to sell them through the MARKETPLACE.
Buyer: Subcategory of the Users who search for products with the aim to purchase them through the MARKETPLACE.
Reseller: Buyer who, after purchasing the goods through the MARKETPLACE, subscribes as well as Seller, leveraging the platform opportunity to keep the products posted adding its own sales place as additional Stock Location
Platform Managers: MARKETPLACE employees or consultants who provide assistance to, and manage the relationship with, Users, Service and Sales Partners.
Service Partner: Professional company which provides specialized trade services to Users.
Sales Partner: Company, Association or Organization which promotes actively the subscription to the MARKETPLACE to corporate customers or associates, and/or provides complete information on its features, functions, and distinctive proposal.
Stock Location: any physical address where goods sold in the marketplace are stocked and subsequently shipped to the purchasing users (Buyers).
Personal and Company data shall be processed by TRADETOWORLD MARKETPLACE CORPORATION, a limited liability Benefit Company subject to Canadian law, with a share capital of 10,000 CAD, registration number BC1357806, British Columbia, Canada, at the address 621 - 550 West Broadway, V5Z 0E9 (hereinafter “TRADETOWORLD”).
The data are collected and stored in TRADETOWORLD servers, provided by qualified suppliers based in the USA and with redundant security storage in multiple sites among North America, Europe and Asia, with state of the art data protection and firewall system in place.
TRADETOWORLD collects personal and company data directly from each Member when he/she registers with the MARKETPLACE, or during the execution of services, the submissions of requests or the application of complementary services within the MARKETPLACE or its Service Partners. The acquisition of data is necessary to carry out the MARKETPLACE services, such as the posting of User (Seller) profiles and offer, the communication among platform Users, Managers and Service Providers, and the sales negotiation or execution of trade orders. TRADETOWORLD notably collects:
|Data Collection Process & Scope||Content & Data type||Retention period|
|Credentials: User Id and Password||login, alias, and e-mail address (the password, if collected, is then encrypted in a non-reversible manner -hashing-, and is not collected as such);||Company and Personal data are saved after registration. User can, anytime, request permanent deletion of its Company and Personal data through specific function “Account permanent deletion” among its account settings options. The completion of the delisting process might take up to 30 days. Platform Managers might keep anonymous data related to the account, its transactions and history records, completely eliminating all personal and direct company data.|
|User registration: User account setup and management, user assessment and intermediation||
Company data (Seller, Buyer), with data such as:
|e-Commerce: Business matching and intermediation||
Sellers’ Product data, with data such as:
|Orders: Data regarding any order placed through the Platform, or temporary saved by Users.||
Orders data, such as:
||Same as above, unless the transaction data needs to be stored differently for the duration prescribed by law for the preservation of accounting records.|
|Customer assistance: Data contained in delivered messages to the Platform Customer support||Any information provided by Users or Service Partners addressed to solve a specific problem or request of support.||Company and Personal data are saved after registration. User can, anytime, request permanent deletion of its Company and Personal data through specific function “Account permanent deletion” among its account settings options. The completion of the delisting process might take up to 30 days. Platform Managers might keep anonymous data related to the account, its transactions and history records, completely eliminating all personal and direct company data.|
|Surveys: Data collected through questionnaires or interviews from Users||
Conducting either satisfaction or inquiring surveys to Users to:
|Updates & Promotions: Direct information or marketing initiatives||Communication content sent to Users or Service Providers by Platform Managers regarding new Platform features, available services and promotions|
|Administrative communications: Administrative e-mails or Canvassing e-mails||Communication content between Platform Managers and Users regarding administrative or canvassing subjects|
|Ratings and Reviews: Information given by a User or Service Provider regarding the opinion on delivered services and/or during the communication with other Users, Service Providers or Platform Managers||Users can rate other Users and Service Providers through an internal survey tool within the MARKETPLACE. The same review is be filtered, assessed and moderated by the Platform Managers, who then, upon verification, translate the review and publish in the Platform the assigned rating|
|Communication threads among Users, Service Providers and Platform Managers: Ordinary business and relationship messages among all members who have access to the Platform “Interactive Room”||Communication content among Users, Service Providers and Platform Managers (messages with informative content, notifications, complaints, requests, claims, etc.).|
The data collected for the purposes of performing the terms and conditions of use are data which provision is compulsory. If such data are not provided, TRADETOWORLD will not be able to provide all of the MARKETPLACE functionalities.
The personal data collected and processed by TRADETOWORLD may be disclosed to the following recipients or categories of recipients:
The subcontractors, which TRADETOWORLD shall use, provide sufficient guarantees as required by the applicable data protection regulations. These subcontractors only have access to the data that are necessary to the performance of their tasks, and they are not authorized to process the data of Members for any other purposes. These subcontractors fall in the MARKETPLACE classification of partners, consultants, or competent authorities pursuant to a law and/or a court ruling.
TRADETOWORLD shall store the personal data of the Members only for the duration that is strictly necessary for the purposes listed in article 3. The data of the Users and Service Partners shall then be archived, with restricted access, for an additional duration so that TRADETOWORLD can comply with its legal and/or regulatory obligations in relating to the archiving and retention of data. On the expiry of this additional duration, the data of the Members shall be permanently deleted from TRADETOWORLD’s databases.
The Users shall have a right of access, a right to rectification, a right to erasure, and a right to the portability of their personal data, as well as a right to object to the processing of their personal data, the right to withdraw their consent and a right to restriction of processing, in the conditions set out by applicable regulations.
The Users may at any time object to the processing of their data for direct marketing purposes or in accordance with applicable regulations.
The Members may send their request to TRADETOWORLD:
If a User or Service Provider considers that his/her rights were infringed, the same has the right to lodge a complaint with the Canadian data protection authority i.e. Commission nationale informatique et libertés (CNIL), or with any other competent authority.