Privacy Policy

This Privacy Policy explains how Trovaval collects, uses and protects your personal data when you use our website and services.

1. Data Controller

The controller responsible for processing personal data is:

Vectrai S.L.U.
NIF B24856718
Calle Santiago 5, 3° izq.
38002 Santa Cruz de Tenerife
Spain

Email: contact@trovaval.com

2. Our Privacy Principles

Trovaval respects your privacy.

We do not use analytics services, advertising networks, tracking pixels, behavioural profiling or similar tracking technologies.

We collect only the personal data necessary to operate the Trovaval marketplace, facilitate private auctions between users, provide our services and comply with legal obligations.

We do not sell personal data to third parties.

3. Personal Data We Collect

Depending on how you use Trovaval, we may collect:

Name
Email address
Password (stored only as a secure hash)
Postal address
Country
Telephone number (optional)
Tax identification number (optional)
Profile picture provided by Google or Microsoft (if applicable)
Information relating to bids, participation fees and auctions
Technical information necessary for authentication, security, fraud prevention and operation of the platform.

4. How We Obtain Your Data

Personal data is obtained directly from you when:

creating an account;
completing your profile;
participating in auctions;
communicating with us;
using Google or Microsoft Sign-In.

5. Purpose of Processing

We process personal data in order to:

operate the Trovaval marketplace;
manage user accounts;
facilitate private auctions between users;
process participation fees;
generate invoices where required;
communicate with users;
prevent fraud and misuse;
comply with legal obligations.

6. Legal Basis

Depending on the specific processing activity, personal data is processed on one or more of the following legal bases under the General Data Protection Regulation (GDPR):

performance of a contract;
compliance with legal obligations;
our legitimate interests in operating a secure marketplace;
your consent where required by law.

7. Third-Party Service Providers

To operate the Trovaval marketplace, certain personal data may be shared with carefully selected service providers acting on our behalf or as independent data controllers where appropriate.

Google – authentication using Google Sign-In.
Microsoft – authentication using Microsoft Sign-In.
Stripe – processing participation fee payments.
PayPal – processing participation fee payments.
Wiwink – electronic invoicing where required by law.

These providers process personal data in accordance with their own privacy policies and applicable data protection laws.

8. Sharing Information with Other Users

During an active auction, bidders remain anonymous.

The seller is informed only of the current highest bid and does not receive information identifying bidders.

Users who do not win an auction and choose to receive information about the winning bid will be informed only of the final winning bid amount. No personal data or other information relating to the successful buyer will be disclosed.

When an auction closes according to its defined auction conditions, Trovaval provides the successful buyer and the seller with each other's contact details so that they can complete the transaction directly.

If an artwork is sold directly outside the platform in accordance with the Auction Rules, Trovaval does not disclose additional personal data between the parties unless this is necessary to operate the service or to comply with legal obligations.

9. Data Retention

Personal data is retained only for as long as necessary to provide our services, comply with legal obligations, resolve disputes and enforce our agreements.

Certain accounting and invoicing records may be retained for longer periods where required by applicable law.

10. Security

Trovaval implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.

No method of transmission or storage is completely secure. While we strive to protect your information, absolute security cannot be guaranteed.

11. Cookies

Trovaval does not use advertising cookies, analytics cookies or tracking cookies.

Where necessary, the website uses essential session cookies solely for user authentication, security and the operation of the platform.

These cookies cannot be disabled without affecting the functionality of the website.

12. Your Rights

Subject to applicable law, you have the right to:

access your personal data;
request correction of inaccurate data;
request deletion of your personal data where legally permitted;
request restriction of processing;
object to certain processing activities;
request data portability;
withdraw consent where processing is based on consent.

Requests may be sent to contact@trovaval.com .

13. International Data Transfers

Some service providers used by Trovaval may process personal data outside the European Economic Area.

Where such transfers occur, appropriate safeguards required by the GDPR are used.

14. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time.

The version published on this website shall apply from the date of publication.

15. Contact

For any questions regarding this Privacy Policy or the processing of your personal data, please contact:

Vectrai S.L.U.
Calle Santiago 5, 3° izq.
38002 Santa Cruz de Tenerife
Spain

contact@trovaval.com