We care about your privacy
By using cookies and related technologies (e.g. pixels, SDK), as well as by processing your personal data (including unique identifiers, browser data), we can better adapt the displayed content to your needs.By giving your consent to the storage of information on your terminal equipment, and to the access and processing of data, including in the sphere of profiling as well as market and statistical analysis, you will easily find exactly what you are searching for and what you need on Allegro. The controller of your personal data will be Allegro or, in certain cases, our partners (10 partners), including "IAB Europe Trusted Partners" (2 partners). Information about the purposes of personal data processing by our partners can be found in their privacy policies.
Store and/or access information on a device. Personalised advertising and content, advertising and content measurement, audience research and services development
. Ensure security, prevent and detect fraud, and fix errors
. Deliver and present advertising and content. Save and communicate privacy choices. Match and combine data from other data sources. Link different devices. Identify devices based on information transmitted automatically.
Your personal data are also processed to make it easier for you to use our web pagesThe purposes of processing are described in detail in the settings under "CHANGE MY CONSENTS" and in the Cookie Policy.Your consent is voluntary and is valid for 12 months. You may withdraw it at any time or renew it in the Cookie settings on the home page. Withdrawal of your consent does not affect the lawfulness of processing performed before the withdrawal.
With this option, you can select the marketplace — Poland (allegro.pl), Czechia (allegro.cz), Slovakia (allegro.sk) or Hungary (allegro.hu). With that, you can read articles about rules applicable to a foreign marketplace in your default language. If you want to browse articles in a different language, click here.
GDPR
Seller’s obligations arising from the General Data Protection Regulation (GDPR)
If you sell on Allegro, you are subject to the GDPR. Therefore, you must make sure that your customers enjoy the rights set out in this Regulation.
If the General Data Protection Regulation (GDPR) applies to you as a seller, you are obliged to acknowledge the following buyers’ rights:
- the right of access to their personal data
- the right to rectification and the right to erasure of their personal data
- the right to restriction of personal data processing
- the right to data portability
- the right to avoid automated decision-making, including profiling
- the right to object personal data processing.
Seller's privacy policy
In order to keep your buyers informed on how you process their personal details, you can add your own privacy policy on your account. This way, they will know how exactly their personal data is processed for the purpose of fulfilling their order.
We do not require you to add a privacy policy. We do not verify its substantive content, either.
How to add a privacy policy
- Open the About Seller tab.
- Scroll down to the Your privacy policy section.
- Upload the PDF — up to 3 MB.
You can add just one file but it can include several versions. This way you can upload the privacy policy in several languages or with different procedures for different delivery countries.
Regardless of how you name the file, buyers will download it as Privacy policy.pdf.
Where buyers will see your privacy policy
Your customers can find your privacy policy:
- in your offers — in the About Seller section
- in the email they get right after the purchase — added in the attachment.
When and how you can remove your personal data from Allegro
To remove your personal data from Allegro, terminate the contract with the service. We are legally obliged to process your data for several years after the termination of the contract.
We remove personal data after you terminate your agreement with Allegro. Therefore, if you want this data to be removed, terminate your agreement first. If you cannot access your account, contact us, and we will terminate the agreement for you.
The right to personal data erasure is not absolute, and Allegro may refuse to remove it. It happens if there are any circumstances allowing us to process personal data after termination of the agreement.
If you shop on Allegro, your personal data will be processed for 3 years from the end of the year of agreement termination. The legal basis is the legitimate interest of Allegro (article 6(1)(f) of GDPR) which is defending Allegro's rights.
If you are a seller or use a coupon, this period is extended to 6 years from the end of the year of agreement termination. In this case, we need to process your personal data to fulfil statutory duties resulting from tax and accounting regulations (article 6(1)(c) of GDPR).
After terminating the agreement, we will process your data only for the purposes specified below, on the basis of the legitimate interest of Allegro, which are:
- claims collection and defence against claims, including debt collection, and conducting court, arbitration, and mediation proceedings
- conducting statistical analyses
- ensuring accountability (demonstrating our compliance with legal obligations).
After these purposes for data processing expire, your personal data will be automatically removed from Allegro.
GDPR ― how Allegro fulfils obligations of personal data administrators
If you buy or sell on Allegro, we are your personal data administrator. We have specific obligations in this regard, and you have your rights.
Allegro fulfills obligations arising from the GDPR. In this article, you will learn what rights you have regarding personal data processing and how you can exercise those rights as our customer.
The right to be informed
Using plain and simple language, we will inform you:
- about the purposes for processing of your personal data and the legal basis for doing so
- how long we will process your personal data
- how we will use your data for profiling and how you can object to it
- about the other rights you have ― this includes the right to access and obtain a copy of your personal data, the right to rectify and erase your personal data, the right to object to personal data processing, the right to withdraw the consent to personal data processing any time, the right to complain to the supervisory body.
Every Allegro user has received an email containing the information on the rules of personal data processing and their rights in this regard by May 25, 2018. This information is also available in our Privacy Protection Policy.
The right of access
You have the right to access the data we process. You can download a copy of the data any time ― through the My Allegro tab or by contacting us.
If you decide to contact us, we will need to verify you for security purposes. If the verification is successful, we will send you a copy of your processed data with appropriate safety precautions.
The right to erasure
You have the right to demand that we erase your data. We will do it when you terminate your agreement with us and there is no other legal basis that would oblige us to process your personal data further.
If it turns out that we are legally obliged to process your data after you demand its erasure, we will inform you about it. Learn more.
The right to rectification
If you notice that your personal data is inaccurate or incomplete, you have the right to have it rectified. In that case, we undertake to rectify any discrepancies in the data we process or complete it if necessary.
You can update your data in the Account details tab. Learn more.
The right of restriction
At your request, we can restrict the processing of your personal data to storing only. We will cease processing your data in any other way, such as sharing it. We can do it if, for example:
- somebody unlawfully uses your data to register on Allegro, and you need this data to clarify the situation (in this case, while contacting law enforcement)
- we do not need your personal data to complete the purposes of its processing, but you need it to establish, assert, or defend your claims.
If you need to do so, contact us.
The right to data portability
At your request, within a month, we can provide you with your data available in a structured, widely-known format (CSV).
If you want to download your data from Allegro, you can do it through the My Allegro tab or by contacting us.
If you decide to contact us, we will need to verify you for security purposes. If the verification is successful, we will send you a copy of your processed data with appropriate safety precautions.
The right to object to data profiling
In the Personalization tab, you can agree or object to regular profiling. You can also request that we cease marketing activities resulting from profiling. You can do it by clicking [enable] or [disable].
After disabling the personalization, log out of your Allegro account on all devices and clear cookies ― visit this page for instructions. In some cases, the process may take up to 48 hours.
The right to object to direct marketing
You have the right to object to using your data for the purposes of direct marketing. If you want to do that, go through the following three steps:
- In the Consents to Notifications tab, uncheck the consent to receive marketing information:
- about Allegro products and services
- about products and services of entities cooperating with Allegro.
In the same tab, you can also manage other notifications ― for example, invitations to surveys and tests, or the confirmation of making a purchase or listing an offer.
- In the Personalization tab, click [disable].
The change of settings may last up to 48 hours
When you disable personalization, log out of your Allegro account on all devices and clear cookies ― learn how to do it. In some cases, the process may take up to 48 hours.
Go to the Cookie settings page and uncheck the following consents:
Cookies used for functional purposes
- Cookies used for analytical purposes
- Cookies used for marketing purposes.
Next, click [confirm choice].
If you resign from receiving notifications, we will not send you guidebooks and product recommendations. You will also miss out on promotions and opportunities to get discount coupons. Additionally, we will not be able to customize your search results and ads that suit your preferences.
The right to human intervention
You have the right to intervene, express your view, and question the automatically-made decision that produces legal effects for you or affects you in a similar way.
Your personal data in the Allegro Academy
If you are an Allegro Academy user and want to access or erase your data related to this platform or restrict the processing of this data, contact us. We will verify your request.
Your personal data on Allegro Lokalnie
If you are an Allegro Lokalnie user and want to access or erase your data related to this platform or restrict the processing of this data, contact us. We will verify your request.
GDPR ― general information
From May 25, 2018, the GDPR (Regulation on the Protection of Personal Data) has been in force in the European Union.
1. What is GDPR?
GDPR (General Data Protection Regulation) is a legal act enforced by the European Union, which regulates the rules of personal data protection. You can find the full contents of the regulation here.
2. When did GDPR come into force?
GDPR took effect on May 25, 2018, in all member states of the European Union.
3. How does GDPR affect the Polish regulations on personal data protection?
The GDPR provisions replaced the Act of August 29, 1997, on personal data protection. Starting May 25, 2018, the GDPR provisions are effective directly in all EU member states.
4. Who is and is not subject to GDPR?
Any business that provides services to the natural persons in the European Union is subject to GDPR. It also applies to businesses that are not based in the European Union, but offer their services to EU residents. It means that both Allegro and any entrepreneur selling on Allegro need to comply with the GDPR.
GDPR does not apply to personal or domestic activity. It means that a natural person who runs a business needs to comply with the GDPR when processing personal data of their customers or employees ― but it does not apply to data processed solely for private purposes (such as sending Christmas cards).
5. What is personal data?
This is information regarding a specific natural person that may directly or indirectly help identify them. It includes: first name and last name, phone number, residence address, email address. Other personal data examples include details of sales and purchases concluded by a given person, information about their race, health, or sexual orientation.
6. What are the conditions to process personal data?
You need a legal basis to process personal data. The most common legal bases include:
- a consent of the person whose data you want to process
- the necessity to process the data to perform the agreement with the person whose data it is
- the necessity to process the data to fulfil a legal obligation by the administrator
- the necessity to process the data for the purposes arising from legally justified interests pursued by the administrator or a third party, such as a payment service provider, Poczta Polska, and others.
7. What is the personal data minimization principle?
According to this principle, you can process only personal data that is necessary to accomplish a purpose of personal data processing. For example: if the purpose of personal data processing is to complete a buyer’s order, you should not ask them about their family arrangements.
8. What is profiling?
Profiling is automatic data processing meant to evaluate a given person and predict their behavior. There are 2 types of profiling:
- “Regular” profiling ― for example, for the purposes of direct marketing, which includes selecting an online ad to be displayed based on the user’s earlier activity. In this case, every person may object to profiling and not be subject to it.
- Profiling “for the purposes of solely automated decision-making” ― it includes automatic calculation of an insurance premium or a loan based on the information provided on the websites. In this case, the IT system processes data and makes a complicated evaluation of numerous factors, also with the use of data that does not relate directly to a specific person (statistical data).
9. What is the right to be forgotten?
It is a popular name for the right to erase personal data after the purpose and legal basis of personal data processing expire.
10. What is the right to data portability?
Every person registered on Allegro has the right to obtain the data we process in a structured, widely used format. We have ensured that you can safely download and send the data to another administrator.
11. Where can I learn more about GDPR?
Check out the following sources:
- the online information of the Polish Ministry of Digital Affairs (available only in Polish)
- articles written by the Panoptykon Foundation.
12. Is there an equivalent of the Inspector General for the Protection of Personal Data (GIODO) under the new regulations?
Yes, this role is now served by the President of the Personal Data Protection Office (PUODO), who has taken over the competencies of GIODO and performs new duties resulting from implementing GDPR.
Learn more
GDPR — how you can download your personal data from the Allegro account
As a buyer or seller, you can download data regarding your previous use of Allegro.
On the Copies of your data page, you can download the personal data gathered throughout your activity on Allegro. This way, we make it possible for you to exercise two of your rights arising from the GDPR:
- the right of access to your data
- the right to data portability.
How you can download your data
- Sign in to the Allegro account whose data you want to download.
- Go to the Copies of your data page. You can also reach the page from the Account details tab.
- Click [create a data copy].
- Select the datasets that you want to download.
- Select the format of the file with your data:
- HTML ― recommended if you want to get the data in a clear, legible format
- CSV ― recommended if you want to analyze the data or transfer it to another administrator.
- Click [create a copy].
- Depending on the amount, creating the data copy can last from several minutes to several days. We will let you know by email when the files are ready to be downloaded.
- You will find the link for download in the email. You can do it within 7 days of receiving the email. After that time, you will need to create a report again.
What you can find in the specific datasets
| Dataset | What you can find there |
|---|---|
| Personal data | What you can find there The first and last name, birth date, account registration date, username, addresses, company details, and the data change history. |
| Delivery addresses | What you can find there The first and last name of the recipient, delivery address. |
| Purchase details | What you can find there Offer titles and IDs, the number and prices of purchased products, dates of purchase, and sellers' usernames. |
| Sales details | What you can find there Offer titles and IDs, the number and prices of sold products, dates of sales, and buyers' usernames. |
| Listed offers details | What you can find there Offer titles and IDs, dates of offer listing and ending, and the number of listed products. |
| Ratings details | What you can find there Information on recommended and not recommended ratings you received from buyers. There, you will not find the information on the ratings you have given. |
| Additional email addresses | What you can find there Backup email addresses for contacting customers. |
| Allegro Pay Later details | What you can find there Data we store for the purposes of the Allegro Pay Later service. |
| BNP Installments and PayU Installments | What you can find there Data we store for the purposes of the installment payment services. |
| Profile image | What you can find there The photo you use as your profile picture. |
| Pharmacy details | What you can find there Your pharmacy name and address, the link to the register of pharmacies, the permit number, and the inspectorate details, among others. |
| Allegro Smart! Student details | What you can find there Data we store for the purposes of the Allegro Smart! Student service. |
| Allegro Pay Business details | What you can find there Data we store for the purposes of the Allegro Pay Business service. |
| Allegro Merchant Finance details | What you can find there Data we store for the purposes of the Allegro Merchant Finance service. |
| Your warehouse data | What you can find there Data you provide in the Warehouses tab. |
What about the data you cannot download on your own
You cannot download on your own any data concerning your activity in:
- Allegro Academy
- Allegro Lokalnie.
To get a copy of such data — contact us.
Some of the data is archived, and some of it ― for example, images — might not be available anymore.
If you do not find all the personal data that concerns you on the Copies of your data page, or you have doubts about the information you obtained — let us know.
