What personal data we process and your rights under the GDPR.
Draft — last updated 2026-06-20
We process account and listing data to perform the service you ask for (Art. 6(1)(b) GDPR — contract) and on the basis of our legitimate interest (Art. 6(1)(f)) in operating, securing and moderating the platform.
We do not run identity verification (KYC) and do not collect government IDs. We ask only for what is needed to publish an ad and let buyers contact you.
Listing data is kept while the listing is active and for a short period after it expires. Account data is kept while your account exists. Invoices and accounting records are kept for 10 years as required by Czech law. Anti-abuse / verification data is kept up to 1 year. On-chain transaction data is public and cannot be deleted.
Under the GDPR you have the right to access, rectify, erase ("be forgotten"), restrict and port your personal data, and to object to processing. You can edit or delete your listings and your account from your profile, or contact us for any request.
We do not sell your personal data and use no third-party advertising or tracking. Contact details you publish on an ad are shown to other users by design. To run the service we share the minimum necessary data with: Packeta (delivery address, when you ship via the carrier), Telegram (for 2FA codes, if you enable it) and payment / blockchain infrastructure (to settle fees). On-chain payment data is public and permanent by the nature of blockchains and cannot be erased.
You may lodge a complaint with your data-protection authority — in the Czech Republic the Office for Personal Data Protection (ÚOOÚ, uoou.gov.cz).
Data-protection requests: podpora@mitch.cz.