Privacy Policy

Autorell AB in Sweden is the data controller for the marketplace. Questions, objections and rights requests can be sent to info@autorell.com.

• Account type, name, email, phone, country, address, login and security information.
• For private sellers, full names are kept for account, verification, safety and legal purposes. Public marketplace views normally show only the seller first name and account type.
• Listing data, images, vehicle identity, price, location, condition, history and known faults.
• Dealer-offer requests include vehicle, condition and contact details, photos and the seller’s preferred contact method.
• When a company member marks a seller as contacted, we process the company, user, name, email, contact method and timestamps for shared follow-up.
• Messages, reports, support cases, moderation decisions and evidence of suspected misuse.
• Payment references, packages, amounts, receipt and refund status. Full card details are not stored by Autorell.

• Contract and user request: account creation, listings, listing packages, messages and support.
• Legal obligation: bookkeeping, tax, authority requests and digital platform obligations.
• Legitimate interest: secure operation, fraud prevention, moderation, dispute evidence and service development.
• User request and legitimate interest: match dealer requests by country, notify eligible companies and prevent unnecessary duplicate contact within the same company.
• Consent is used where required by law, for example for non-essential cookies or separate marketing.

• Dealer requests are visible only to eligible business accounts with matching country access. Members of the same company can see who contacted the seller and when.
• A request marked as contacted remains in that company’s feed for 24 hours and is then hidden. The contact audit may be retained with restricted access for coordination, security and legal claims.
• Processors for hosting, database, authentication, storage, email and payment receive only the data needed for their service. Consent-based analytics and advertising are described in the Cookie Policy.

• Request access, correction, erasure or restriction where GDPR conditions are met.
• Object to processing based on legitimate interest and request data portability where applicable.
• Withdraw consent without affecting previous lawful processing.