Privacy Policy
Last updated: 2026-05-16
This Privacy Policy describes how Litway Motion sp. z o.o.(the "Operator", "we") processes personal data of users of the website bid2doors.com (the "Website") operated under the brand Bid2Doors. We are committed to processing personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the "GDPR") and other applicable data protection laws.
1. Data Controller
The Data Controller of your personal data is:
Litway Motion sp. z o.o.
ul. Wały Piastowskie 1/1508, 80-855 Gdańsk, Poland
KRS: 0001147128 · NIP: 5833527018 · REGON: 540528898
For any privacy-related matters, contact us at privacy@bid2doors.com.
2. What Data We Collect
Depending on how you use the Website, we may collect the following categories of personal data:
- Account data — full name, e-mail address, password (hashed), phone number, country, language preference.
- Identification data (only when required to process an Order) — copy of ID or passport, date of birth, residential address, business registration data for legal entities.
- Financial data — bank account details used for deposits and refunds. We do not store credit-card data; all payments are processed by external providers.
- Activity data — bids placed, Orders submitted, watchlist contents, search history, communication with customer support.
- Technical data — IP address, browser type, device type, operating system, referrer URL, timestamps, language and locale.
- Cookies and trackers — as described in our Cookie Policy.
3. Purposes and Legal Bases of Processing
We process personal data for the following purposes, on the legal bases indicated:
- To provide the Electronic Services and execute Orders — performance of a contract (Art. 6(1)(b) GDPR).
- To comply with legal obligations (accounting, tax, anti-money-laundering, consumer protection) — legal obligation (Art. 6(1)(c) GDPR).
- To pursue our legitimate interests — analytics, fraud prevention, improvement of the Website, defence and enforcement of legal claims (Art. 6(1)(f) GDPR).
- For marketing communications — your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
- For verification of identity prior to large transactions — legal obligation and our legitimate interest in fraud prevention.
4. Recipients of Personal Data
We share personal data only with parties strictly necessary for the provision of our services. These include:
- Auction Houses in the United States (e.g. Copart, IAAI) — to place bids and execute purchases on your behalf.
- Freight forwarders, shipping lines, customs agents — to organise transport and customs clearance.
- Payment institutions and banks — to process deposits, refunds and outgoing transfers.
- IT providers and hosting providers — Railway (hosting), email providers, analytics services, error monitoring.
- Professional advisors — lawyers, accountants, auditors, where strictly necessary.
- Public authorities — when required by law (tax authorities, customs, courts).
All recipients act either as separate data controllers (banks, public authorities, Auction Houses) or as data processors bound by a written processing agreement compliant with Art. 28 GDPR.
5. International Data Transfers
Because Auction Houses, freight forwarders and certain IT providers are based outside the European Economic Area (primarily the United States), some personal data is transferred internationally. Such transfers are protected by appropriate safeguards under Art. 46 GDPR — typically the European Commission's Standard Contractual Clauses, or where applicable, an adequacy decision (e.g. the EU–US Data Privacy Framework). Copies of the safeguards may be requested at privacy@bid2doors.com.
6. Retention Periods
- Account data — for as long as the Account is active, plus up to 3 years after closure for the defence of legal claims.
- Transactional and accounting data — at least 5 years from the end of the financial year in which the transaction occurred, as required by Polish tax law.
- Identification data — for the duration of the Order plus the statutory retention period for AML and tax purposes.
- Marketing data — until the consent is withdrawn or for a maximum of 3 years of inactivity.
- Cookies — as specified in the Cookie Policy.
7. Your Rights
Under the GDPR, you have the following rights:
- Right of access — to obtain confirmation whether we process your data and receive a copy of it.
- Right to rectification — to correct inaccurate or incomplete data.
- Right to erasure — to have your data deleted, subject to legal retention obligations.
- Right to restriction of processing — to limit how we use your data in specific situations.
- Right to data portability — to receive your data in a structured, commonly used and machine-readable format.
- Right to object — to processing based on our legitimate interests, including profiling and direct marketing.
- Right to withdraw consent — at any time, without affecting the lawfulness of processing performed before the withdrawal.
- Right to lodge a complaint — with the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych,
uodo.gov.pl) or the supervisory authority of your country of residence.
To exercise any of these rights, contact us at privacy@bid2doors.com. We respond within one month from receipt of the request; the period may be extended by an additional two months for complex or numerous requests.
8. Security
- We apply technical and organisational measures appropriate to the risk, including encryption of data in transit (HTTPS/TLS), hashing of passwords, access controls, regular backups, and staff training.
- Despite these measures, the transmission of data over the internet is never fully secure. We cannot guarantee the absolute security of data exchanged between your device and our servers, and we recommend using strong unique passwords and enabling any available multi-factor authentication.
9. Children
The Website is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you become aware that a minor has provided personal data to us, please contact privacy@bid2doors.com and we will take appropriate steps to delete such data.
10. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or for legal, regulatory or operational reasons. The current version is always available at bid2doors.com/privacy-policy. If the changes are material, we will notify Account holders via e-mail or an on-site notice.
11. Contact
For any questions about this Privacy Policy or our data practices, contact us at:
Litway Motion sp. z o.o.
ul. Wały Piastowskie 1/1508, 80-855 Gdańsk, Poland
E-mail: privacy@bid2doors.com
