Privacy Policy

This policy explains what personal data KhadroX collects, why, and your rights under the EU GDPR (2016/679). KhadroX is B2B only: we process data about company representatives, not consumers as private individuals.

Khadro Baumaschinen e.K. DE249215270
Georgstraße 12, 44793 Bochum, Germany
E-mail: privacy@khadrox.com
Phone: +49 163 4715798
Website: www.khadrox.com

Khadro Baumaschinen e.K. DE249215270 is established in Germany and complies with GDPR and the German Federal Data Protection Act (BDSG).

2.1 Account registration

Company name, registered address, VAT ID, representative name, work e-mail and phone.

Legal basis: Art. 6(1)(b) GDPR — performance of the contract (Terms) you enter into with us.

2.2 Seller verification (standard & Seller Partner)

Physical site visit (location/representatives present), trade-register extracts, VAT certificate, ID of legal representative; optional site/machine photos for identity verification.

Legal basis: Art. 6(1)(b) and (f) GDPR — contract performance and legitimate interests (fraud prevention, platform integrity).

2.3 Listings & auctions

Machine data you provide; bid history (amounts/timestamps) without exposing bidder identity to others; seller contact data released to the winning buyer after the auction.

Legal basis: Art. 6(1)(b) GDPR.

2.4 Transactions & invoicing

Buyer/seller company data for invoices; transaction amounts and billing metadata; seller bank details (IBAN, BIC) for payout. KhadroX does not store card data — payments are by bank transfer only.

Legal basis: Art. 6(1)(b) and (c) GDPR (including German tax retention under section 147 AO).

2.5 VAT Refund portal

Export documents (Bill of Lading, export declaration, CMR, etc.), bank details for refund, and company data to validate the request. Contact: vatrefund@khadrox.com.

Legal basis: Art. 6(1)(c) and (b) GDPR.

2.6 Communications & support

When you e-mail, call or use the contact form we process the data you send to respond to you.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in user support.

2.7 Technical data & analytics

Standard server logs (IP, browser type, pages, timestamps) for security and operations. We may use Google Analytics (or equivalent) with anonymisation/pseudonymisation; non-essential analytics cookies require your consent via the cookie banner. See also our Cookie Policy.

Legal basis: Art. 6(1)(a) for non-essential cookies; Art. 6(1)(f) for security-related technical data.

We do not sell personal data. Sharing is limited to:

• Transaction counterparties — after auction close, seller and buyer receive the contact data needed for pickup and completion.
• Delegated verification partners — limited access under contract and confidentiality.
• Processors — hosting, cloud, e-mail deliverability, analytics — under GDPR-compliant agreements.
• Authorities — where legally required or by court order.
• International transfers — where providers are outside the EEA (e.g. Google), we use SCCs or other approved mechanisms.

• Active account: for the life of the account.
• After account closure: 8 weeks, unless legal retention applies.
• Invoicing & transactions: 10 years (German tax law).
• Seller verification documents: 5 years after the relationship ends.
• Support communications: 3 years (general German limitation reference).
• Server logs: up to 90 days.
• Analytics cookies: per vendor policy, often up to ~14 months; you can clear cookies in your browser.

You may request access, rectification, erasure, restriction, portability, object to processing, withdraw consent for consent-based processing, and lodge a complaint with a supervisory authority. In Germany: the Federal Commissioner (BfDI) at bfdi.bund.de — you may also use your local authority.

Requests: privacy@khadrox.com. We respond within 30 days (extendable by 60 days in complex cases, with notice).

We use appropriate technical and organisational measures, including TLS, role-based access, password hashing, and monitoring.

Personal data breaches affecting your rights will be reported to the supervisory authority within 72 hours where required, and you will be informed if the risk is high.

See Section 7 of the downloadable policy and our dedicated Cookie Policy (essential vs analytics; banner; browser controls).

The platform is for businesses and adult representatives only. We do not knowingly collect data from under-18s and will delete any such data discovered.

Links may leave our site; this policy applies only to KhadroX. We are not responsible for third-party privacy practices.

We may update this policy; material changes will be notified by e-mail or prominent notice on the platform at least 14 days before they take effect.

privacy@khadrox.com
Khadro Baumaschinen e.K. DE249215270, Georgstraße 12, 44793 Bochum, Germany · +49 163 4715798