2.1 Data provided through direct interactions

Registration and other account information
When you register to use our Services we may collect the following information about you:

• if you register using your Google account: first name, last name and email address;
• if you register using your Facebook account: we collect first name and last name as appeared on your Facebook account and Facebook IDs. In the event you have provided permission to Facebook through their in-app privacy option (which appears just before you register on our Platform), we may collect your gender, age or email id depending on the permissions granted by you; and
• if you register using your mobile number: mobile number.

Depending on the choices you make during the log-in to our Services or during the process of engaging our Services, you may opt to give the following additional personal data:

• your name;
• e-mail address;
• mobile number; and/or
• your credit card details in case you want to purchase our paid services as defined in our Terms of Use.

Communication through the chat feature on our Platform
When you use our chat feature to communicate with other users, we collect information that you choose to provide to other users through this feature.

2.2 Data we collect automatically when you use of our Services

When you interact with our Platform or use our Services, we automatically collect the following information about you:

• We collect device-specific information such as operating system version and unique identifiers. For example, the name of the mobile network that you are using. We associate the device identifiers with your OLX account.

• Depending on your device permissions, if you post an item on our Platform, we automatically collect and process information about your actual location. We use various technologies to determine location, including IP address, GPS, Wi-Fi access points and mobile towers. Your location data allows you to see user items near you and helps you in posting items within your location.

• Technical details, including the Internet Protocol (IP) address of your device, time zone and operating system. We will also store your login information (registration date, date of last password change, date of last successful login), type and version of your browser.

• We collect information about your activity on our Platform which includes the sites from which you accessed our Platform, date and time stamp of each visit, searches you have performed, listings or advertisement banners you clicked, your interaction with such advertisements or listings, duration of your visit and the order in which you visit the content on our Platform.

• We use cookies to manage our users’ sessions, to store your preferences language selection and deliver you relevant advertisements. "Cookies" are small text files transferred by a web server to the hard drive of your device. Cookies may be used to collect the date and time of your visit, your browsing history, your preferences, and your username. You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our Services/Platform may become inaccessible or not function properly. For more information on the cookies we use, please see our Policy on Cookies and Similar Technologies, the terms of which are incorporated into, and form part of, this Privacy Policy by reference.

2.3 Data from third parties or publicly available sources.

We may receive personal data about you from various third parties and public sources. If you would like more information about this, please contact us using the relevant contact details set out in section 13.

We have set out below a description of the ways we use your personal data.

1. For providing access and delivering Services through our Platform

• If you log in using your mobile number or email id, we use your first name and last name, mobile number and/or e-mail address to identify you as a user and provide access to our Platform.
• If you log in using your Facebook account, we use your first name and last name from your Facebook profile and the Facebook e-mail address to identify you as a user on our Platform and to provide you access to our Platform.

The above log-information data is also used by us to deliver our Services to you in accordance with our Terms of Use.

We use your e-mail address and mobile number (by SMS) to make suggestions and recommendations to you about our Services that may be of interest to you.

We process the above information for adequate performance of our contract with you and on the basis of our legitimate interest in undertaking marketing activities to offer you Services that may be of your interest.

2. For improving your experience on the Platform

We use clickstream data to:

• offer you tailored content, such as giving you more relevant search results when using our Services;
• to determine how much time you spend on our Platform and in what manner you navigate through our Platform in order to understand your interests and to improve our Services based on this data. For example, we may provide you with suggestions on content that you can visit based on the contents you have clicked; and
• to monitor and report the effectiveness of the campaign delivery to our business partners and for internal business analysis.

We use your location data for following purposes:

• to compile anonymous and aggregated information about the characteristics and behaviour of OLX users, including for the purposes of business analysis, segmentation and development of anonymous profiles;
• to enhance the performance of our Services and to personalise the content we direct towards you. For example - with the help of location data we display ad listings which are in your vicinity to improve your buying experience; and
• to measure and monitor your interaction with the third-party advertisements banners we place on our Platform.

With the help of your log-in information which includes your email id and phone number, we map the different devices (such as desktop, mobile, tablets) used by you to access our Platform. This allows us to associate your activity on our Platform across devices and helps us in providing you a seamless experience no matter which device you use.

We process the above information on the basis of our legitimate interest to improve your experience on our Platform and for adequate performance of our contract with you.

3. To provide you a safe and secure Platform

• We use your mobile number, log data and unique device identifiers to administer and protect our Platform (including troubleshooting, data analysis, testing, fraud prevention, system maintenance, support, reporting and hosting of data).
• We analyse your communications done through our chat feature for fraud prevention and to promote safety by blocking spam or abusive messages that may have been sent to you by any other user.

We process the above information for adequate performance of our contract with you, to improve our services and on the basis of our legitimate interest to prevent fraud.

6.1. United Arab Emirates ("UAE") data subjects

If you are a data subject in the UAE, you will have the following rights:

• Right to request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
• Right to request correction of any of the data we have about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Right to withdraw your consent to the processing of your personal data at any time. This does not affect the legality of any processing we have already carried out based on the consent given previously.

6.2. EU General Data Protection Regulation ("GDPR") data subjects

If you are a data subject under the GDPR, you will have certain additional rights in relation to our handing of your personal information.

• Right to request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
• Right to request correction of any of the data we have about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Right to withdraw your consent to the processing of your personal data at any time. This does not affect the legality of any processing we have already carried out based on the consent given previously.
• Right to request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
• Right to request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Please note that for certain purposes we may be legally obligated to retain your data. Please see section 10.
• Right to object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
• Right to request for the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• To lodge a complaint at any time with your local supervisory responsible for you as outlined in section 13. However, before you make a complaint to the data protection authority, we would appreciate the chance to deal with your concerns in the first instance, please reach out to our Privacy Officer at privacy@dubizzle.com.

No fee usually required: You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

Time limit to respond: We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.