Privacy Policy

The controller responsible for data processing on this platform is:

FurtherSales GmbH

Upstalsboom 20

28259 Bremen

Germany

Managing Director: Fabiola Kleppe-Nava

Commercial Register: HRB 42127, Amtsgericht Bremen

VAT ID: DE459040752

Email: info@furthersales.com

Platform: https://www.furthersales-network.com

Corporate Website: https://www.furthersales.de

FurtherSales Network is operated using the technical platform provider Base44 (base44.com). Base44 provides the following core services:

• Application hosting and runtime environment

• Database operation and data storage

• User authentication and session management

• File storage (logos, images, documents)

• Execution of server-side backend functions

• AI functionality used by certain platform features (see Section 18)

• Technical logging of page visits by signed-in users (page name and time) for operation and error analysis

Base44 processes personal data on our behalf in order to provide these services.

Further information: https://base44.com

Some of the service providers named in this Privacy Policy may process personal data outside the European Union or the European Economic Area. Where personal data is transferred to a country for which there is no adequacy decision of the European Commission, the transfer is subject to the requirements of Art. 44 et seq. GDPR.

Information on the safeguards applicable to a specific service provider can be requested at info@furthersales.com.

FurtherSales Network operates an international directory of used machinery dealers. Dealers can publish and maintain a public profile on the platform.

The following data may be published in a public dealer profile:

• Company name, logo, and description

• Website and social media links

• Contact person, phone number, and email address

• Business address

• Brands and product categories

• Photo galleries

• Countries and regions served

This data is either provided directly by the dealer or compiled from publicly available business information and subsequently confirmed by the dealer.

Where FurtherSales compiles or enriches profile or listing data from publicly accessible company websites, the website content may be retrieved via the Jina AI Reader service, processed with AI functionality provided via Base44, and, for website imports, run as background jobs via Trigger.dev. This applies only where these tools are used for a specific profile or import.

Public dealer profiles may continue to be stored even if the associated user account is no longer actively used, provided there is a legitimate interest in displaying publicly available company information. Affected companies may at any time request review, update, or deletion of their dealer profile.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a B2B dealer directory).

Buyers and dealers can create user accounts on the platform. Registration and sign-in are handled via the authentication service of Base44 (Section 2). The following data is processed for this purpose:

• Name and email address

• Login credentials, processed by Base44

• User role and preferred language

• Timestamps of registration and account changes

Dealers additionally provide company information when applying for or claiming a dealer profile (Sections 4 and 6).

Retention: Account data is stored for as long as the account exists. After the account has been closed, it is deleted unless statutory retention obligations require longer storage.

Legal basis: Art. 6(1)(b) GDPR (contract performance).

The platform allows dealers to claim ownership of a pre-created dealer profile. The following data is processed during this procedure:

• Email address

• Claim token (secure, time-limited)

• Timestamp of claim request and expiry

• Claim status

• IP address (server logs)

Retention: Claim invitation data is stored for as long as necessary to handle and document the claim.

Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest in preventing unauthorised profile takeovers).

Visitors can send inquiries and non-binding price proposals to dealers via the platform, either as guests without an account or while signed in. Signed-in buyers and dealers can then exchange messages in the platform inbox. Inquiries are forwarded to the relevant dealer. The dealer acts as an independent controller for any further processing of that inquiry. FurtherSales has no influence over the further processing of data by the respective dealer.

A price proposal is transmitted as a message. FurtherSales does not conclude contracts and does not record any acceptance of price proposals.

The following data is processed:

• Name and email address

• Optional phone number and company name (guest inquiries)

• Message content, including any proposed price

• The listing or dealer concerned

• Timestamps and read status of messages

Dealers are notified of new inquiries and messages by email via Brevo (Section 9); these emails contain the sender's name and the message content. Messages may also be sent to buyers by email.

Spam and abuse protection: Guest inquiries are protected by Cloudflare Turnstile (Section 12). To limit repeated automated submissions, the IP address and browser identifier are converted into a non-reversible keyed hash that is used for rate limiting.

Retention: Inquiry and message data is stored for as long as necessary for the correspondence between buyer and dealer, for the documentation and billing of Contact Requests and to comply with statutory retention obligations.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in facilitating B2B contact).

Dealers can upload files to personalise their public profiles. The following types of files may be stored:

• Company logos

• Profile and contact person photos

• Gallery images

• Cover images

Uploaded files are stored via Base44's file storage infrastructure and are publicly accessible as part of the dealer's profile. Files are stored for as long as they are part of the dealer profile; dealers can remove them or request their deletion.

Photo search (where available): If you use the photo search to find similar machines, the photo you select is uploaded to a temporary storage bucket in Google Cloud (region europe-west3), converted into a numerical image representation using Google Vertex AI, and compared with listing images using the vector database Qdrant. The uploaded photo is used only for this search and is deleted after processing. Listing images published by dealers may be processed in the same way to enable the comparison. The photo search is protected by Cloudflare Turnstile (Section 12).

Legal basis for dealer file uploads: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest in profile presentation).

FurtherSales uses Brevo (formerly Sendinblue), operated by Brevo SAS, 55 rue d'Amsterdam, 75008 Paris, France, for sending transactional emails.

This includes in particular:

• Profile claiming invitations

• Notifications to dealers about new inquiries, price proposals and messages

• Message notifications to buyers

• Forwarding of messages submitted via the contact and help forms

• Newsletter confirmation emails (double opt-in, see Section 16a)

• System notifications

The following data is processed by Brevo:

• Recipient email address and, where applicable, sender name and reply-to address

• Email content, which may include names and message content

• Sending and delivery status

Brevo is not used by FurtherSales for emails generated by the Base44 sign-in service itself (Section 2).

Brevo processes this data on our behalf in order to deliver the emails.

Further information: https://www.brevo.com/legal/privacypolicy/

To ensure the delivery and proper functioning of our communication processes, we log technical information about the sending of emails in the platform database (for example the masked recipient address, subject, template, sending status and the message ID of the email provider).

Where technically available, information about delivery status, email retrieval, and the use of links contained in emails may be processed. Processing is carried out for the purposes of quality assurance, system security, error analysis, and improvement of our communication processes. This data is not used for advertising purposes or to create individual user profiles.

Retention: Email log data is stored for as long as necessary for these purposes.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in maintaining reliable and secure communication systems).

When you visit this website, technically necessary access data is processed by our hosting infrastructure in order to deliver the website. This may include:

• IP address

• Browser type and version

• Operating system

• Date and time of access

• Pages accessed and files requested

• Referring URL

This data is used for technical operation, security monitoring, and error diagnosis.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the platform).

Browser storage

The platform stores the following information in your browser's local storage because it is required to provide the service you request:

• Sign-in session token and technical app parameters of the Base44 platform (e.g. "base44_access_token")

• Your selected display language ("fs_lang")

• For dealers, the currently selected dealer profile ("fs_active_dealer_profile_id")

No marketing cookies, tracking pixels or advertising-related cookies are used, and no third-party analytics tools are integrated.

Spam protection (Cloudflare Turnstile)

To protect forms and search functions against automated misuse, the platform uses Cloudflare Turnstile, a service of Cloudflare. The Turnstile script is loaded when pages of the platform are opened. Turnstile processes technical information such as your IP address and browser characteristics to distinguish human visitors from automated requests. Further information: https://www.cloudflare.com/privacypolicy/

Fonts and images from external servers

The platform loads the "Inter" font from Google Fonts (Google servers) and displays some illustrative images from Unsplash. When this content is loaded, your IP address is transmitted to the respective provider for technical reasons.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including:

• Transport encryption: Data is transmitted to and from the platform in encrypted form (TLS).

• Authentication: Access to user accounts requires authentication.

• Role-based permissions: Access to personal data is restricted based on user roles and dealer profiles.

• Audit logging: Selected security-relevant and administrative actions (for example profile claims, moderation and verification decisions) are recorded in an internal audit log.

Personal data is deleted as soon as the purpose for which it was collected no longer applies, unless statutory retention obligations require longer storage. The following criteria apply:

• User accounts: Stored for as long as the account exists; deleted after the account has been closed, unless statutory retention obligations apply.

• Dealer profiles: Stored while the dealer relationship is active or a legitimate interest in displaying publicly available business information exists. Deletion on request, unless statutory retention obligations or overriding legitimate interests apply.

• Inquiries, price proposals and messages: Stored for as long as necessary for the correspondence between buyer and dealer, for the documentation and billing of Contact Requests and to comply with statutory retention obligations.

• Claim invitations: Stored for as long as necessary to handle and document the claim.

• Email logs: Stored for as long as necessary for delivery monitoring and error analysis.

• Uploaded files: Stored for as long as they are part of the dealer profile; deletion can be requested at any time.

You can request the deletion of your data at any time at info@furthersales.com (see Section 15).

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — You may request information about the personal data we process about you.

• Right to rectification (Art. 16 GDPR) — You may request the correction of inaccurate data.

• Right to erasure (Art. 17 GDPR) — You may request the deletion of your personal data where no legal obligation requires its retention.

• Right to restriction (Art. 18 GDPR) — You may request that processing of your data be restricted in certain circumstances.

• Right to data portability (Art. 20 GDPR) — You may request to receive your data in a structured, machine-readable format.

• Right to withdraw consent (Art. 7(3) GDPR) — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

• Right to lodge a complaint — You have the right to lodge a complaint with a supervisory authority. The competent authority for FurtherSales GmbH is:

Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen

Arndtstraße 1, 27570 Bremerhaven

www.datenschutz.bremen.de

To exercise your rights, please contact us at: info@furthersales.com

If you contact us directly — for example by emailing info@furthersales.com — the personal data you provide (name, email address, message content) will be processed solely for the purpose of handling your inquiry and any follow-up communication.

This data is not passed on to third parties unless this is necessary for processing your request.

Retention: Correspondence data is retained for as long as necessary to process your inquiry and for a reasonable follow-up period, and in any case in accordance with applicable statutory retention obligations.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries) or Art. 6(1)(b) GDPR where the inquiry relates to a contractual relationship.

Signed-in users can optionally subscribe to the FurtherSales newsletter (news, machinery offers, auctions and information about FurtherSales), for example when creating a dealer profile or in their profile settings. Subscribing is voluntary, separate from accepting the Terms of Service and not required to use the platform.

Double opt-in

After you opt in, we send a confirmation email to the login email address of your account. The subscription only becomes active once you click the confirmation link and confirm on our website. The link is valid for 48 hours. Unconfirmed requests are not used to send newsletters. A different email address requires a new opt-in and confirmation.

The following data is processed:

• Email address (the login email of your account)

• Subscription status (pending, subscribed, unsubscribed)

• Version, language and source (e.g. dealer signup or profile settings) of the consent text you agreed to

• Timestamps of your opt-in, confirmation and unsubscription

• A record of these steps as evidence of your consent

The confirmation email is sent as a transactional email via Brevo (Section 9).

Newsletter list at Brevo

Only after you have confirmed your subscription, the following data is transferred to Brevo and stored in the FurtherSales newsletter list there, so that the newsletter can be sent to you and tailored to your interests:

• Email address

• Name, if stored in your profile

• Preferred language

• Machinery categories of listings for which you sent inquiries or price proposals while signed in, if any (category names only — no message content or prices)

• Where you subscribed (e.g. dealer signup or profile settings)

Unconfirmed requests are not transferred. When you unsubscribe — including via an unsubscribe link in a newsletter sent through Brevo — you are removed from this list. Your subscription status and consent records remain stored with FurtherSales.

Unsubscribing

You can withdraw your consent at any time with effect for the future, via the unsubscribe link in our emails or in your profile settings.

Public listings and dealer profiles can be viewed by anyone, but the interactive functions of FurtherSales Network are intended for business users. The platform does not knowingly address or collect personal data from minors. If we become aware that personal data of a minor has been submitted without appropriate authorisation, we will delete it without undue delay.

AI-supported search

When you use the AI-supported search or equipment advisor, the text you enter and, where applicable, a selected image are processed with AI functionality provided via the Base44 platform (Section 2) in order to interpret your request and suggest matching machines. Please do not enter personal data in search requests.

Machine translation (where enabled)

Where machine translation of listing descriptions is enabled, the listing description is translated via the Google Cloud Translation service, using a FurtherSales service operated on Google Cloud (Cloud Run, with Firestore for usage limits). Listing descriptions are business content provided by dealers.

Automated decision-making

No automated decision-making within the meaning of Art. 22 GDPR takes place on this platform. No decisions with legal or similarly significant effects are made solely on the basis of automated processing of personal data.

We reserve the right to update this Privacy Policy to reflect changes in legal requirements or our services. The current version is always available on this page. We recommend checking this page periodically. The version history at the top of this page documents all material changes.