Guidelines for Information Requests and Orders

These guidelines lay down the conditions for Catawiki’s process regarding information requests by law enforcement authorities and orders by judicial entities. Any request we receive from law enforcement authorities or judicial entities should fulfill these conditions. Law enforcement officers and representatives of judicial authorities can contact us about these guidelines at: lawenforcement@catawiki.com.

While Catawiki is committed to cooperating with law enforcement and judicial authorities, we will only comply with orders that are lawful, proportionate, and respect the rights of our users.

1. Catawiki B.V. is responsible for information requests and orders

Catawiki B.V. is a company registered and based in the Netherlands, that provides a curated marketplace to users worldwide. The entity Catawiki B.V., as data controller, is responsible for handling all data disclosure requests and orders from law enforcement and judicial authorities relating to user and or transactional information. Therefore, all information requests and orders must be addressed to Catawiki B.V., even if we have a local entity established in a country where the requesting law enforcement authority is from. We will not provide any information if the request is not addressed to Catawiki B.V.

2. Information stored by Catawiki B.V.

The privacy and protection of personal data of our users is very important to us. Nonetheless, we will of course support law enforcement authorities as much as possible if we are able and obliged to do so. It may happen we don’t have the requested information or not have it fully stored in our system. 

Further information about the types of personal data we collect and store can be found in our Data Protection and Privacy Notice. Generally, we will respond to a valid and properly notified request to the extent permitted by our Terms of Use, Data Protection and Privacy Notice and applicable law.

Information Requests

3. Requests from Dutch, Belgian or Luxembourg law enforcement authorities 

We kindly ask authorities from the Netherlands, Belgium and Luxembourg with supervisory and investigative powers to provide us with a warrant, court order or other legally binding request to compel the provision of a user’s (personal) data. All the conditions mentioned under section 5 should be fulfilled before we are able to provide the requested information.

4. Requests from law enforcement authorities outside the Benelux  

Law enforcement authorities outside of the Netherlands, Belgium and Luxembourg are requested to submit a request under the European Investigation Order (EIO) or an applicable Mutual Legal Assistance Treaty (MLAT)m or issue a Letter Rogatory, as applicable, to the Dutch authorities.

5. What information should be included in the request?

As mentioned, we will only process requests that are addressed to Catawiki B.V. Requests addressed to local Catawiki entities or Catawiki Services will not be processed.

In addition, we will only process requests that fulfill the following conditions. The request must be in formal writing, in PDF format and contain:

• the legal basis of the request, including the legal citation, and a (brief) summary of the investigation;

• a clear description of the natural or legal person(s) whose information is requested. Please note: we can only find users in our system if we have specific details of that person, such as  a username, full name or an email address;

• a clear overview of the specific data points that are required for the investigation and the period within which the information is sought. Requesting 'all data of this user' is not specific enough for us to be able to comply with the request;

• the expected response period. Please note it may take some time to gather the information if the scope of the request is broad;

• the name of the issuing authority, the name, badge/ID number and signature of the responsible agent or officer, the email address and a direct contact number.

Please be as specific as possible and remember that all information requests must be reasonable, proportionate and necessary for the stated purpose.

6. Where should you send your request to?

For a Law Enforcement Authority from The Netherlands, Belgium or Luxembourg: lawenforcement@catawiki.nl or addressed to:

Catawiki B.V.

Sint Jorissteeg 2 

1012 XV Amsterdam

For a Law Enforcement Authority from any other countries within EU than the Netherlands, Belgium or Luxembourg:

Please reiterate your request via the official channels Europol, Interpol or judicial channels.

For a Law Enforcement Authority from countries outside of the EU: 

International Letter of Request (ILOR) issued by a designated prosecuting authority or a Court to:

Ministry of Justice in The Hague - Office for International Legal Assistance in Criminal Matters

Ministerie van Justitie

Afdeling Internationale Rechtshulp in Strafzaken (AIRS)

Postbus 20301

2500 EH Den Haag

7. Compliance with Article 10 of the Digital Services Act (DSA)

Catawiki B.V. will comply with orders issued under Article 10 of the EU Digital Services Act (DSA) by competent judicial or administrative authorities of any EU Member State, in line with applicable laws and regulations.

Authorities issuing an Article 10 DSA Order should ensure that the request:

• Is submitted in writing, identifying the issuing authority and including a unique order identifier.

• Clearly states the legal basis under EU or national law.

• Specifies the scope of requested data and the purpose for which it is sought.

• Is also sent to the Netherlands’ Digital Services Coordinator (Autoriteit Consument en Markt).

Catawiki will process and respond to valid orders promptly and in accordance with legal requirements.

8. Finally

Please keep the following in mind:

• Our Customer Support team is not authorised to disclose any information by phone or email at any time. All requests from competent authorities will be handled by our Legal team.

• We will only be able to respond to inquiries that comply with these Guidelines.

• We reserve the right to notify our users of a request, except when providing such a notification is prohibited by law. If this is the case, please ensure this is explicitly stipulated in the submitted request or order.