This Privacy Policy has been translated and is believed to be accurate. However, the interpretation of the privacy policy is subject to the German version. The German version shall prevail if there are any discrepancies between the English and German translations.

Privacy Policy

Effective: June 2025

Summary

Responsible Entity:
3forONE AG
Obere Paulistrasse 13
8834 Feusisberg – Switzerland
📧 support@3forone.com
📞 +41 52 544 88 88

What data do we collect?
Examples include: IP address, device information, contact details during registration, and system-based activity data.

What do we use the data for?
To enable participation in auctions, communicate with you, and ensure security and ongoing functionality of the platform.

Your rights:
You have the right to access, rectify, delete, restrict processing, request data portability, object to processing, and lodge a complaint with a supervisory authority.

1. Introduction

We are pleased about your interest in our platform. Protecting your personal data is important to us. Below, we explain how we process your data in the context of using our online and hybrid auctions, as well as your related rights.

2. Data Controller

3forONE AG
Obere Paulistrasse 13
8834 Feusisberg – Switzerland
📧 support@3forone.com
📞 +41 52 544 88 88

3. Hosting

Our website is hosted by a professional service provider within the EU. A data processing agreement pursuant to Art. 28 GDPR is in place.

4. Cookies and Consent Management

We use cookies on our website:

  • Essential cookies (e.g. login, language settings)

  • Optional cookies (e.g. for analytics or marketing – only with your consent)

You can select your preferences through the cookie banner on your first visit. All consents are documented (Art. 7 GDPR) and can be changed at any time.

5. Google Analytics

We use Google Analytics (Google Ireland Ltd., Dublin) to measure general usage trends on our website.

IP anonymization is enabled. Data processing is based solely on your consent (Art. 6(1)(a) GDPR). Retention: max. 14 months.

➡️ Browser add-on
➡️ Opt-out cookie link
➡️ Google privacy details

6. Newsletter

If you subscribe to our newsletter, we process your email address and optional personal details. Registration is via a double opt-in.

You may withdraw your consent at any time, e.g. via the unsubscribe link or by contacting support@3forone.com.

7. Contact

If you contact us (email, phone, fax), we process your inquiry and any personal information you provide in that context.

Legal bases:

  • Art. 6(1)(b) GDPR (contractual communication)

  • Art. 6(1)(f) GDPR (legitimate interest)

  • Art. 6(1)(a) GDPR (voluntary consent)

8. Participation and System-Based Operations

Registration is required to take part in auctions. We process, for example:

  • Contact and address details

  • Optional company data

  • Encrypted login credentials

To ensure system-based functionality, certain usage-related events may be processed in relation to your registration. If you are logged in, corresponding operations may technically be associated with your user account.

Such information is processed solely to ensure internal system operations. No data is shared or made visible to other users or third parties.

Legal bases:

  • Art. 6(1)(b) GDPR (contractual necessity)

  • Art. 6(1)(f) GDPR (stability, platform operation)

9. Joint Processing with BBAG

Auctions via bbag.auction are coordinated with BBAG – Baden-Badener Auktionsgesellschaft e.V.

  • 3forONE AG provides the technical infrastructure

  • BBAG conducts the auction process

Data (e.g. bidding, billing) is processed under separate but coordinated responsibilities.

10. Data Sharing

Data is shared only when necessary to complete the auction process, e.g. with the seller or BBAG. No use for marketing purposes occurs.

11. Security

Our website uses SSL/TLS encryption. Passwords are stored in encrypted form. The platform is maintained and secured against unauthorized access.

12. Transmission Security

Internet-based data transfers (e.g. via email) may have security gaps. For sensitive communication, secure channels are recommended.

13. Retention Period

We retain personal data only as long as necessary or legally required. After that, data is deleted or anonymized.

14. Your GDPR Rights

You have the right to:

  • Access (Art. 15)

  • Rectification (Art. 16)

  • Erasure (Art. 17)

  • Restriction (Art. 18)

  • Portability (Art. 20)

  • Objection (Art. 21)

15. Right to Object (Art. 21 GDPR)

Objection on specific grounds:
You may object to processing based on Art. 6(1)(e) or (f) GDPR at any time for reasons arising from your particular situation.

Objection to direct marketing:
You can object to the use of your data for direct marketing at any time – no justification required.

16. Complaints

You have the right to lodge a complaint with a supervisory authority in your country of residence, workplace, or where the data breach occurred.

17. Updates

This privacy policy may change due to legal, technical, or organizational reasons. The version valid at the time of your visit shall apply.