This Privacy Policy has been translated and is believed to be accurate. However, the interpretation of the privacy policy is subject to the German version. The German version shall prevail if there are any discrepancies between the English and German translations.
Privacy Policy
Effective date: 10 November 2025
Quick Overview
Data Controller
3forONE AG
Obere Paulistrasse 13
8834 Feusisberg – Switzerland
Email: support@3forone.com
Phone: +41 52 544 88 88
Commercial Register No.: CH-280.3.014.107-9
What data do we collect?
We process personal data generated when visiting or using our platform.
This may include technical connection data, usage data and communication data.
Why do we use the data?
To provide, manage, optimize and further develop our platform, to conduct auctions, to communicate with you and to comply with legal obligations.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, objection, and to lodge a complaint with a data-protection authority.
1. Introduction
We explain how personal data is processed in connection with online and hybrid auctions and what rights you have under applicable law.
2. Controller
3forONE AG
Obere Paulistrasse 13
8834 Feusisberg – Switzerland
Email: support@3forone.com
Phone: +41 52 544 88 88
3. Hosting
Our website is hosted by a professional service provider within the EU.
A data-processing agreement pursuant to Art. 28 GDPR is in place.
4. Cookies and Consent Management
We use technically necessary cookies to ensure core functions (e.g., login, language).
Optional cookies (e.g., analytics or statistics) are activated only after your consent.
Your choice is stored and can be changed at any time.
5. Google Analytics
We use Google Analytics (Google Ireland Ltd.) with IP-anonymization.
Processing takes place only after your consent (Art. 6 (1) a GDPR) and serves statistical purposes.
You may withdraw your consent at any time through the consent tool.
6. Newsletter
Newsletters are sent only after a double opt-in procedure.
We record the time, IP address and content of the consent for documentation.
You may unsubscribe at any time via the link provided or by email.
7. Contact
If you contact us, the data you provide will be processed to handle your inquiry.
Legal basis: Art. 6 (1) b and f GDPR.
8. Participation and System Processes
For participation in auctions, registration is required.
We process contact and registration data as well as the necessary usage information to ensure the proper functioning of the platform.
In the course of using the platform, data about usage and interaction is processed insofar as this is necessary for the operation, the execution of auctions, the personalization of content, and the optimization of our services.
Processing is based on your consent (Art. 6 (1)(a) GDPR) and, where necessary, on Art. 6 (1)(b) GDPR (performance of a contract) and Art. 6 (1)(f) GDPR (legitimate interest in a secure and user-friendly platform).
No data is shared with third parties for advertising purposes.
9. Responsibilities in the context of auctions on bbag.auction
For the execution of auctions on bbag.auction, 3forONE AG remains the sole data controller within the meaning of Article 4(7) GDPR.
The Baden-Baden Auction Association e.V. (BBAG) uses the platform exclusively within the scope of its operational activities (e.g. catalogue creation, bid acceptance, invoicing) and acts under its own responsibility for the content it manages.
There is no joint controllership pursuant to Article 26 GDPR.
10. Data Disclosure
Data is shared only where required for auction or contract execution (e.g., with BBAG or sellers).
No data is shared for advertising purposes.
11. Security and Encryption
The platform uses SSL/TLS encryption. Passwords are hashed (e.g., bcrypt/argon2).
System access is role-based and protected by multi-factor authentication. Regular patching and encrypted backups ensure security.
12. International Data Transfers
Where data is transferred outside Switzerland or the EU/EEA (e.g., to Google), we apply Standard Contractual Clauses (SCCs) and additional safeguards to protect your information.
13. Retention Period
Data is retained for as long as necessary for the purposes mentioned above or as required by law.
14. Minors
The platform is not intended for children under 16 years of age. Registration is only permitted at or above the lawful minimum age or with parental consent.
15. Your Rights under the GDPR
You have the right to request access, rectification, erasure, restriction, data portability and to object to processing.
Please send requests to support@3forone.com. We respond within one month (extendable by up to two months for complex cases).
16. Right to Object (Art. 21 GDPR)
You may object to processing based on your particular situation at any time. You may also object to direct marketing without stating reasons.
17. Right to Complain
You may contact any competent data-protection authority. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC).
18. Data Breach Notification
In the event of a personal data breach, we will notify the competent authority within 72 hours (Art. 33 GDPR) and affected individuals where required (Art. 34 GDPR).
19. Changes to this Privacy Policy
We may update this policy to reflect legal or technical developments. The version in effect at the time of your visit applies.