This privacy policy has been translated and we assume that it is correct. However, the German version shall prevail for the interpretation of the Privacy Policy. In the event of any discrepancies between the English and German translations, the German version shall prevail.
Privacy Policy
Last Updated: 10 November 2025
Data Controller
3forONE AG
Obere Paulistrasse 13
8834 Feusisberg – Switzerland
Email: support@3forone.com
Phone: +41 52 544 88 88
Commercial Register No.: CH-280.3.014.107-9
What Data Do We Collect?
We process personal data that arises when you visit or use our platform.
This may include technical connection data, usage data, and communication data.
Purpose of Processing
We use personal data to provide, manage, optimize, and further develop our platform; to conduct auctions; to communicate with you; and to meet legal obligations.
Your Rights
You have the right to access, rectify, erase, restrict processing, receive data portability, object to processing, and lodge a complaint with a data protection authority.
1. Introduction
This policy explains how personal data is processed in the context of online and hybrid auctions and what rights you have under applicable law.
2. Controller
3forONE AG
Obere Paulistrasse 13
8834 Feusisberg – Switzerland
Email: support@3forone.com
Phone: +41 52 544 88 88
3. Hosting
Our website is hosted by a professional hosting provider within the EU.
A data processing agreement (Art. 28 GDPR) has been concluded with this provider.
4. Cookies and Consent Management
We use essential cookies to enable core functions such as login and language preferences.
Optional cookies (e.g., for analytics) are only activated after your consent.
Your consent choices are stored and can be changed at any time.
5. Google Analytics
We use Google Analytics (Google Ireland Ltd.) with IP anonymization enabled.
Processing occurs only with your consent (Art. 6 (1)(a) GDPR) and for statistical purposes.
You can withdraw your consent at any time via the consent tool.
6. Newsletter
Newsletters are sent only after a double-opt-in confirmation.
We record the time, IP address, and content of the consent.
You can unsubscribe at any time via the unsubscribe link or by email.
7. Contact
When you contact us, we process the data you provide to handle your request.
Legal basis: Art. 6 (1)(b) and (f) GDPR.
8. Participation and System Processes
To participate in auctions, registration is required.
We process your contact and login data, as well as usage information necessary to ensure proper functionality.
We also process data on platform interactions for the operation, execution, personalization, and optimization of our services.
Processing is based on your consent (Art. 6 (1)(a) GDPR), the necessity to perform a contract (Art. 6 (1)(b)), and our legitimate interest in maintaining a secure, user-friendly platform (Art. 6 (1)(f)).
No personal data is shared with third parties for advertising purposes.
Personal data is processed to ensure the secure, transparent, and lawful execution of auctions.
9. Data Processing for Auctions on 3forone.auction
For auctions conducted on 3forone.auction, 3forONE AG acts as the sole data controller (Art. 4 No. 7 GDPR).
External partners (e.g., auction houses or sales organizations) use the platform only within their operational responsibilities (e.g., catalog creation, hammer price confirmation, invoicing) and are responsible for their own content and actions.
No joint controllership under Art. 26 GDPR exists.
If necessary, data processing agreements (Art. 28 GDPR) may be concluded with partners providing technical or organizational support services.
10. Data Disclosure
Personal data is shared only to the extent necessary for conducting, evaluating, or processing an auction, for example, with the respective auction house or seller.
Data is not shared for marketing or advertising purposes.
11. Security and Encryption
The platform is protected by SSL/TLS encryption.
Passwords are securely hashed (e.g., bcrypt or Argon2).
System access is role-based and secured with multi-factor authentication.
Regular updates and encrypted backups help safeguard your data.
12. Data Transfers to Third Countries
If data is transferred outside Switzerland or the EU/EEA (e.g., to Google), this is based on Standard Contractual Clauses (SCCs) and supplementary safeguards.
13. Storage Period
Data is stored only as long as necessary for the stated purposes or as required by law.
14. Minors
The platform is not intended for children under 16.
Registration is permitted only from the legal minimum age or with parental consent.
15. Your GDPR Rights
You may request access, rectification, deletion, restriction, portability, or objection to processing.
Requests can be sent to support@3forone.com.
We respond within one month (extendable by two months for complex cases).
16. Right to Object (Art. 21 GDPR)
You may object to processing at any time for reasons relating to your situation.
You can also object to direct marketing at any time without providing a reason.
17. Right to Complain
You may lodge a complaint with any competent data protection authority.
In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC).
18. Data Breach Notification
In case of a personal data breach, we will notify the competent authority within 72 hours (Art. 33 GDPR) and affected individuals under Art. 34 GDPR if there is a risk to their rights or freedoms.
19. Changes to This Privacy Policy
We may update this Privacy Policy to reflect legal or technical changes.
The version in effect at the time of your visit applies.