This privacy policy has been translated and we assume that it is correct. However, the German version shall prevail for the interpretation of the Privacy Policy. In the event of any discrepancies between the English and German translations, the German version shall prevail.
Privacy Policy
Last Updated: 10 November 2025
Data Controller
3forONE AG
Obere Paulistrasse 13
8834 Feusisberg – Switzerland
Email: support@3forone.com
Phone: +41 52 544 88 88
Commercial Register No.: CH-280.3.014.107-9
What Data Do We Collect?
We process personal data that arises when you visit or use our platform.
This may include technical connection data, usage data, and communication data.
Purpose of Processing
We use personal data to provide, manage, optimize, and further develop our platform; to conduct auctions; to communicate with you; and to meet legal obligations.
Your Rights
You have the right to access, rectify, erase, restrict processing, receive data portability, object to processing, and lodge a complaint with a data protection authority.
1. Introduction
This policy explains how personal data is processed in the context of online and hybrid auctions and what rights you have under applicable law.
2. Controller
3forONE AG
Obere Paulistrasse 13
8834 Feusisberg – Switzerland
Email: support@3forone.com
Phone: +41 52 544 88 88
3. Hosting
Our website is hosted by a professional hosting provider within the EU.
A data processing agreement (Art. 28 GDPR) has been concluded with this provider.
4. Cookies and Consent Management
We use essential cookies to enable core functions such as login and language preferences.
Optional cookies (e.g., for analytics) are only activated after your consent.
Your consent choices are stored and can be changed at any time.
5. Google Analytics
We use Google Analytics (Google Ireland Ltd.) with IP anonymization enabled.
Processing occurs only with your consent (Art. 6 (1)(a) GDPR) and for statistical purposes.
You can withdraw your consent at any time via the consent tool.
6. Newsletter
Newsletters are sent only after a double-opt-in confirmation.
We record the time, IP address, and content of the consent.
You can unsubscribe at any time via the unsubscribe link or by email.
7. Contact
When you contact us, we process the data you provide to handle your request.
Legal basis: Art. 6 (1)(b) and (f) GDPR.
8. Participation and System Processes
To participate in auctions, registration is required.
We process your contact and login data, as well as usage information necessary to ensure proper functionality.
We also process data on platform interactions for the operation, execution, personalization, and optimization of our services.
Processing is based on your consent (Art. 6 (1)(a) GDPR), the necessity to perform a contract (Art. 6 (1)(b)), and our legitimate interest in maintaining a secure, user-friendly platform (Art. 6 (1)(f)).
No personal data is shared with third parties for advertising purposes.
Personal data is processed to ensure the secure, transparent, and lawful execution of auctions.
8a. Quality Assurance, Usage Analysis and System Logs
As part of the operation of our platform, we automatically process certain usage and system data. This includes in particular technical events, interactions within the platform, as well as process and log data required for the stability, security and proper execution of online and hybrid auctions.
This data is used to:
– ensure the functionality and technical quality of the platform,
– enable and document the execution of auctions,
– detect misuse or unauthorized activities,
– improve user experience and system performance,
– carry out internal analyses for the further development of our services.Processing is based on Art. 6 (1) lit. b GDPR (performance of a contract) and Art. 6 (1) lit. f GDPR (legitimate interest in a stable, secure and optimized platform).
8b. Central User Account and Cross-Platform Use
3forONE AG operates a central user account system for participation in online and hybrid auctions within the auction network technically operated by 3forONE.
This network includes in particular the platforms:
– 3forone.auction
– bbag.auction
– osarus.3forone.auction
as well as other auction platforms provided or operated by 3forONE.A user account created once can generally be used across platforms without requiring a new full registration.
Within the scope of this cross-platform usage, personal data such as registration data, contact data, verification status, usage information, as well as technical and auction-related data are processed and managed centrally.
To the extent necessary for participation in a specific auction, such data may be transmitted to the respective auction organizer in order to:
– verify eligibility for participation,
– define bidding permissions,
– carry out identity or financial checks,
– ensure the proper conduct of the auction,
– and enable contractual processing.The specific bidding rights may vary depending on the auction, organizer or user profile and are determined exclusively by the respective organizer.
Processing is carried out on the basis of Art. 6 (1) lit. b GDPR, Art. 6 (1) lit. f GDPR and, where applicable, Art. 6 (1) lit. a GDPR.
9. Data Processing for Auctions on 3forone.auction
For the operation of the platform 3forone.auction and the central user account system, 3forONE AG acts as the data controller within the meaning of Art. 4 No. 7 GDPR.
Where auctions are conducted directly by 3forONE AG, 3forONE processes personal data in connection with the execution of the auction, in particular for participant management, bidding processes, awarding of lots, communication and contractual handling.
Where auctions are conducted in cooperation with external partners or auction organizers, such partners process personal data insofar as this is necessary for auction-related activities under their responsibility, in particular catalog creation, participant approval, hammer decisions, invoicing and contractual processing, in their own capacity as data controllers.
Joint controllership within the meaning of Art. 26 GDPR does not exist.
Where external partners act solely as service providers, agreements pursuant to Art. 28 GDPR may be concluded.
10. Data Disclosure
Personal data will only be transferred where this is necessary for the provision of the platform, participation in auctions, the conduct of auctions or the execution of resulting contractual relationships.
This includes in particular the transmission of data to the respective organizer of the auction, to sellers, to other parties involved in the auction process, as well as to technical or organizational service providers.
Within the framework of the central user account system operated by 3forONE, personal data may also be processed and made available across platforms within the auction network where necessary to enable a unified user account, ensure technical functionality, grant access to specific auctions, carry out identity or financial checks, define bidding permissions or ensure the secure and proper conduct of auctions.
Where data is transmitted to an auction organizer, such organizer processes the data under its own data protection responsibility.
Personal data will not be transferred to third parties for advertising purposes.
Internal evaluations for quality assurance, technical analysis, system security, prevention of misuse and further development and optimization of our platforms and services remain unaffected.
11. Security and Encryption
The platform is protected by SSL/TLS encryption.
Passwords are securely hashed (e.g., bcrypt or Argon2).
System access is role-based and secured with multi-factor authentication.
Regular updates and encrypted backups help safeguard your data.
12. Data Transfers to Third Countries
If data is transferred outside Switzerland or the EU/EEA (e.g., to Google), this is based on Standard Contractual Clauses (SCCs) and supplementary safeguards.
13. Storage Period
Data is stored only as long as necessary for the stated purposes or as required by law.
14. Minors
The platform is not intended for children under 16.
Registration is permitted only from the legal minimum age or with parental consent.
15. Your GDPR Rights
You may request access, rectification, deletion, restriction, portability, or objection to processing.
Requests can be sent to support@3forone.com.
We respond within one month (extendable by two months for complex cases).
16. Right to Object (Art. 21 GDPR)
You may object to processing at any time for reasons relating to your situation.
You can also object to direct marketing at any time without providing a reason.
17. Right to Complain
You may lodge a complaint with any competent data protection authority.
In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC).
18. Data Breach Notification
In case of a personal data breach, we will notify the competent authority within 72 hours (Art. 33 GDPR) and affected individuals under Art. 34 GDPR if there is a risk to their rights or freedoms.
19. Changes to This Privacy Policy
We may update this Privacy Policy to reflect legal or technical changes.
The version in effect at the time of your visit applies.