Privacy Policy for AuxBid.de

Fa. Zankoo.de

Owner: Daniel Schwieger

Stobraer Str. 47

99510 Apolda

Germany

Phone: +49 (0) 3644 6053168

Fax: +49 (0) 3644 5109995

Email: info@auxbid.de

Website: https://www.auxbid.de

hereinafter referred to as “AuxBid.de”, “we”, “us”, the “platform” or the “auction portal”.

1. General Information

The protection of personal data is important to us. With this Privacy Policy, we inform you which personal data we process when AuxBid.de is used, for which purposes this takes place, on which legal basis the processing is carried out, and which rights data subjects have.

Personal data means any information relating to an identified or identifiable natural person. This includes in particular name, address, email address, telephone number, IP address, user account, payment data, order data, communication data and other information that can be assigned to a person.

This Privacy Policy applies to the use of AuxBid.de, to user accounts, buyers, sellers, commercial providers, private providers, shop operators, interested parties, website visitors and to all functions provided through the platform.

2. Controller

The controller within the meaning of the General Data Protection Regulation is:

Fa. Zankoo.de

Owner: Daniel Schwieger

Stobraer Str. 47

99510 Apolda

Germany

Phone: +49 (0) 3644 6053168

Fax: +49 (0) 3644 5109995

Email: info@auxbid.de

Website: https://www.auxbid.de

3. Data Protection Officer

No data protection officer has currently been appointed.

If a data protection officer is required by law or is appointed in the future, the relevant contact details will be published here.

4. Legal Bases for Processing

We process personal data on the basis of the General Data Protection Regulation, in particular on the following legal bases:

·         Art. 6 para. 1 lit. a GDPR, where consent has been given;

·         Art. 6 para. 1 lit. b GDPR, where processing is necessary for the performance of a contract or for taking pre-contractual steps;

·         Art. 6 para. 1 lit. c GDPR, where we are legally obliged to process data;

·         Art. 6 para. 1 lit. f GDPR, where processing is necessary to protect legitimate interests;

·         Art. 9 para. 2 GDPR, insofar as special categories of personal data are exceptionally affected and a legal basis or explicit consent exists.

For cookies, tracking technologies and similar technologies, we also observe the provisions of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz), in particular Section 25 TDDDG.

5. Access Data and Server Log Files

When AuxBid.de is accessed, technical data transmitted by the browser or device is processed automatically.

This may include:

·         IP address;

·         date and time of access;

·         page or file accessed;

·         referrer URL;

·         browser type and browser version;

·         operating system;

·         device used;

·         amount of data transferred;

·         HTTP status code;

·         host name of the accessing computer.

Processing is carried out to provide the website, to ensure technical security, to analyse errors, to prevent misuse and fraud, and to ensure the stability of the platform.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable and functional operation of the platform.

Server log files are stored only for as long as is required for the purposes stated. Longer storage may occur if this is necessary to investigate misuse, attempted fraud, technical attacks or legal violations.

6. Registration and User Account

We process personal data for registration and use of a user account.

This may include:

·         first name and last name;

·         username;

·         email address;

·         telephone number;

·         address;

·         password in encrypted form;

·         registration date;

·         login data;

·         user role;

·         account status;

·         language settings;

·         security information;

·         communication and notification settings.

For commercial users, the following data may additionally be processed:

·         company name;

·         legal form;

·         business address;

·         authorised representative;

·         VAT identification number;

·         commercial register data;

·         trade licence or business registration evidence;

·         shop data;

·         business contact details;

·         legal notice details;

·         seller terms and conditions;

·         withdrawal instructions;

·         shipping and packaging information.

Processing is carried out to create and manage the user account, to provide the platform functions, to communicate with users, to ensure security, to perform contracts and to comply with legal obligations.

The legal bases are Art. 6 para. 1 lit. b GDPR, Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR.

7. Offers, Auctions, Classified Advertisements and Shops

When users create offers, auctions, live auctions, classified advertisements, real estate listings, vehicle listings or shop content, we process the data required for this purpose.

This may include:

·         offer data;

·         item images;

·         item videos;

·         descriptions;

·         prices;

·         reserve prices;

·         bids;

·         auction periods;

·         shipping information;

·         location details;

·         collection information;

·         seller information;

·         shop information;

·         communication data;

·         publication status;

·         editing history;

·         technical metadata.

Such data may be public on the platform or visible to other users to the extent required for the respective offer function.

Processing is carried out to provide the offer, sales, auction, listing and shop functions.

The legal bases are Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR.

Our legitimate interest lies in operating a functional marketplace, displaying offers and technically managing the platform.

8. Purchases, Bids and Contract Conclusions

For purchases, auctions, live auctions, bids, knockdowns, price proposals or other transactions, we process personal data to carry out the respective platform function.

This may include:

·         buyer data;

·         seller data;

·         order data;

·         bid data;

·         payment status;

·         shipping status;

·         invoice information;

·         delivery address;

·         collection information;

·         transaction number;

·         order number;

·         communication history;

·         reversal data;

·         complaint data;

·         buyer protection data.

Processing is carried out to process the transaction, document the conclusion of the contract, process payments, enable communication between buyer and seller, prevent fraud and handle disputes.

The legal bases are Art. 6 para. 1 lit. b GDPR, Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR.

9. Payment Processing, Fees and Payouts

For paid services, shop packages, fees, sales commissions, purchases, payouts and refunds, we process payment and billing data.

This may include:

·         name;

·         address;

·         email address;

·         invoice data;

·         payment amount;

·         payment method;

·         payment status;

·         transaction ID;

·         bank details;

·         IBAN;

·         BIC;

·         PayPal data;

·         Stripe data;

·         credit card data in tokenised form or in a form provided by the payment service provider;

·         payout data;

·         fee statements;

·         chargebacks;

·         refunds;

·         dunning data.

Payment processing may be carried out through external payment service providers, in particular:

·         Stripe;

·         PayPal;

·         credit card providers;

·         banks;

·         other payment service providers displayed on the platform.

When Stripe is used, payment data is transmitted to Stripe to the extent required for payment processing, fraud prevention, verification or payout. Stripe provides information on its own data processing in its privacy policy.

When PayPal is used, payment data is transmitted to PayPal to the extent required for payment processing. PayPal explains in its privacy policy how data is collected, used, stored, disclosed and protected.

Processing is carried out for payment processing, invoicing, fee accounting, payouts to sellers, refunds, fraud prevention and compliance with legal obligations.

The legal bases are Art. 6 para. 1 lit. b GDPR, Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR.

Our legitimate interest lies in secure payment processing, the prevention of payment defaults, fraud prevention and proper billing.

10. Buyer Protection, Fraud Prevention and Security Checks

AuxBid.de may provide buyer protection functions and security mechanisms to protect buyers and sellers against fraud, misuse, non-delivery, incorrect delivery, identity misuse, payment disruptions and other risks.

In particular, the following data may be processed:

·         user account data;

·         transaction data;

·         payment data;

·         shipping evidence;

·         delivery evidence;

·         collection confirmations;

·         communication histories;

·         complaint data;

·         photos or videos of the item;

·         identity data;

·         technical access data;

·         IP addresses;

·         device information;

·         risk assessments;

·         internal review notes;

·         evidence and documents.

Processing is carried out to examine buyer protection cases, prevent fraud, review payments and payouts, handle disputes, prevent misuse and enforce legal claims.

The legal bases are Art. 6 para. 1 lit. b GDPR, Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR.

Our legitimate interest lies in protecting users, securing the platform, preventing fraud and enforcing our platform rules.

11. Verification of Users

AuxBid.de may offer users the option of being marked as a verified member.

Depending on the type of user, the following data in particular may be processed for this purpose:

For private users:

·         name;

·         address;

·         date of birth;

·         identity document data;

·         proof of address;

·         invoices or registration confirmations;

·         other proof of identity.

For commercial users:

·         company name;

·         address;

·         authorised representative;

·         trade licence or business registration evidence;

·         commercial register extract;

·         VAT identification number;

·         proof of identity;

·         other business-related evidence.

Processing is carried out for identity verification, fraud prevention, activation of certain functions and marking as a verified member.

The legal bases are Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR. Where consent is required, processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR.

Copies of identity documents and sensitive evidence are processed only to the extent required. Information that is not required may be redacted if it is not needed for the review.

12. Messages and Communication

When users communicate with each other through AuxBid.de or communicate with us, we process communication data.

This may include:

·         sender;

·         recipient;

·         message content;

·         time;

·         attachments;

·         communication status;

·         technical metadata.

Processing is carried out to provide the messaging function, to carry out transactions, to process enquiries, complaints and buyer protection cases, to prevent fraud and to enforce platform rules.

The legal bases are Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR.

We may review messages to the extent legally permitted if there are specific indications of fraud, misuse, legal violations, fee circumvention or breaches of our Terms and Conditions.

13. Reviews

When users submit or receive reviews, we process review data.

This may include:

·         username;

·         review content;

·         review score;

·         transaction reference;

·         time;

·         response by the reviewed user;

·         reports concerning reviews.

Reviews may be visible on the platform.

Processing is carried out to provide the review system, build trust, prevent fraud, ensure quality control and enforce platform rules.

The legal bases are Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR.

Our legitimate interest lies in a transparent and trustworthy marketplace.

14. Contacting Us

If users contact us, for example by email, telephone, fax, contact form or support system, we process the transmitted data.

This may include:

·         name;

·         email address;

·         telephone number;

·         user account;

·         request;

·         message;

·         attachments;

·         time of the enquiry;

·         processing status.

Processing is carried out to handle the enquiry, communicate, document the matter and protect legitimate interests.

The legal bases are Art. 6 para. 1 lit. b GDPR, Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR.

15. Newsletters and Notifications

AuxBid.de may inform users by email or platform message about account-related processes, transactions, security notices, buyer protection cases, fees, payouts, offers or important changes.

Transaction-related messages are necessary for use of the platform and are sent on the basis of Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR.

Advertising newsletters are sent only if consent has been given for this purpose or if a statutory permission applies.

The legal basis for advertising newsletters is Art. 6 para. 1 lit. a GDPR.

Consent may be withdrawn at any time with effect for the future.

16. Cookies and Similar Technologies

AuxBid.de uses cookies and similar technologies.

Cookies are small text files stored on the device. They may be technically necessary or may optionally be used for analytics, convenience functions, marketing or external services.

16.1 Technically Necessary Cookies

Technically necessary cookies are required for the platform to function.

This may include:

·         login cookies;

·         session cookies;

·         shopping cart or checkout cookies;

·         security cookies;

·         CSRF protection cookies;

·         language settings;

·         cookie consent status.

Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. To the extent access to the device is concerned, storage or access is carried out pursuant to Section 25 para. 2 TDDDG, insofar as this is technically necessary.

16.2 Non-Essential Cookies

Non-essential cookies, in particular for analytics, tracking, marketing or external media, are used only if the user has consented.

The legal basis is Art. 6 para. 1 lit. a GDPR. To the extent access to the device is concerned, storage or access is carried out pursuant to Section 25 para. 1 TDDDG.

Consent may be withdrawn at any time with effect for the future.

17. Consent Management

AuxBid.de may use a consent management tool to obtain and document consent for cookies, tracking, external media or other services requiring consent.

The following data may be processed:

·         consent status;

·         time of consent;

·         IP address in shortened or complete form;

·         browser information;

·         device information;

·         consent ID;

·         selected categories.

Processing is carried out to obtain, manage and document consent.

The legal bases are Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR.

18. Analytics and Marketing Services

AuxBid.de may use analytics and marketing services to evaluate platform use, identify errors, improve offers or measure advertising.

Such services are used only to the extent consent has been given or another legal basis exists.

In particular, the following data may be processed:

·         IP address;

·         device information;

·         browser data;

·         usage behaviour;

·         page views;

·         click behaviour;

·         referrer;

·         transaction events;

·         pseudonymous IDs.

For services requiring consent, the legal basis is Art. 6 para. 1 lit. a GDPR.

Specific services used must be added to this Privacy Policy as soon as they are actively used on AuxBid.de.

19. External Media and Content

AuxBid.de may integrate external content, for example videos, maps, captcha services, fonts, security services or social media content.

When such content is accessed, personal data may be transmitted to the respective provider, in particular IP address, browser data, device information and usage data.

External media are loaded only if they are technically necessary or if the user has given consent.

Depending on the service, the legal basis is Art. 6 para. 1 lit. a GDPR, Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR.

Specific external services must be added as soon as they are actively used on AuxBid.de.

20. Hosting and Technical Service Providers

AuxBid.de is operated with a technical service provider or hosting provider.

Personal data may be processed on the hosting provider’s servers.

The data processed may include in particular:

·         website data;

·         databases;

·         user accounts;

·         offer data;

·         communication data;

·         payment status data;

·         log files;

·         technical metadata.

Processing is carried out to provide, secure, maintain and technically manage the platform.

The legal bases are Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR.

Where required, data processing agreements are concluded with processors used.

Captcha or Security Service

Name of service: Google reCAPTCHA

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Purpose: Protection against spam, bots, automated attacks, misuse of forms, fake registrations and other security risks.

Link to privacy policy: https://policies.google.com/privacy

Link to terms of service: https://policies.google.com/terms

AuxBid.de uses Google reCAPTCHA to check whether entries on the platform are made by a human or by automated programs. This particularly serves to protect contact forms, registrations, login areas, messaging functions, review functions and other security-relevant forms.

When Google reCAPTCHA is used, personal data may be transmitted to Google. This may include in particular:

·         IP address;

·         browser information;

·         device information;

·         operating system;

·         referrer URL;

·         date and time of access;

·         mouse movements;

·         keyboard entries;

·         dwell time;

·         interactions with the website;

·         cookies and comparable technologies.

Processing is carried out to protect the platform against misuse, spam, bots, automated attacks, fake registrations and fraudulent activity.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure operation of the platform, the prevention of misuse and the protection of users.

To the extent Google reCAPTCHA uses cookies or comparable technologies that are not strictly technically necessary, processing is carried out only on the basis of consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG.

Consent may be withdrawn at any time with effect for the future.

Further information about data processing by Google can be found in Google’s privacy policy and in Google’s terms of service.

Hosting Provider

Name of hosting provider: EGhosting.pro

Registered office of the provider: Fa. Zankoo.de, Owner: Daniel Schwieger, Stobraer Str. 47, 99510 Apolda, Germany

Link to privacy policy: https://eghosting.pro/datenschutz

AuxBid.de is hosted by EGhosting.pro. The provider of EGhosting.pro is Fa. Zankoo.de, Owner: Daniel Schwieger, Stobraer Str. 47, 99510 Apolda, Germany.

As part of hosting, personal data is processed to the extent required for the technical operation, security, maintenance and provision of the platform.

This may include in particular:

·         IP addresses;

·         server log files;

·         user account data;

·         offer data;

·         communication data;

·         payment status data;

·         technical metadata;

·         databases;

·         uploaded images, videos and documents.

Processing is carried out to provide, secure, maintain and technically manage AuxBid.de.

The legal bases are Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR.

Our legitimate interest lies in the secure, stable and functional operation of the platform.

21. Recipients of Personal Data

Personal data may be transmitted to the following recipients where this is necessary:

·         payment service providers;

·         banks;

·         credit card providers;

·         hosting providers;

·         IT service providers;

·         email service providers;

·         shipping service providers;

·         buyers;

·         sellers;

·         commercial providers;

·         tax advisers;

·         legal advisers;

·         debt collection service providers;

·         authorities;

·         courts;

·         law enforcement authorities;

·         verification service providers;

·         fraud prevention services.

Data is disclosed only where a legal basis exists, in particular for contract performance, payment processing, fraud prevention, compliance with legal obligations or protection of legitimate interests.

22. Data Transfers to Third Countries

Personal data may be processed outside the European Union or the European Economic Area if we use service providers that process data in third countries.

This may be the case in particular with international payment service providers, analytics providers, security services, hosting services or communication services.

Data is transferred only if the statutory requirements are met, in particular by means of:

·         an adequacy decision by the European Commission;

·         EU Standard Contractual Clauses;

·         additional safeguards;

·         explicit consent;

·         other statutory permissions.

23. Storage Period

Personal data is stored only for as long as this is required for the respective purposes.

The storage period depends in particular on:

·         contract duration;

·         existence of the user account;

·         transaction duration;

·         statutory retention obligations;

·         tax and commercial law obligations;

·         evidence and documentation obligations;

·         limitation periods;

·         open disputes;

·         buyer protection cases;

·         fraud reviews;

·         legal claims.

Business letters, invoices and tax-relevant documents may be stored for several years in accordance with statutory retention obligations.

After the respective retention periods have expired, data is deleted or anonymised unless there is another legal basis for storage.

24. Data Security

We take technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

This may include in particular:

·         encryption;

·         access restrictions;

·         password protection;

·         role-based permission management;

·         logging;

·         security checks;

·         backups;

·         protection against attacks;

·         secure payment processes.

Despite all measures, complete security for data transmission over the internet cannot be guaranteed.

25. Rights of Data Subjects

Data subjects have the following rights in accordance with the statutory provisions:

·         right of access;

·         right to rectification;

·         right to erasure;

·         right to restriction of processing;

·         right to data portability;

·         right to object;

·         right to withdraw consents given;

·         right to lodge a complaint with a data protection supervisory authority.

To exercise these rights, a request may be sent to info@auxbid.de.

26. Withdrawal of Consent

Where processing is based on consent, this consent may be withdrawn at any time with effect for the future.

The lawfulness of processing up to the time of withdrawal remains unaffected.

27. Objection to Processing Based on Legitimate Interests

Where we process personal data on the basis of Art. 6 para. 1 lit. f GDPR, the data subject may object to the processing at any time on grounds relating to his or her particular situation.

We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or unless the processing serves to establish, exercise or defend legal claims.

28. Right to Lodge a Complaint with a Supervisory Authority

Data subjects have the right to lodge a complaint with a data protection supervisory authority if they believe that the processing of personal data violates data protection law.

The competent authority may in particular be the data protection supervisory authority of the federal state in which the controller has its registered office.

29. Obligation to Provide Personal Data

The provision of certain personal data is necessary in order to use AuxBid.de.

Without required data, certain functions cannot be used or can be used only to a limited extent. This applies in particular to registration, user account, purchases, sales, payment processing, buyer protection, payouts, verification and support.

A legal obligation to provide data exists only to the extent provided by statutory provisions.

30. Automated Decision-Making and Profiling

AuxBid.de may use technical review mechanisms to detect fraud, misuse, payment risks, unusual activity or security risks.

User and transaction data may be evaluated automatically for this purpose.

A decision based solely on automated processing that has legal effects or similarly significantly affects the user does not take place unless this is expressly stated and legally permissible.

If automated decisions within the meaning of Art. 22 GDPR are used in the future, data subjects will be informed separately.

31. Changes to this Privacy Policy

We may amend this Privacy Policy if this is required due to technical developments, new functions, changes in the legal situation, new service providers or organisational changes.

The current version is available on AuxBid.de.

Additional Notes for Commercial Providers

Commercial providers are themselves responsible for their own data processing insofar as they process personal data of buyers or interested parties as part of their own business activities.

This applies in particular to:

·         shipping processing;

·         invoicing;

·         customer communication;

·         complaints;

·         withdrawals;

·         statutory warranty;

·         own accounting;

·         own advertising;

·         own data protection obligations.

Commercial providers may use personal data received through AuxBid.de exclusively to perform the respective contract or for legally permissible communication.

Use for advertising, disclosure to third parties or any other use unrelated to the original purpose is permitted only if there is a legal basis or valid consent for this.

Status: June 2026