Onlytraders Logo
Back to home
DE

Privacy Policy

This is a translation provided for the convenience of English-speaking visitors. The legally binding version is the German Datenschutzerklärung. In case of any inconsistency, the German version prevails.

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The controller for the data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is No B.S. GmbH, Ritzling 9, 4904 Atzbach, Austria, Phone: +43 664 4269674, E-Mail: billing@onlytraders.com. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data collection when visiting our website

2.1 When you use our website for purely informational purposes, i.e. when you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • The page on our website you visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymised form)

The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string "https://" and the lock icon in your browser bar.

3) Hosting & Content Delivery Network

3.1 For the hosting of our website and the display of the page contents, we use a provider that performs its services itself or through carefully selected sub-contractors exclusively on servers within the European Union.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

3.2 jsDelivr

We use a content delivery network from the following provider: Volentio JSD Limited, Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB, United Kingdom.

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6 (1) (f) GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your terminal device. Some of these cookies are automatically deleted again after the browser is closed (so-called "session cookies"); others remain on your terminal device for longer and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of your web browser's cookie settings.

Insofar as personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either for the performance of the contract, in accordance with Art. 6 (1) (a) GDPR in the case of consent given, or in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

You can configure your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or in general.

Please note that the functionality of our website may be limited if cookies are not accepted.

5) Contact

When contacting us (e.g. via contact form or e-mail), personal data is processed exclusively for the purpose of processing and answering your enquiry, and only to the extent required for this purpose.

The legal basis for the processing of these data is our legitimate interest in answering your enquiry pursuant to Art. 6 (1) (f) GDPR. If your contact aims at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter at hand has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

6) Data processing when opening a customer account

Pursuant to Art. 6 (1) (b) GDPR, personal data will continue to be collected and processed to the extent required if you provide it to us when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website.

Deletion of your customer account is possible at any time and can be effected by sending a message to the controller's address mentioned above. After your customer account has been deleted, your data will be deleted, provided that all contracts concluded thereunder have been fully processed, no statutory retention periods preclude this and we have no legitimate interest in further storage.

7) Use of customer data for direct marketing

7.1 Subscription to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. Your e-mail address is the only mandatory information for the dispatch of the newsletter. The provision of further data is voluntary and is used to address you personally. For the dispatch of the newsletter we use the so-called double opt-in procedure, which ensures that you only receive newsletters once you have expressly confirmed your consent to receive them by clicking on a verification link sent to the e-mail address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR. In doing so, we store your IP address as logged by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later time. The data we collect when you sign up for the newsletter is used strictly for its intended purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data, or unless we reserve the right to further data use that is permitted by law and about which we inform you in this declaration.

7.2 ActiveCampaign

The dispatch of our e-mail newsletter is carried out via this provider: ActiveCampaign, LLC, 150 N. Michigan Ave Suite 1230, Chicago, IL, USA.

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provide when registering for the newsletter to this provider in accordance with Art. 6 (1) (f) GDPR, so that the provider can carry out the newsletter dispatch on our behalf.

Subject to your express consent in accordance with Art. 6 (1) (a) GDPR, the provider also carries out a statistical evaluation of the success of newsletter campaigns by means of web beacons or counting pixels in the e-mails sent, which can measure opening rates and specific interactions with the contents of the newsletter. In doing so, terminal device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but not combined with other data.

You can revoke your consent to the newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which on the basis of an adequacy decision of the European Commission ensures compliance with the European data protection level.

8) Data processing for contract fulfilment

Digistore24

For contract fulfilment, we use the service of the following provider: Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany.

Name, address and, where applicable, further personal data are passed on to the provider in accordance with Art. 6 (1) (b) GDPR for the purpose of contract fulfilment. Your data is only passed on to the extent that is actually necessary for the fulfilment of the contract.

If the provider also handles the payment processing, it may use the services of third-party payment service providers for this purpose.

9) Online Marketing

Digistore24 Affiliate

We participate in the affiliate programme of the following provider: Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany.

In this context, we have placed links on our website that lead to offers on websites of the provider or third parties ("partner sites").

To measure the success of an affiliate link, evaluate orders generated via such a link and to settle commission payments accordingly, the provider uses cookies and/or comparable technologies, which are generally set on the partner sites and for which we are not responsible from a data protection law perspective. In this context, the provider regularly also processes the IP address and, where applicable, further terminal device information.

All processing described above, in particular the reading or storing of information on the terminal device used by you, only takes place if you have given your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by using the cookie consent management options on the partner sites.

10) Web Analytics Services

Umami

This website uses a web analytics service from the following provider: Umami Software, Inc., 1362 42nd Ave., San Francisco, CA 94122, USA.

To protect website visitors, Umami uses a so-called "Distinct ID" to enable various analyses of website use within a short time window of up to 24 hours. The "Distinct ID" is a randomly generated, time-limited hash of a limited set of visitor settings and attributes, which is calculated on the basis of their operating system, browser, browser plugins, previously anonymised IP address and browser language.

The "Distinct ID" is therefore created exclusively on the basis of information with which the visitor cannot be personally identified.

If, exceptionally, the information processed in this way includes personal user data, the processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. In this case, you can permanently object to the collection and storage of your visitor data for the future by notifying us.

Information is only transmitted to the provider if the service is not hosted on our own servers. In the case of self-hosting, no transmission of information collected via the service to the provider takes place.

If the service is not hosted on our own servers, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For the transfer of data to the USA, the provider relies on the European Commission's standard contractual clauses, which are intended to ensure compliance with the European level of data protection.

11) Site functionalities

11.1 YouTube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transferred to: Google LLC, USA.

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers at the latest at the time of video playback in order to load the contents. In the process, certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also sets cookies in order to collect information on user behaviour, generate playback statistics and prevent abusive behaviour.

If you are logged into a user account with the provider during your visit to the site, your data will be assigned directly to your account when you click on a video. If you do not want this to be associated with your account, you must log out before clicking the play button.

All of the aforementioned processing, in particular the setting of cookies for reading information on the terminal device used, only takes place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke the consent given at any time with effect for the future by deactivating this service via the "cookie consent tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which on the basis of an adequacy decision of the European Commission ensures compliance with the European data protection level.

11.2 OpenStreetMap

This website uses an online map service from the following provider: OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, UK.

The online map service is a tool for displaying interactive maps in order to visually represent geographical information. Through the use of this service, our location is shown to you and any geolocation is facilitated.

Already when accessing those subpages in which the provider's map is integrated, information about your use of our website (such as your IP address) is transmitted to and stored on the provider's servers.

The processing of your personal data takes place in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the demand-oriented design of our website. If you do not agree with the future transmission of your data to the provider, there is the possibility of completely deactivating the online map service of the provider by switching off JavaScript in your browser. The online map service on this website cannot then be used.

Where legally required, we have obtained your consent for the processing of your data described above pursuant to Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option for objection described above.

For data transfers to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

11.3 Google reCAPTCHA

On this website we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transferred to: Google LLC, USA.

For the visual design of the captcha window, the provider uses "Google Fonts", i.e. fonts loaded by Google from the internet. No information is processed beyond what is already transmitted to Google through the functionality of reCAPTCHA.

The service checks whether an entry is made by a natural person or abusively by mechanical and automated processing, and blocks spam, DDoS attacks and similar automated harmful access. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the terminal device used, identification data of the browser and operating system type, as well as date and duration of the visit, and transmits this for evaluation to the provider's servers. Cookies may be used in this context, i.e. small text files that are stored on the terminal device's browser.

Insofar as the processing described above is based on cookies, these are only set if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual personal responsibility on the internet and in avoiding misuse and spam in accordance with Art. 6 (1) (f) GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which on the basis of an adequacy decision of the European Commission ensures compliance with the European data protection level.

11.4 Zoom

For conducting online meetings, video conferences and/or webinars, we use this provider: Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA.

The provider processes various data, whereby the scope of the data processed depends on which data you communicate before or during participation in an online meeting, video conference or webinar. Your data will be processed as a communication participant and stored on the provider's servers. This may include in particular your registration data (name, e-mail address, telephone number (optional) and password) and session data (subject, participant IP address, device information, description (optional)).

In addition, image and audio contributions of the participants as well as voice input in chats may be processed.
For the processing of personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for carrying out pre-contractual measures), Art. 6 (1) (b) GDPR serves as the legal basis. Insofar as you have given us your consent to the processing of your data, the processing is carried out on the basis of Art. 6 (1) (a) GDPR. You can revoke any consent given at any time with effect for the future.
Otherwise, the legal basis for data processing in connection with the conduct of online meetings, video conferences or webinars is our legitimate interest in accordance with Art. 6 (1) (f) GDPR in the effective conduct of the online meeting, webinar or video conference.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which on the basis of an adequacy decision of the European Commission ensures compliance with the European data protection level.

11.5 Google Forms

For conducting surveys or for online forms, we use the services of the following provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

In addition to the transfer of data to the above-mentioned provider location, data may also be transferred to: Google LLC, USA.

The provider enables us to design and evaluate surveys and online forms. In addition to the respective personal data that you enter into the forms, information about your operating system, browser, date and time of your visit, referrer URL and your IP address is also collected, transmitted to the provider and stored on the provider's servers.

The information you enter into the forms is stored password-protected so that it is ensured that third-party access is excluded and only we can evaluate the data for the purpose specified in the respective form.

For the processing of personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for carrying out pre-contractual measures), Art. 6 (1) (b) GDPR serves as the legal basis. If you have given us consent to the processing of your data, the processing is carried out on the basis of Art. 6 (1) (a) GDPR. Any consent given may be revoked at any time with effect for the future.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which on the basis of an adequacy decision of the European Commission ensures compliance with the European data protection level.

Further information on Google's data protection provisions can be found here: https://business.safety.google/intl/en/privacy/

12) Tools and Other

Cookie Consent Tool

This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is shown to users when accessing the page in the form of an interactive user interface, on which consent for certain cookies and/or cookie-based applications can be given by ticking corresponding boxes. By using the tool, all cookies/services that require consent are only loaded if the respective user grants the corresponding consent by ticking the box. This ensures that such cookies are only set on the user's terminal device in the case of consent.

The tool sets technically necessary cookies in order to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

A further legal basis for the processing is Art. 6 (1) (c) GDPR. As controllers, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

Where required, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further information about the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

13) Rights of the data subject

13.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the cited legal basis for the respective conditions of exercise:

  • Right of access pursuant to Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR;
  • Right to erasure pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to be informed pursuant to Art. 19 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR;
  • Right to revoke consent given pursuant to Art. 7 (3) GDPR;
  • Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH MARKETING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Duration of storage of personal data

The duration of the storage of personal data is measured on the basis of the respective legal basis, the processing purpose and — if applicable — additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

For the processing of personal data on the basis of express consent in accordance with Art. 6 (1) (a) GDPR, the data concerned is stored until you revoke your consent.

If statutory retention periods exist for data that is processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, this data will be routinely deleted after expiry of the retention periods, provided that it is no longer required for contract fulfilment or contract initiation and/or we have no legitimate interest in further storage.

For the processing of personal data on the basis of Art. 6 (1) (f) GDPR, this data is stored until you exercise your right of objection pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

For the processing of personal data for the purposes of direct marketing on the basis of Art. 6 (1) (f) GDPR, this data is stored until you exercise your right of objection pursuant to Art. 21 (2) GDPR.

If nothing else arises from the other information in this declaration on specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

As of: 21 May 2026

Download German PDF version