This privacy policy has been translated and we assume that it is correct. However, the German version shall prevail for the interpretation of the Privacy Policy. In the event of any discrepancies between the English and German translations, the German version shall prevail.
Privacy Policy
1. Introduction
Welcome to 3forONE – the platform that connects the entire universe of Thoroughbred horse racing and auctions.
Our mission is to bring together breeders, owners, jockeys, trainers, buyers, sellers, auction houses, racing clubs, organizers, racecourses, bettors, and all Thoroughbred enthusiasts on one digital platform.
Whether you're training, selling, bidding on a horse, or placing a bet –
3forONE stands for neutrality, transparency, and trust. Think of us as your digital home at the heart of international horse racing.
One thing is especially important to us: your trust.
Protecting your personal data is not only a legal obligation for us – it's a sign of respect. Toward every person, every animal, and every click on our platform.
This privacy policy explains, in clear terms, what data we collect, how we use it – and what rights you have at all times.
2. Who We Are
Data Controller:
3forONE AG
Obere Paulistrasse 13
8834 Feusisberg – Switzerland
E-Mail: support@3forone.com
3. What Data We Process – and Why
3.1 Data You Provide
When you register, create a profile, or contact us via form, we collect:
-
First and last name
-
Email address
-
Encrypted password
-
Company, VAT ID (if provided)
-
Usage information (e.g., profile text, posts, horse data)
Purpose: To grant access to your account, personalize content, and respond to inquiries.
3.2 Automatically Collected Data
When you visit our website, we collect technical data such as:
-
Browser type and version
-
Operating system
-
IP address (anonymized if possible)
-
Date and time of access
-
Referrer URL
-
Error logs (if any)
Purpose: System stability, security, and platform optimization.
4. Cookies, Consent Management & Social Sharing
We use cookies to improve your user experience. Some cookies are technically necessary, others help us optimize the platform.
Necessary Cookies:
e.g., login functionality, language settings, security.
Optional Cookies (with consent):
e.g., analytics cookies via Google Analytics.
We use a consent management tool (cookie banner) in accordance with Art. 7(1) GDPR. Upon first visit, you can decide which cookies to allow.
You can change or withdraw your consent at any time. Technically necessary cookies are always active; analytics and marketing cookies only with your approval.
Social Sharing Buttons
We use sharing buttons for platforms such as X (Twitter), Facebook, WhatsApp, and email. These buttons allow you to share content with one click.
When loading the page, a connection to these platforms may be established – even if you don’t click the button.
This may transmit data such as your IP address or browser info to those providers. Please review the privacy policies of:
-
WhatsApp
5. Hosting & Infrastructure
Our website is hosted on servers within the EU. Technical maintenance is performed by a professional partner company bound to the same privacy standards we apply.
6. Newsletter & Direct Marketing
If you subscribe to our newsletter, we use your email address solely to send relevant updates about auctions, races, and platform news.
-
Subscription follows the double opt-in process.
-
You can unsubscribe at any time via the link in any newsletter.
-
Tool used: Mailjet (data stored in the EU)
7. Payments & Seminars
For paid services (e.g., memberships, seminars), we use Stripe as a secure, GDPR-compliant payment processor.
PayPal payments are also processed via Stripe – not directly on our site.
For live seminars conducted via Zoom, Zoom’s privacy policy applies. Recordings are only made with prior notice.
8. Contact Forms & Support
When you contact us via form, email, or support, we process your data to handle your request, based on Art. 6(1)(b) or (f) GDPR.
9. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies to analyze how users interact with our website—for example, information on page views, session duration, country of origin, and device type. This data helps us improve the technical performance and content of our platform.
IP anonymization is enabled: Your IP address is shortened before being transmitted to Google, so it cannot be directly linked to you. In exceptional cases, the full IP address is transmitted to Google servers in the USA and then shortened.
Legal basis:
Data is processed exclusively based on your consent pursuant to Art. 6 (1)(a) GDPR. This consent is requested via our cookie banner when you first visit the site and is stored accordingly. You may revoke your consent at any time.
Retention period:
Data associated with Google Analytics is stored for a maximum of 14 months, after which it is automatically deleted.
Further information and opt-out options:
-
Browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en
Allows you to permanently prevent data collection via Google Analytics. -
Set an opt-out cookie: Deactivate Google Analytics
Clicking this link will set a cookie that prevents your data from being collected during future visits to this website. -
Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en
Data processing agreement:
We have concluded a data processing agreement with Google in accordance with Art. 28 GDPR. Google Analytics is used in compliance with the strict requirements of European data protection authorities.
10. Your Rights under the GDPR
You have the following rights at any time:
-
Access to your personal data stored by us (Art. 15 GDPR)
-
Rectification of inaccurate or incomplete data (Art. 16 GDPR)
-
Erasure of your data in accordance with Art. 17 GDPR, unless legal retention obligations apply
-
Restriction of processing under the conditions set out in Art. 18 GDPR
-
Objection to certain processing operations in accordance with Art. 21 GDPR (see below)
-
Data portability in accordance with Art. 20 GDPR – You may request that we provide your data, which we process automatically on the basis of your consent or for the performance of a contract, in a commonly used machine-readable format or – where technically feasible – transfer it directly to another controller.
-
Right to lodge a complaint with a data protection authority – for example, in the EU country of your residence, place of work, or the location of the alleged violation.
To exercise your rights, please contact us at:
support@3forone.com
11. Right to Object under Article 21 GDPR
OBJECTION ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION:
IF WE PROCESS YOUR PERSONAL DATA BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA.
THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS.
IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS – OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE, OR DEFEND LEGAL CLAIMS.
OBJECTION TO DIRECT MARKETING:
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR DATA FOR SUCH MARKETING, WITHOUT GIVING ANY REASON.
THIS ALSO APPLIES TO PROFILING IN CONNECTION WITH SUCH DIRECT MARKETING.
AFTER YOUR OBJECTION, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES.
12. Data Transfers to Third Countries
Some of our service providers are based outside the EU/EEA – especially in the USA. This includes:
-
Google (Analytics, Fonts, YouTube, reCAPTCHA)
-
Meta (Facebook, Instagram, social sharing)
-
Zoom (seminars)
-
Stripe (payments)
When using our site or certain features, your data (e.g., IP address, usage behavior) may be transmitted to servers in these countries.
Important:
The USA is currently not considered a country with adequate data protection under the GDPR. U.S. authorities may access your data without sufficient legal remedies.
We only work with providers that offer appropriate safeguards, such as:
-
EU Standard Contractual Clauses
-
Data storage in EU data centers, where possible
-
Minimizing the data transmitted
We transfer data only if you give explicit consent (Art. 49(1)(a) GDPR), to fulfill a contract (Art. 49(1)(b) GDPR), or under the safeguards listed in Art. 46 GDPR.
13. Social Media & Embedded Content
We use services from external platforms for embedding videos, maps, and social features.
Social Sharing
Buttons for Facebook, X, WhatsApp, LinkedIn, or email may connect to those platforms upon loading, even if not clicked. Transmitted data may include:
-
IP address
-
Browser information
-
Time and date of access
-
Cookies from the provider
Please consult the privacy policies of:
-
WhatsApp
Embedded Content
We embed third-party content from:
-
YouTube (e.g. race or auction videos)
-
Vimeo (interviews, seminars)
-
Zoom (webinars)
-
Google Maps (routes and locations)
Loading such content may automatically transfer data to the respective provider.
We use privacy-friendly integration where possible (e.g., YouTube’s extended privacy mode, Vimeo’s Do-Not-Track).
Legal basis: Consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR) in improving user experience.
You can withdraw consent via the cookie banner at any time.
14. SSL Encryption
Our entire platform uses modern SSL encryption (https) to protect your data during transmission.
15. Data Retention
We store personal data only as long as necessary for the intended purpose or as legally required.
16. External Services & Plugins
-
YouTube: Videos are embedded in extended privacy mode; data is only transmitted once you play the video.
-
Google reCAPTCHA: Used to prevent spam; collects IP address, mouse movement, dwell time, etc.
17. Changes to This Privacy Policy
We regularly update this policy to reflect technical, legal, or organizational developments.
Last updated: May 18, 2025