onceinabid wordmark logo
← Back

Privacy Policy

Last updated: August 2026

1. Data Controller

The data controller within the meaning of the GDPR is:

onceinabid
Melemstraße 3, 60322 Frankfurt am Main, Germany
Email: help@onceinabid.com

2. Types of Data Processed

  • Email address (when signing up for the waitlist)
  • Name (when making contact)
  • Message content (via contact form)
  • Technical access data (IP address, browser type, timestamp)

3. Purpose of Processing

We process your personal data exclusively for the following purposes:

  • Sending information about the platform launch (waitlist, via Mailchimp)
  • Responding to enquiries submitted via the contact form
  • Improving our website (analysis of access statistics)

4. Legal Basis

Processing is carried out on the basis of Art. 6(1)(a) GDPR (consent) for email communications, and Art. 6(1)(f) GDPR (legitimate interest) for technical access data.

5. Mailchimp (Email Marketing)

For sending notification emails, we use the Mailchimp service provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. Mailchimp is certified under the EU–US Data Privacy Framework.

Your email address is transmitted to and stored by Mailchimp. You can withdraw your consent at any time by clicking the unsubscribe link in our emails.

Mailchimp Privacy Policy: mailchimp.com/legal/privacy

6. Cookies

We use only technically necessary cookies and a cookie to store your cookie consent preference (localStorage). No tracking or analytics cookies are set without your explicit consent.

7. Your Rights

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent at any time

To exercise these rights, please contact us at: help@onceinabid.com

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Hesse, Germany is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI).

9. Currency of this Policy

This privacy policy is currently valid and was last updated in August 2026.