Privacy Policy

1. About Used4Fans

U4F Marketplace GmbH operates an online platform (Used4Fans) that enables the sale and purchase of items that usually originate from a person (“Star”) who enjoys a particular level of recognition, popularity, or emotional significance among other users (“Fans”).

For readability, this Privacy Policy does not use every grammatical form for every gender identity.

Used4Fans processes and uses personal data of visitors and users only with their consent, for agreed purposes, or where another legal basis exists in accordance with the GDPR, the Austrian Data Protection Act (DSG), the Telecommunications Act (TKG), and the E-Commerce Act (ECG), always in compliance with applicable data protection and civil law provisions.

2. Definitions

3. General Information

We process personal data that data subjects provide themselves, as well as data that is automatically generated when using the Used4Fans website and mobile applications.

Data is used primarily to provide the platform and its features, process transactions, maintain secure operation, comply with legal obligations, and continuously improve the service.

4. What Personal Data Means

Personal data means any information relating to an identified or identifiable natural person.

This includes, for example, name, address, telephone number, email address, IP address, or any other information that can directly or indirectly identify a person.

“Processing” means any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.

5. Collection of Personal Data

We only collect personal data that is necessary for the performance and handling of our services or that has been provided voluntarily.

5.1 Registration with Used4Fans

A user account is required in order to buy or sell items. Certain mandatory information must be provided to create that account.

During registration, users provide a username (used as a pseudonym on the platform), a password, and the profile data of their Facebook, Google, X, or Apple ID account. We store this information in order to provide the Used4Fans services. Without these details, the platform cannot be used.

During registration, users may also give revocable consent to receive newsletters and provide an email address for newsletter delivery.

5.2 Contact Requests

When users contact us by email, via the contact form, or by any other means, the information provided is stored so that the request can be processed.

5.3 Payment Processing via Stripe

Sellers must create a Stripe account before posting a listing.

In this process, personal details such as name, date of birth, address, gender, email address, telephone number, IBAN, and proof of identity (for example a copy of an ID card and a photo) are collected.

Payment processing is carried out exclusively via Stripe. Stripe acts as a processor within the meaning of the GDPR where it processes data on behalf of Used4Fans. Where Stripe provides payment services in its own capacity, Stripe acts as an independent controller under the GDPR. Stripe’s privacy policy applies to such processing.

5.4 Shipping Services

For the shipment of an item, the necessary sender and recipient data, including addresses, must be provided. This data is stored and shared with the selected shipping service provider.

FedEx may act as a processor under the GDPR where it processes data on behalf of Used4Fans. Where FedEx performs shipping services in its own capacity, it acts as an independent controller under the GDPR.

5.5 Complaints

In the event of a complaint, relevant transaction data is processed in order to review the complaint and find a solution.

This may include listing data, contact data, user data, and time-related data. Processing is necessary to assess the buyer’s complaint regarding deviations between the delivered item and the listing images or description, and to find a solution under the complaint rules.

5.6 Reviews

After a successful transaction, users can submit reviews. Review content is processed, assigned to the relevant user account, and stored. If a Used4Fans account is deleted, the related reviews are also deleted.

5.7 Server Logs and Analytics Tools

We automatically collect, store, and process technical information such as IP addresses, browser type, and operating system in order to keep the services secure and operational.

6. Purposes of Data Processing

We process personal data for the following purposes:

6.1 Performance of Contractual Obligations

Data processing is necessary to provide and operate Used4Fans, process buying and selling transactions, handle payments, arrange shipment of items, and manage complaints.

To fully perform our contractual obligations, we also process data in order to improve services and correct any errors.

6.2 Compliance with Legal Obligations

Personal data is processed to comply with legal retention, information, and reporting obligations, especially in the area of tax law, including obligations under the DPMG.

After successful payouts, Used4Fans may be required under the DPMG to process additional personal data and, where legal conditions are met, to report this data to the Austrian tax authorities.

Used4Fans is legally required to report seller-related data and transaction information for the relevant calendar year to the Austrian tax authorities if a seller carries out more than 30 transactions in that year, or if the total value of those transactions reaches or exceeds EUR 2,000.00.

6.3 Best Possible User Experience

Personal data is processed to provide the best possible experience on the platform. This includes adapting content, automatic login features, functions, and offers to the interests and usage behavior of users.

6.4 Operational Security and Functionality

Technical data such as IP addresses and log data is processed to ensure IT security, troubleshoot errors, and protect against misuse and unauthorized access.

6.5 Customer Service and Communication

Personal data is used to answer inquiries, provide support, and inform users about important changes to the service or terms of use.

6.6 Service Improvement

Analytics data is used to optimize Used4Fans, tailor content to user interests, and develop new features.

6.7 Advertising

Personal data may also be used for advertising purposes where legally permitted or where explicit consent has been given. This may include both personalized advertising on the platform and marketing activity in external media.

6.8 Newsletters

Collected data may be used to send newsletters and to document user consent for newsletter delivery.

Newsletters are only sent where users have given consent and where no legal restriction prevents delivery. Consent can be withdrawn at any time, including through each newsletter communication.

7. Legal Bases for Processing

The processing of personal data is based on the following legal bases under the GDPR:

• Article 6(1)(a) GDPR: the data subject’s consent
• Article 6(1)(b) GDPR: performance of a contract or pre-contractual measures
• Article 6(1)(c) GDPR: compliance with a legal obligation
• Article 6(1)(f) GDPR: legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject override those interests

8. Data Storage

Used4Fans uses Firebase, a Google service, to provide the platform. Firebase is used in particular for hosting, user authentication, and data storage.

In this context, personal data such as IP addresses and usage data may be processed and stored in Google data centers.

9. Storage Period

Personal data is stored only for as long as necessary to fulfill the stated purposes or for as long as statutory retention obligations require.

Once the purpose no longer applies or the legal retention period expires, the data is deleted or anonymized.

Longer storage may be necessary in individual cases where needed for the assertion, exercise, or defense of legal claims.

Used4Fans is required to retain invoices for 7 years.

Data transmitted to the Austrian tax authorities under the DPMG must be retained for 10 years after the end of the relevant reporting period (calendar year) to which the data relates.

10. Disclosure of Personal Data

Personal data is disclosed to third parties only where necessary for contract performance, required by law, covered by consent, or justified by a legitimate interest.

Data may be disclosed to:

• Stripe as payment service provider for payment processing
• FedEx or another cooperating shipping provider for item delivery
• Public authorities, courts, law enforcement bodies, or other legally entitled bodies where disclosure obligations apply or unlawful conduct is suspected
• Authorized third parties where disclosure is necessary to comply with legal obligations, assert or defend legal claims, enforce the GTC or contractual arrangements, address possible infringements of third-party rights, or protect the rights, property, or safety of others

All commissioned service providers are contractually required to comply with applicable data protection law.

11. Rights of Data Subjects

Under the GDPR, data subjects have in particular the following rights:

• Right of access (Art. 15 GDPR): to obtain information about the personal data being processed
• Right to rectification (Art. 16 GDPR): to correct inaccurate or incomplete data
• Right to erasure (Art. 17 GDPR): to request deletion of personal data, unless processing must continue for legal reasons or for the assertion, exercise, or defense of legal claims
• Right to restriction of processing (Art. 18 GDPR): to request that processing be limited where no overriding reason opposes the restriction
• Right to data portability (Art. 20 GDPR): to receive personal data in a structured, commonly used, and machine-readable format or to request transfer to another controller where technically feasible
• Right to object (Art. 21 GDPR): to object, on grounds relating to the data subject’s particular situation, to processing based on Article 6(1)(e) or (f) GDPR
• Right to withdraw consent (Art. 7(3) GDPR): to withdraw consent at any time with effect for the future
• Right to lodge a complaint (Art. 77 GDPR): to file a complaint with a supervisory authority, in Austria especially the Austrian Data Protection Authority

12. Cookies

12.1 Use of Cookies

Used4Fans uses cookies to provide a user-friendly and functional experience. Cookies are small text files stored on the user’s device that allow certain information to be collected.

12.2 Technically Necessary Cookies

These cookies are essential for the basic functions of the platform. They allow us to keep the website secure and functional. Without them, features such as login or shopping cart storage could not be provided.

• Login cookie: stores login data
• Shopping cart cookie: stores items placed in the cart
• Security cookie: protects against unauthorized access

These are stored until the end of the session (session cookies).

12.3 Preference Cookies

These cookies allow Used4Fans to store user preferences such as selected language or display settings in order to improve the user experience on future visits.

• Language setting
• Display settings, such as screen resolution and visual preferences

These may be stored for up to 1 year.

12.4 Analytics and Statistics Cookies

Used4Fans uses analytics cookies to understand how users interact with the platform and to improve the service. This may involve tools such as Google Analytics and Matomo.

• Google Analytics: analysis of website use and generation of usage statistics
• Matomo: an open-source alternative analytics tool

These may be stored for up to 2 years.

12.5 Marketing and Tracking Cookies

These cookies are used to display personalized advertising based on user behavior on the platform and to measure the effectiveness of marketing campaigns.

• Google Ads Remarketing
• Facebook Pixel

These may be stored for up to 2 years.

12.6 Third-Party Cookies

Used4Fans may set cookies from third-party providers used for embedded content, payment services, or social media integrations. These cookies may enable those providers to analyze website usage and provide personalized content or advertising.

• YouTube (Google Inc.): video playback and personalized advertising
• Payment providers such as PayPal: transaction handling and fraud prevention

The storage duration depends on the respective third-party provider.

12.7 Cookie Settings and Consent

Used4Fans uses a cookie consent management system that allows visitors and users to manage cookie settings and to give or refuse consent.

On the first visit to the website, a cookie banner is displayed. Users can later change or withdraw consent at any time through browser settings or the website’s settings.

12.8 Managing Cookies

Visitors and users can change cookie settings at any time in their browser. Most browsers allow cookies to be blocked or deleted. However, rejecting or deleting cookies may impair platform functionality.

13. Data Security

We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, and disclosure.

Protection measures include encrypted transmission, encrypted storage, role-based access controls, backup concepts, and physical protection of servers.

14. Contact

The controller for the purposes of data protection law is:

U4F Marketplace GmbH

A-1200 Vienna, Wallensteinstraße 23/2/30

info@usedforfans.com

For questions about data protection or to exercise the rights described above, you can contact the data protection contact point at any time.