Privacy Policy for OneChain GmbH

With this Privacy Policy, we want to inform you in detail on which personal data we collect, for which purposes we use it, with whom we share it and which rights to control and information you may have.

A. Controller and contact details

Controller of this website is the OneChain GmbH, Hohenzollernstr. 12, 14163 Berlin, Germany, phone: + 49 30 609 821 970, e-mail: (hereinafter: “OneChain” or “we”).

If you have any questions regarding this Privacy Policy or regarding the collection, processing or use of your personal data, you may contact our data protection officer. Our data protection officer can be reached at

B. Processing of your data when using our website

1. Using our website for informational purposes

If you visit our website for informational purposes only and do not provide us with personal data within a registration procedure or in any other way, only the internet traffic data that your browser transmits to our servers will be processed. This information contains personal data only to limited extent. The information processed comprises your IP address and further usage data (e.g. date and time of access, name of the accessed pages, information on the amount of data transmitted and the inquiring provider).

We process this information to enable you to use our website (e.g. by adapting our website to the requirements of your device) and to create anonymized statistics on the usage of our website by gathering demographic data. We will not merge these data with data from other sources.

Art. 6(1)(b) of the GDPR is the legal basis for this processing activity, since we need this automatically collected data for effective provision of our website, as well as Art. 6(1)(f) of the GDPR, since the processing serves our legitimate interest to ensure stability and security of our website and to optimize our website.

1.1 Cookies

This website uses cookies. Cookies are small text files that are stored on your device. These text files can be read by the websites that you visit and help to identify you if you repeatedly access a website. Some cookies aim to record your preferences and will be deleted after the end of the browser session, i.e. when you close the browser (so-called session cookies). Other cookies aim to adjust the website to the users’ needs and remain on your device (so-called permanent or persistent cookies). Subsequently, we explain to you which cookies we use.

We use own session cookies that enable customer-friendly use of our website, for example by storing your settings. At the end of a browser session, these cookies will be deleted automatically. Legal basis for the use of such cookies is performance of a contract (Art.6(1)(b) of the GDPR).

Furthermore, we work together with service providers that support us in improving our website or in offering additional features. Such service providers may use their own cookies, if applicable. Hereto, you will find further information within the subsequent paragraphs.

1.2 Google Analytics

This website uses functionalities of the web analysis service Google Analytics. These services are provided by the Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies (see above, section 1.1). The information gathered by the cookie on your usage of the website will be transmitted to and stored at a server of Google. We have activated the IP anonymization function on this website. This means that Google will shorten your IP address in member states of the European Union or in other signatory states to the Agreement on the European Economic Area before transmitting it to the United States. Only in exceptional cases, the full IP address will be transmitted to a Google server in the USA and be shortened there.  On our behalf, Google will use this information to evaluate your usage of the website, to compile reports on the website activities and to provide us with further services relating to the usage of the website and the internet. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data of Google.

For the exceptional cases where personal data is transferred into the USA, Google has submitted itself to the EU-US Privacy Shield. You will find further information at

The storage of Google Analytics cookies is based on Art. 6(1)(f) of the GDPR. We have a legitimate interest to analyze the users’ behavior in order to optimize our web services as well as our advertisement.

2. Using our services on the website

On our Website, we offer further tools or services (e.g. contacting and newsletter), the usage of which requires to enter further personal data such as name or e-mail address and further personal information, if applicable. The information respectively necessary is always labelled as mandatory fields. Without this information, we may not be able to provide to you the desired service or to answer your inquiries. Subsequently, we provide you with an overview of the processing activities and legal basis related to such services.

2.1 Contacting

In case you want to contact us, e.g. by contact form or e-mail, we will process the personal data you transfer to us. That are usually your name and e-mail address as well as the further information communicated by you. These data will be used to answer your inquiry or for contacting and the related technical administration only.

Legal basis for this data processing is Art. 6(1)(b) of the GDPR, insofar as it serves performance of a contract or measures prior to a contract, and Art. 6(1)(f) of the GDPR, since processing of this inquiries is in the mutual interest.

2.2 Newsletter

If you sign up to our newsletter that informs you on our latest products and services, we will process the personal data communicated by you in this context (e.g., name, physical address, e-mail address) for mailing the newsletter.

You may object to the mailing of such newsletters at any time and without stating reasons with effect for the future by clicking the unsubscribe link at the end of any newsletter or by contacting us on any other way.

C. Processing of your data in customer or supplier relations

In the course of customer or supplier relations, we process the following personal data:

  • Contact information such as your full name, your business address, telephone number, mobile number, fax number and e-mail address;
  • Payment information such as any data that is necessary to process payments and to prevent fraud, including credit card and EC card numbers, security codes and other billing information;
  • Information acquired from publicly available sources;
  • Data required by law for compliance purposes, such as information on legal disputes, that may be relevant, for example, for antitrust purposes.

We use the personal data for the following purposes:

  • Planning, execution, management and administration of your contractual relationship with us, such as the execution of transactions and orders of products or services, the processing of payments, activities relating to accounting, audit, billing and debt collection, the arrangement of shipments and deliveries, facilitating repairs and rendering supportive services or rendering any other services at your request (Art. 6(1)(b) of the GDPR);
  • Contacting you within an existing business relationship, to the extent legally permitted, to inform you on our products or services that are similar to or relate to products or services you already purchased within the course of this business relationship (usually on the basis of Art. 6(1)(f) of the GDPR; in case you consented to this, on the basis of Art. 6(1)(a) of the GDPR);
  • Dispute resolution, enforcement of our contractual agreements and the establishment, exercise or defense of legal claims (Art. 6(1)(f) of the GDPR); or
  • Ensuring compliance with legal obligations, such as retention of sales documentation for tax purposes or sending legally required communications and other announcements (Art. 6(1)(c) of the GDPR);


With regard to direct marketing (e.g., via e-mail), we will only transfer your personal data if you consented to such processing, to the extent required by law.

D. Automated decision-making

We do not process your personal data for making automated decisions that produce legal effects concerning you or similarly significantly affect you.

E. Disclosure of personal data to third parties

Except from the cases listed in this Privacy Policy, we will not disclose your personal data to third parties. Personal data can be disclosed to third parties that act on our behalf, in order to further process the personal data according to the purpose of its initial collection, for example to fulfill the services offered, evaluation of user behavior on our website or technical support. Those third parties are contractually obligated by legally determined agreements to only use personal data for the agreed purposes and not to disclose your personal data to other parties without authorization if not required by law.

Beyond that, your personal data will be disclosed in a given case to the following third parties:

  • We transfer payment information to banks in order to process payments;
  • We transfer personal data to courts, law enforcement authorities, supervisory authorities, tax consultants and lawyers, to the extent legally permitted or required;

These transfers of your personal data are based on Art. 6(1)(f) of the GDPR. Our legitimate interest result from the respective purposes mentioned above.

Several of the recipients are located outside the European Economic Area (EEA). You will find further information to cross-border transfers outside the EEA in section F.

In case of corporate restructuring or sale of our company to a third party, transfer of your personal data to the restructured company or the third party is possible in accordance with applicable laws.

In case we are legally entitled or obliged (for example due to applicable laws or a court order), we may disclose your personal data.

F. Transfer of personal data to third countries

To the extent described above, it is possible that we transfer your personal data to other countries (including states outside the EEA, so-called third countries) where data protection standards deviating from those at your place of residence may apply.

Please note that data processed in other countries may be subject to foreign laws and accessible for the local governments, courts, as well as for law enforcement and supervisory authorities. However, when we transfer your personal data to third countries, we will implement appropriate safeguards in order to protect your data.

Usually we will protect the transfer to third countries by applying the so-called EU Standard Contractual Clauses (see You may obtain corresponding evidence or further details by contacting the e-mail address mentioned above.

G. Retention periods

It is our goal to only process your personal data to the smallest possible extent. We will therefore store your personal data only as long as it is necessary in order to fulfill the purpose that it was initially collected, or, if applicable, as long as law requires longer retention.

H. Your rights

You have the following rights, depending on the circumstances of the concrete case:

  • Right of access to the personal data relating to you
  • Right to rectification, erasure or restriction of processing of your personal data
  • Right to refuse to consent and to withdraw consent
  • Right not to be subject to a decision based solely on automated processing
  • Right to data portability
  • Right to object to the processing of your personal data

You can (i) exercise the abovementioned rights, or (ii) ask questions, or (iii) object to the processing of your personal data by contacting us as described in section A.

In addition, you always have the right to complaint at the competent data protection supervisory authority.

I. Amendments to this privacy policy

We reserve the right to amend this privacy policy to reflect updates of our website. Visit this website regularly and read the most recent Privacy Policy. This Privacy Policy was last updated on July 11th, 2019.