1. Controller

Voko Trades GmbH
Herrnstraße 2
90763 Fürth
Germany
Phone: +49 162 1836553
Email: [email protected]

Represented by the managing director Vincent von Kobyletzki

2. Collection and Storage of Personal Data

When visiting our website: When you access our website, we collect the following data that is technically necessary to display the website and ensure stability and security: IP address, date and time of the request, referrer URL, browser used, operating system, language and version of the browser software.

This data is processed on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is the technically error-free and secure provision of the website and the prevention of misuse. Log data is deleted when it is no longer required for these purposes, unless a security-related event requires longer retention.

Use of cookies: We do not use analytics or marketing cookies. Cloudflare may set technically necessary cookies such as __cf_bm or cf_clearance as part of security and bot protection. Depending on the security check, these cookies help distinguish legitimate requests from automated or abusive access.

The processing is based on Art. 6(1)(f) GDPR and Section 25(2) no. 2 TDDDG. Our legitimate interest is the secure and reliable provision of the website. Further information can be found in Cloudflare's cookie documentation.

3. Hosting and Email Services via Hetzner

We use infrastructure provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, to host this website and operate our email services. When you access the website, Hetzner processes in particular IP addresses and connection and log data. When you contact us by email, sender and recipient data, timestamps, technical transmission data and message content may also be processed.

Website data is processed on the basis of Art. 6(1)(f) GDPR for the secure and reliable provision of our online services. Depending on the content of the request, email data is processed on the basis of Art. 6(1)(b) or (f) GDPR. Where Hetzner processes data on our behalf, this is based on a data processing agreement pursuant to Art. 28 GDPR. Further information can be found in Hetzner's privacy policy.

4. Provision via Cloudflare

We use services provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, for the secure and efficient delivery of this website. In particular, Cloudflare processes IP addresses, request and device data as well as security-related information in order to deliver content, defend against attacks and detect abusive access.

The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and fast provision of our website.

Cloudflare operates a global network. It therefore cannot be ruled out that data is also processed outside the European Economic Area, in particular in the United States. Where required, Cloudflare relies on appropriate safeguards for such transfers. Further information can be found in Cloudflare's privacy policy.

5. Use of Tailwind CSS via CDN

This website currently loads the Tailwind CSS framework from cdn.tailwindcss.com. When a page is opened, your browser therefore establishes a direct connection to this service. In particular, your IP address and technical request data may be processed.

The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the technically efficient and consistent presentation of the website. Processing in third countries, including the United States, cannot be ruled out. We plan to replace the external integration with a locally delivered stylesheet.

6. SSL/TLS Encryption

This website uses SSL/TLS encryption to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that "https://" is displayed in the browser's address bar and by the lock symbol in your browser line.

7. Links to Other Websites

Our website contains links to websites of other providers. When you click on these links, you leave our website. We have no influence on these providers complying with data protection regulations. The respective provider is responsible for data processing on these websites.

8. Processing of Contact Inquiries

If you contact us by email, telephone or through one of the platforms linked on this website, we process the information you provide, your contact details and the content of the communication in order to handle your request.

If your request concerns a contract or steps prior to entering into a contract, the legal basis is Art. 6(1)(b) GDPR. For other enquiries, the processing is based on Art. 6(1)(f) GDPR; our legitimate interest is responding to your request.

Your data will be deleted when the request has been fully resolved and no statutory retention obligation or other legal basis requires continued storage.

9. Presence on Social Media Platforms

We are present on various social media platforms to communicate with you and provide information. User data is also processed by the operators of the respective platforms. This includes, in particular, the use of data for market research and advertising purposes to create usage profiles. The use of these platforms is the responsibility of the users. Our presence currently exists on the following platforms:

• Discord (voko_trades)
• Instagram
• X
• Facebook
• Steam

Data processing is carried out by the respective platform. For more information, please see the privacy policies of the respective platforms:

• Discord Privacy Policy
• Instagram Privacy Policy
• X Privacy Policy
• Facebook Privacy Policy
• Steam Privacy Policy

10. Purchase of Skins by Voko Trades GmbH

If you offer or sell skins to Voko Trades GmbH, we process in particular your contact and platform data, Steam identifier and trade URL, inventory, skin, offer and transaction data, and the information required for your chosen payout method. Depending on the payout method, this may include a PayPal identifier, bank account details or a wallet address.

The data is processed to review the offer, enter into and perform the purchase contract and make the payout on the basis of Art. 6(1)(b) GDPR. For this purpose, required data may be transferred to Steam, the selected payment service, participating banks, or cryptocurrency providers and networks. These recipients may process data under their own responsibility and, where applicable, in third countries. Data may also be processed to comply with commercial and tax retention obligations under Art. 6(1)(c) GDPR and for fraud prevention and the establishment, exercise or defence of legal claims under Art. 6(1)(f) GDPR.

We retain contractual, payment and accounting records for the applicable statutory retention periods. Other data is deleted when the transaction has been completed and no statutory obligation or legitimate interest requires further retention.

11. Intermediation of Skin Purchases

For requests to purchase CS2 skins, Voko Trades GmbH acts exclusively as an intermediary. The seller and contractual party to the purchase contract is the business established outside Germany and named in the respective offer. The particular seller may vary between offers. The customer receives the seller's identity, business address, country of establishment and contact details before submitting their contractual declaration.

To initiate and carry out the intermediation, we process in particular names or platform identifiers, contact details, information about the requested skin, Steam and trade information, and communication, payment and transaction status data. Voko Trades GmbH transmits the offer and communicates the total price including the intermediation fee. The purchase contract is concluded exclusively between the customer and the seller; payment is made directly to the seller.

Where necessary for the requested intermediation, we transmit data to the seller named in the offer or facilitate direct communication with the seller. This is based on Art. 6(1)(b) GDPR. The seller processes the data received under their own responsibility to perform the purchase contract. As the seller is established outside Germany and may be located outside the European Economic Area, data may be transferred to a third country. The recipient and destination country are disclosed before the contract is concluded. Where required, such transfers take place only in accordance with Art. 44 et seq. GDPR.

Delivery is made using Youpin's gift function from the seller's Youpin account to the customer's inventory. Youpin and Steam may process data under their own responsibility and, where applicable, in China, the United States or other third countries. If the seller withdraws a trade, Voko Trades GmbH coordinates the renewed provision of the skin or the refund by the seller. We retain intermediation and communication data only for as long as necessary to process the request and transaction or to comply with statutory retention obligations or protect legitimate legal interests.

12. Rights of Data Subjects

You have the right to:

• request information about your personal data processed by us in accordance with Art. 15 GDPR,
• request the correction of incorrect or completion of your personal data stored by us in accordance with Art. 16 GDPR,
• request the deletion of your personal data stored by us in accordance with Art. 17 GDPR,
• request the restriction of the processing of your personal data in accordance with Art. 18 GDPR,
• receive your personal data in a structured, commonly used and machine-readable format or request the transfer to another controller in accordance with Art. 20 GDPR, where the legal requirements are met,
• withdraw consent at any time with effect for the future; the lawfulness of processing carried out before the withdrawal remains unaffected,
• lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.

The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA).

13. Right to Object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 (1) lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation.

14. Changes to the Privacy Policy

We reserve the right to adapt this privacy policy from time to time to comply with legal requirements or to implement changes to our website. The current privacy policy applies to your next visit.