Privacy Policy

Voko Trades GmbH
Herrnstraße 2
90763 Fürth
Germany
Represented by the managing director Vincent von Kobyletzki
Phone: +49 162 1836553
Email: [email protected]

Our website runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. As infrastructure provider, Hetzner supplies the servers in Germany on which we operate our website and our email system.

Server log data: When you access the website, our web server automatically processes technical information about the request, in particular the IP address, date and time, the page requested, the previously visited page (referrer), browser and operating system, and the transfer status. We need this data to deliver the website, keep it running reliably, troubleshoot errors and protect the security of our systems. It is not evaluated for analytics or marketing purposes.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website. Server log files are generally retained only for a short period of approximately 14 days and are then automatically deleted. They are kept longer only where necessary to investigate a specific security incident. Further information is available in Hetzner's privacy policy.

We use Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA) as a reverse proxy, content delivery network and security service. All requests to our website pass through Cloudflare's network. This delivers the website securely and quickly and protects it against abusive or malicious access.

In doing so, Cloudflare processes technical connection and traffic data, in particular IP addresses and information about the request. Where security functionality requires it, Cloudflare may set technically necessary cookies (see section 4). Cloudflare also protects the email addresses shown on our website against automated harvesting and may receive technical error reports about connection problems from your browser (Network Error Logging).

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure, stable and efficient delivery of the website. Cloudflare processes the technical data as part of the services we use. Because Cloudflare operates a global network, processing in the United States or other third countries cannot be ruled out. Where required, appropriate contractual safeguards under Art. 44 et seq. GDPR apply to such transfers. Further information is available in Cloudflare's privacy policy.

We do not set any cookies ourselves and do not use analytics, marketing or tracking technologies. Nor do we use browser storage such as localStorage to track your behaviour.

Cloudflare may set technically necessary cookies where security functionality requires it, for example to detect automated access or to remember the result of a security check. During an ordinary visit this is generally not the case. These cookies serve solely to secure and protect the website, not analytics or advertising. The legal basis is Art. 6(1)(f) GDPR; access to your device is permitted under Section 25(2) no. 2 TDDDG because it is strictly necessary to provide the website you requested. No consent is required, which is why we do not display a cookie banner.

The fonts used on this website (Bricolage Grotesque and IBM Plex Sans) are served from our own server. No connection to Google Fonts or any other external font provider is established when you visit the website.

If you contact us by email, telephone or through one of the platforms linked on the website, we process the information you provide – in particular your contact details or platform identifier and the content of your message – in order to handle and respond to your request. Our website does not have a contact form.

The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or an intermediation, and otherwise Art. 6(1)(f) GDPR (legitimate interest in handling enquiries).

We operate our email system ourselves on servers of Hetzner Online GmbH in Germany. In addition to the message content, this involves sender and recipient addresses, timestamps and technical transmission data. We store your request for as long as necessary to handle it and to answer any follow-up questions, and beyond that only where statutory retention obligations – for example for business correspondence – apply.

Our website contains links to our profiles on Steam, X (Twitter), Instagram and Facebook as well as to other external websites. These are ordinary links: when you visit our website, no content, scripts or plugins from these providers are loaded and no data is transferred to them. Only when you follow a link do you leave our website; from that point on, the respective provider is responsible for processing your data.

If you contact us through one of these platforms, the platform operator also processes your data – in some cases outside the EU – under its own privacy policy:

• Steam – Steam privacy policy
• X (Twitter) – X privacy policy
• Instagram – Instagram privacy policy
• Facebook – Facebook privacy policy

If you offer or sell skins to us, we process in particular your contact details and platform identifiers, your Steam identifier and trade URL, information about your inventory, skins, offer and transaction, and the data required for your chosen payout method. Depending on the payout method, this may be your PayPal identifier, your bank account details or a wallet address.

We process this data to review your offer, conclude and perform the purchase contract and make the payout (Art. 6(1)(b) GDPR). Where necessary, data is transferred to Steam, the selected payment service (e.g. PayPal), participating banks, or cryptocurrency providers and networks. These recipients may process data under their own responsibility and, where applicable, in third countries. We also process data where commercial and tax law require it (Art. 6(1)(c) GDPR) and for fraud prevention and the protection of our legal claims (Art. 6(1)(f) GDPR).

We retain contractual, payment and accounting records for the statutory retention periods. Other data is deleted once the transaction is complete and no retention obligation or legitimate interest prevents deletion.

When you buy CS2 skins, Voko Trades GmbH acts exclusively as an intermediary. The seller and your contractual counterparty is the independent professional trader named in the respective offer; the trader may vary between offers. We tell you the trader's identity and contact details before you submit your contractual declaration. We communicate the full total price in advance; you pay it by instant bank transfer or cryptocurrency only to the trader. Voko Trades GmbH does not receive the purchase price; its remuneration is settled separately between Voko Trades GmbH and the trader.

For the intermediation we process in particular your name or platform identifier, contact details, information about the requested skin, Steam and trade information, and communication, payment and transaction status data (Art. 6(1)(b) GDPR). Where necessary for the intermediation, we transmit data to the named trader or enable direct communication with the trader. The trader processes the data to perform the purchase contract under their own responsibility. If the trader is established outside the European Economic Area, data may be transferred to a third country; you learn the recipient and destination country before the contract is concluded. Where required, such transfers take place only under the conditions of Art. 44 et seq. GDPR.

After receiving your payment, the trader sources the skin from a third-party seller on the Youpin marketplace; you do not enter into a contract with that third-party seller. Delivery is made using Youpin's gift function to your Steam inventory. Youpin and Steam process data under their own responsibility, where applicable in China, the United States or other third countries. Youpin is not integrated into our website. If sourcing or delivery fails, we coordinate the process; any replacement or refund is provided by the trader. We delete intermediation data once it is no longer needed for the intermediation and for handling any follow-up questions, unless statutory retention obligations or legitimate interests require further storage.

You have the right to:

• access the data we process about you (Art. 15 GDPR),
• rectification of inaccurate or incomplete data (Art. 16 GDPR),
• erasure of your data (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability, i.e. receiving your data in a commonly used, machine-readable format (Art. 20 GDPR),
• withdraw any consent you have given with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to the processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

To exercise your rights, an email to [email protected] is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

No automated decision-making, including profiling, takes place.

Our website is delivered exclusively over an encrypted HTTPS (TLS) connection. You can recognise this by the lock symbol in your browser's address bar.

We update this privacy policy when legal requirements or our website change. The version published on this page applies; the date of the last update is shown at the top of this policy.