Privacy Policy

This privacy policy explains which personal data we process when you visit this website and when you use the close2myheart app (web, Android, iPhone).

1. Controller

close2myheart GmbH
Musterstrasse 1
10115 Berlin
Germany
Email: privacy@close2myheart.com

2. Visiting this website

Server log files

When you open the website, our server automatically processes technically necessary data: IP address, date and time, the page requested, referrer URL, browser and operating system. This is required to operate the website securely and reliably (Art. 6 (1) (f) GDPR). Log files are deleted after 14 days at the latest unless they are needed to investigate a security incident.

Hosting

The website is hosted by: [hosting_provider]. Where required, a data processing agreement (Art. 28 GDPR) is in place with the hosting provider.

Cookies and local storage

This website only uses technically necessary cookies: one stores your confirmation that you are at least 18 years old, another that you have closed the cookie notice. If you arrive via a campaign or referral link, the code is kept in session storage until you close the browser tab so that it can be applied to your registration. The legal basis is Section 25 (2) no. 2 TDDDG and Art. 6 (1) (f) GDPR. We do not use tracking, analytics or advertising cookies. See our Cookie Policy for details.

No external services

This website does not load fonts, scripts or tracking services from third parties. Links to social networks are plain links; no data is transferred until you click them.

Contact form and email

When you contact us, we process your name, email address, topic and message to answer your request (Art. 6 (1) (b) or (f) GDPR). The data is sent to us by email, is not stored in the website database, and is deleted once your request has been fully dealt with and no statutory retention obligations apply.

3. Using the close2myheart app

Registration and account

For your account we process your email address, password (encrypted), profile name, first and last name, address, phone number and date of birth. First and last name, address, phone number and date of birth are used solely for billing and internal identity verification by authorised staff and are never shown on your profile (Art. 6 (1) (b) and (c) GDPR). Your date of birth is also used to verify that you are 18 or older.

If you register via Google, Microsoft or Facebook, we receive the data you release there from that provider (e.g. name, email address, date of birth).

If your email address is not verified within 8 hours, the account and all associated data are deleted automatically.

Profile, photos and verification

Our team reviews your profile photo to verify your age and that the profile is genuine. All further profile information is voluntary and is used for matching. Some voluntary information - such as your sexual orientation or details about your sex life - are special categories of personal data. We only process these on the basis of your explicit consent (Art. 9 (2) (a) GDPR), which you can withdraw at any time by removing the information.

Matching, chat, map and community

To suggest matches, provide chats, groups and notifications and to calculate your Karma score, we process your profile and usage data (Art. 6 (1) (b) GDPR). We only process your location if you share it, and you only appear on the world map if you enable that feature. The map is provided by Google Maps (Google Ireland Limited); data may be transferred to the USA on the basis of the EU-US Data Privacy Framework.

Payments

Subscriptions and Coin packages are processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. We only receive the information needed for billing (e.g. transaction and subscription status), never your bank or card details (Art. 6 (1) (b) and (c) GDPR).

Deleting your account

You can delete your account at any time. It is first deactivated for 14 days; if you log in again during that period, the deletion is cancelled. After that, your account, chats and photos are deleted permanently, unless statutory retention obligations (e.g. for invoices) apply.

4. Recipients and international transfers

We do not sell your data. We only share it with service providers we need to run our services (hosting, email delivery, payment processing, map service) who are contractually bound by our instructions, or where we are legally obliged to do so. Transfers outside the EEA only take place on the basis of an adequacy decision or appropriate safeguards (e.g. EU Standard Contractual Clauses).

5. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future. Please contact privacy@close2myheart.com.

You also have the right to lodge a complaint with a data protection supervisory authority. Our competent authority is: [supervisory_authority].

6. Changes

We update this privacy policy when our services or the law change. The version published here applies.