Privacy Policy

Last updated: September 25, 2026

We appreciate your interest in our company. In this Privacy Policy, we explain how we collect, process, and use personal data when you visit our website, use our services, or contact us. This policy is based on the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

This Privacy Policy also applies to our social media profiles.
For definitions of key terms such as “personal data” and “processing,” please refer to Article 4 GDPR.

1. Controller

Multiple Solution Services
P.O. Box 120420
27518 Bremerhaven, Germany
Managing Director: Alexander Sascha Walter Jakusin
E-Mail: info@mss-services.com

The above party is the “Controller” as defined in Art. 4(7) GDPR.

2. Types of Data We Process

Depending on how you use our website and services, we may process the following categories of personal data:

  • Usage data (e.g., access times, visited pages)

  • Basic data (e.g., name, address)

  • Contact data (e.g., phone number, e-mail address)

  • Contract data (e.g., contract subject, duration)

  • Content data (e.g., text entries, uploaded files, photos, videos)

  • Communication data (e.g., IP address)

  • Other data you voluntarily provide

  • Profile data you enter in the app (e.g., profile name, photos, “About me”, appearance, interests, relationship status, what you are looking for)

  • Special categories of personal data within the meaning of Art. 9 GDPR that you choose to provide in your profile (sexual orientation, gender identity, sexual preferences)

  • Location data (only if you share your location or enable the world map)

  • Payment and transaction data (e.g., subscription status, Coin purchases – no bank or card details)

3. Purposes of Processing

We process personal data for the following purposes, in accordance with Article 13 GDPR:

  • Fulfilling and managing contracts

  • Ensuring proof and documentation

  • Technical and economic optimization of our website

  • Making our website easy to access

  • Fulfilling contractual and legal obligations

  • Responding to legal complaints

  • Meeting statutory retention requirements

  • Statistical analysis and continuous improvement of our services

  • Supporting commercial use of the website

  • Improving user experience

  • Providing user-friendly website features

  • Operating the website securely and efficiently

  • Marketing, sales, and advertising activities

  • Preventing spam and misuse

  • Managing application processes

  • Customer service and customer care

  • Responding to inquiries

  • Implementing security measures

  • Ensuring uninterrupted and safe website operation

4. Categories of Affected Individuals

We process the personal data of the following individuals:

  • Website visitors and users

  • Customers

  • Prospective customers

  • Job applicants

  • Employees

  • Employees of customers or suppliers

All of the above are collectively referred to as users.

5. Legal Bases for Processing

We process personal data on the following legal bases:

  • Consent (Art. 6(1)(a) GDPR)

  • Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)

  • Compliance with legal obligations (Art. 6(1)(c) GDPR)

  • Protection of vital interests (Art. 6(1)(d) GDPR)

  • Legitimate interests, provided your rights do not override them (Art. 6(1)(f) GDPR)

  • Explicit consent for special categories of personal data (Art. 9(2)(a) GDPR)

6. Disclosure of Personal Data to Third Parties

We do not share your data with third parties unless:

  • You have given consent

  • It is necessary for contract performance (e.g., payment providers)

  • A legal obligation or court order requires it

  • It is necessary for law enforcement, security, or the protection of intellectual property

We also work with data processors (e.g., hosting providers).
These processors are carefully selected and bound by contracts according to Art. 28 GDPR.

In particular, the following recipients receive personal data when you use the respective function:

  • PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg – payment processing for subscriptions and Coin packages

  • Google Ireland Limited, Ireland – Google Maps (world map) and sign-in with Google

  • Microsoft Ireland Operations Limited, Ireland – sign-in with Microsoft

  • Meta Platforms Ireland Limited, Ireland – sign-in with Facebook

7. Data Transfers to Non-EU Countries

As a rule, your data is processed within the EU/EEA.

If data is transferred outside the EU/EEA, the recipients must meet the requirements of Art. 44 ff. GDPR, such as:

  • EU adequacy decision

  • Standard Contractual Clauses (SCCs)

If data is transferred to the United States based on your explicit consent, we must inform you of the potential risk of secret access by U.S. authorities and limited legal remedies.

When you use Google Maps or sign in with Google, Microsoft or Facebook, data may be transferred to the parent companies of these providers in the USA. These transfers are based on the EU adequacy decision for the EU-U.S. Data Privacy Framework (Art. 45 GDPR), under which these companies are certified, and additionally on Standard Contractual Clauses.

8. Data Deletion and Storage Duration

We delete or block personal data when:

  • The purpose for processing no longer applies

  • You withdraw your consent

  • Storage is no longer necessary

Exceptions apply if statutory retention periods require longer storage, e.g.:

  • Commercial records: 6 years (§ 257 HGB)

  • Tax records: 10 years (§ 147 AO)

After retention periods expire, data is deleted unless it is still needed for contract performance.

Specific periods for the app:

  • If your e-mail address is not verified within 8 hours of registration, the account and all associated data are deleted automatically.

  • If you delete your account, it is first deactivated for 14 days. If you log in again during this period, the deletion is cancelled. After 14 days, your account, profile, photos and chats are deleted permanently. Billing records are kept only as long as statutory retention periods require.

9. Automated Decision-Making and Profiling

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).

However, the app uses automated evaluations of personal data (profiling within the meaning of Art. 4(4) GDPR) for the following features:

  • Match suggestions and close-2-me: based on your profile details, preferences, age range and location, we suggest members who may suit you and rank search results.

  • Karma score: a score from 1 to 1000 (starting at 100) is calculated automatically from interactions in the community, such as likes, reviews and ratings given and received, and complaints. The score is visible on your profile dashboard and cannot be changed manually by our team.

Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and, where special categories of data are included in matching, your explicit consent (Art. 9(2)(a) GDPR). Decisions about warnings, restrictions or the suspension of accounts are always made by our staff. You can object to this processing at any time (Art. 21 GDPR) and contact us to have a decision reviewed by a person.

10. Provision of Website & Server Logfiles

When you visit our website, we automatically collect:

  • IP address

  • Internet service provider

  • Date and time of access

  • Browser type, version, and language

  • Accessed content

  • Time zone

  • HTTP status code

  • Referrer URL

  • Operating system

This data ensures a secure and reliable website experience.

Legal basis: Art. 6(1)(f) GDPR
Storage duration: 7 days (unless needed for security or evidence)

11. Cookies

This website uses technically necessary cookies and local storage. With your consent, we also use Google Analytics (see below). We do not use marketing or advertising cookies, and we do not load fonts or other scripts from third parties.

Cookies and storage used on this website:

  • c2m_age – stores your confirmation that you are at least 18 years old (30 days)

  • c2m_cn – stores that you have closed the cookie notice (12 months)

  • c2m_lang – remembers the language you chose with the language switcher, so we do not switch you to your browser language again (12 months)

  • c2m_pt (session storage) – remembers a campaign or referral code from the link you arrived through, so it can be applied to your registration (until the browser tab is closed)

  • WordPress login cookies – only for logged-in website editors

Legal basis: § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR. No consent is required for these cookies. Details are listed in our Cookie Policy.

The app uses technically necessary storage on your device to keep you logged in and to save your settings (e.g., language).

You can manage or delete cookies at any time in your browser settings.

Google Analytics

If you accept analytics, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It measures, for example, which pages are viewed and how visitors find the website. The measurement is limited to this website. The app is not part of it.

According to Google, Google Analytics 4 does not log or store individual IP addresses. We have switched off Google signals and ad personalisation. Data may be processed by Google LLC in the USA, which is certified under the EU-US Data Privacy Framework.

Legal basis: your consent (Art. 6 (1)(a) GDPR, Section 25 (1) TDDDG). You can withdraw it at any time with the button below or the "Cookie settings" link in the footer; this does not affect the processing before your withdrawal.

Your choice is stored in the c2m_ga cookie (12 months).

Cookies set by Google Analytics: _ga and _ga_* (up to 2 years). Details are listed in our Cookie Policy.

12. Using the close2myheart App

When you register for and use the close2myheart app (web, Android, iPhone), we process the following data in addition to the information above.

Registration and identity verification

For your account we process your e-mail address, password (stored encrypted), profile name, first and last name, address, phone number and date of birth. First and last name, address, phone number and date of birth are used solely for billing and internal identity verification by authorised staff and are never shown on your profile. Your date of birth is used to verify that you are at least 18 years old; registrations under 18 are rejected. Our team reviews your profile photo to verify your age and that the profile is genuine.

Legal basis: Art. 6(1)(b) and (c) GDPR.

Sign-in with Google, Microsoft or Facebook

If you register or log in via Google, Microsoft or Facebook, the respective provider transfers the data you release there to us (e.g., first and last name, e-mail address, address, date of birth). The provider learns that you use our service. The privacy policies of Google, Microsoft and Meta apply to the processing by these providers.

Legal basis: Art. 6(1)(a) and (b) GDPR.

Profile and special categories of personal data

All further profile details (e.g., appearance, interests, relationship status, what you are looking for, meeting places) are voluntary and are used for matching and to present your profile to other members. Some of this information reveals your sexual orientation, gender identity or sex life and is therefore a special category of personal data under Art. 9 GDPR.

We only process this information on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give by entering it in your profile. The information is visible to other members according to your profile settings. You can withdraw your consent at any time with effect for the future by removing or changing the information, or by deleting your account.

Chat, community groups and notifications

We process the content of messages, gifts, photos and voice notes that you send in chats and community groups in order to deliver them, as well as likes, favourites, friend requests, reviews, ratings and complaints. We send you in-app notifications and e-mails according to your notification settings. Legal basis: Art. 6(1)(b) GDPR.

Location and world map (Google Maps)

We only process your location if you share it (browser location or selected city). You only appear on the world map if you enable this feature in your profile settings; you can disable it at any time. The map is provided by Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When the map is displayed, your IP address and map data are transmitted to Google; a transfer to the USA is possible (see section 7). Legal basis: Art. 6(1)(a) and (b) GDPR.

IP geolocation and country blocking (MaxMind GeoLite2)

To protect the app, website and API against abuse, bots and attacks, we determine the country associated with your IP address (IP geolocation) and, where necessary, restrict access from selected countries. The lookup is performed locally on our own server using the GeoLite2 country database; your IP address is not transmitted to MaxMind. We only download the database file regularly from MaxMind. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and abuse prevention).

This product includes GeoLite2 Data created by MaxMind, available from https://www.maxmind.com.

Payments (PayPal)

Subscriptions and Coin packages are paid via PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). PayPal processes your payment details as an independent controller. We only receive the information required for billing (e.g., transaction and subscription status) – never your bank or card details. Legal basis: Art. 6(1)(b) and (c) GDPR.

Coins, subscriptions and campaigns

We store your Coin balance, transactions, subscription status and – if you registered through a campaign or referral link – the associated campaign or referral code. Legal basis: Art. 6(1)(b) and (c) GDPR.

Support requests

If you contact us via the contact form in the app (Tickets), we process your request and the associated account data to answer it. Legal basis: Art. 6(1)(b) and (f) GDPR.

13. Blog Comments

If you comment on our blog:

  • You may use a pseudonym

  • Your e-mail is required

  • We store your IP address for 7 days for security

  • Legal basis: Art. 6(1)(b) and (f) GDPR

We may remove unlawful or disputed comments.

14. Contact via the In-App Contact Form, E-Mail, Fax, or Post

When you contact us, we process your data to respond to your inquiry.

Legal bases:

  • Consent (Art. 6(1)(a) GDPR)

  • Legitimate interest (Art. 6(1)(f) GDPR)

  • Contract initiation (Art. 6(1)(b) GDPR)

Data is deleted once no longer needed.

15. Contact via Telephone

If you call us:

  • Your phone number may be temporarily stored

  • Purpose: processing your request, safety, documentation

  • Legal basis: Art. 6(1)(f) GDPR

16. Social Media Profiles

We operate profiles on social networks.
When you visit these profiles, the respective platform's privacy policies apply.

Data may be used for:

  • Communication

  • Advertising

  • Market research

  • Usage analytics

We recommend asserting data protection rights directly with the respective provider.

17. Applicant Data

Applicant data is processed for the application process.

Legal bases:

  • Art. 6(1)(b) GDPR

  • § 26 BDSG

We request that you do not submit special categories of data (Art. 9 GDPR), except for voluntary disclosure of a disability.

Rejected applications are deleted after 6 months.

18. Your Rights as a Data Subject

You have the right to:

  • Withdraw consent at any time

  • Object to processing

  • Access your stored data (Art. 15 GDPR)

  • Rectification (Art. 16 GDPR)

  • Deletion (Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Lodge a complaint with a data protection authority

To exercise your rights, contact:

Multiple Solution Services
P.O. Box 120420
27518 Bremerhaven, Germany
E-Mail: privacy@mss-services.com

19. Data Security

We use technical and organizational measures to secure your data.
All data transmitted between your browser and our server uses SSL encryption.