This English version is a translation for information purposes. The German version of this privacy policy is legally binding.
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on data protection can be found in our privacy policy below.
Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Information about the responsible party” in this privacy policy.
On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.
Other data is collected automatically or after your consent when you visit the website by our IT systems. This is mainly technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you enter this website.
Part of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour. If contracts can be concluded or initiated via the website, the data transmitted is also processed for contract offers, orders or other order enquiries.
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time regarding this and other questions on the subject of data protection.
When you visit this website, your surfing behaviour may be statistically evaluated. This is done mainly with so-called analysis programs.
Detailed information on these analysis programs can be found in the following privacy policy.
We host the content of our website with the following provider:
The provider is ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (hereinafter All-Inkl). For details, please refer to All-Inkl’s privacy policy: https://all-inkl.com/datenschutzinformationen/.
The use of All-Inkl is based on Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.
The party responsible for data processing on this website is:
FoundmyLove
Sven Wolf
Bergstr. 5
67808 Weitersweiler, Germany
Email: info@foundmylove.com
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place once these reasons no longer apply.
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data under Art. 9(1) GDPR are processed. In the case of express consent to the transfer of personal data to third countries, data processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your terminal device (e.g. via device fingerprinting), data processing is additionally based on Section 25(1) TDDDG. Consent can be revoked at any time. If your data is required to fulfil a contract or to carry out pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data if this is necessary to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR. Data processing may also be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. The relevant legal bases in each individual case are explained in the following paragraphs of this privacy policy.
In the course of our business activities, we work with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only pass on personal data to external parties if this is necessary to fulfil a contract, if we are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate interest pursuant to Art. 6(1)(f) GDPR in passing it on, or if another legal basis permits the disclosure. When using processors, we only pass on our customers’ personal data on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21(2) GDPR).
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of data processing and, if applicable, a right to correction or deletion of this data. You can contact us at any time regarding this and other questions on the subject of personal data.
You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:
If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
If, after the conclusion of a contract subject to a fee, there is an obligation to transmit payment data, this data is required for payment processing.
Payment transactions via our payment service provider PayPal take place exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
With encrypted communication, your payment data that you transmit to us cannot be read by third parties.
The use of contact data published within the framework of the imprint obligation for sending unsolicited advertising and information material is hereby rejected. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.
Our website uses so-called “cookies”. Cookies are small data packets and do not cause any damage to your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or they are automatically deleted by your web browser.
Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services of third-party companies within websites (e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them. Other cookies may be used to evaluate user behaviour or for advertising purposes.
Cookies that are necessary to carry out the electronic communication process, to provide certain functions you have requested or to optimise the website (e.g. cookies for measuring web audiences) (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies and similar recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG); consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
You can find out which cookies and services are used on this website in this privacy policy.
This website uses the consent tool “Real Cookie Banner” to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this in compliance with data protection law. The provider of this software is devowl.io GmbH, Tannet 12, 94539 Grafling, Germany. The tool is installed on our own server; your consent data is not transmitted to the provider.
When you enter our website, a cookie is stored in your browser in which your decision (consents given or refused) and its time are stored. In addition, we store an anonymised identifier, the time and the content of your decision on our server in order to be able to prove your consent. You can change or revoke your consent at any time via the privacy settings (cookie symbol or corresponding link on the website).
The stored data is kept until you ask us to delete it, delete the cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected. The tool is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.
We use the following cookies or storage entries as technically necessary without requiring consent (Section 25(2) No. 2 TDDDG): WordPress login cookies (only when you log in), the language cookie “pll_language” (selected language), the setting for dark mode and the cookie of Real Cookie Banner itself.
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
This data is not merged with other data sources.
This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for this purpose, the server log files must be recorded.
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the fulfilment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent can be revoked at any time.
The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
If you contact us by email, telephone or fax, your enquiry, including all resulting personal data (name, enquiry), will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the fulfilment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent can be revoked at any time.
The data you send us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
You can register on this website to use additional functions on the site. We only use the data entered for this purpose for the use of the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.
For important changes, for example to the scope of the offer or technically necessary changes, we use the email address provided during registration to inform you in this way.
The data entered during registration is processed for the purpose of implementing the user relationship established by the registration and, if necessary, for initiating further contracts (Art. 6(1)(b) GDPR).
The data collected during registration will be stored by us as long as you are registered on this website and will then be deleted. Statutory retention periods remain unaffected.
You can delete your member account at any time in the settings. Deletion removes your profile and all associated data, in particular profile information, photos, videos, contacts, favourites, notifications and all chat messages in which you were involved, including images and files sent in the chat. The chat messages are also removed for the respective chat partner. Your data at our chat service provider (Firebase) and the push addresses stored for notifications are deleted as well. Deletion takes place without delay, at the latest within one hour. We do not keep an archive of deleted accounts.
Chats that you delete yourself are also deleted permanently and for both chat partners.
Excluded are data that we must retain due to statutory retention obligations, in particular invoices and payment records (retention under commercial and tax law). We keep these data solely for this purpose and only for the period required by law. Deleted data may still be contained in backup copies until the backup is routinely overwritten; it will not be restored.
If you tick the corresponding box during registration or activate this feature later in your profile settings, we will inform you by email about every 14 days about newly registered members who match your search criteria. Without this consent, you will not receive such emails.
The legal basis is your consent (Art. 6(1)(a) GDPR). As proof, we store the status of your consent, the date and time of subscribing or unsubscribing, where you made the setting (registration, profile settings or unsubscribe link) and your shortened IP address. We store this data for as long as your member account exists; it is deleted when your account is deleted.
You can withdraw your consent at any time with effect for the future – via the unsubscribe link in each of these emails or via the switch in your profile settings. The lawfulness of the data processing carried out until the withdrawal remains unaffected.
Members who are presented in these emails appear only with a blurred profile picture, age and country, without names or contact details. The legal basis for this is our legitimate interest in showing members new contact opportunities on our platform (Art. 6(1)(f) GDPR).
If you come to us via an invitation link or invite friends yourself, we process the following data to run the program: the link between the referring and the referred member, the time of registration, the status of the referral (email confirmed, profile photo available, approval), the rewards granted and an encrypted check value (hash) of the IP address to detect duplicate accounts; the IP address itself is not stored for this purpose. We count visits to an invitation link without identifying the people opening it. The invitation code is stored temporarily in the browser only for the duration of the browser session so that it can be entered automatically during registration.
The legal bases are Art. 6(1)(b) GDPR (running the program) and Art. 6(1)(f) GDPR (our legitimate interest in preventing abuse). The referring member only sees the username and the referral status of the referred member. We store the data for as long as the respective member account exists. Details can be found in the Referral Program Terms.
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of website visitors. The website operator receives various usage data, such as page views, length of stay, operating systems used and origin of the user. This data is combined in a user ID and assigned to the respective terminal device of the website visitor.
Furthermore, Google Analytics allows us to record, among other things, your mouse and scroll movements and clicks. Google Analytics also uses various modelling approaches to supplement the collected data sets and uses machine learning technologies in data analysis.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
Google Analytics IP anonymisation is activated. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
More information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
We use Google signals. When you visit our website, Google Analytics collects, among other things, your location, search history and YouTube history as well as demographic data (visitor data). This data can be used for personalised advertising with the help of Google signals. If you have a Google account, the visitor data from Google signals is linked to your Google account and used for personalised advertising messages. The data is also used to create anonymised statistics on our users’ behaviour.
If you would like to receive the newsletter offered on the website, we need an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. Further data is not collected or only on a voluntary basis. We use this data exclusively for sending the requested information. We use the newsletter service provider Brevo for sending (see “Brevo” below); beyond that, we do not pass this data on to third parties.
The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can revoke your consent to the storage of the data, the email address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the revocation.
The data you provide to us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe or the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Data stored by us for other purposes remains unaffected.
After you unsubscribe from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist if this is necessary to prevent future mailings. The data from the blacklist is only used for this purpose and is not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
If you order goods or services from us and provide your email address, this email address may subsequently be used by us to send newsletters, provided we inform you of this in advance. In such a case, the newsletter will only be used to send direct advertising for our own similar goods or services. You can cancel this newsletter at any time. For this purpose, every newsletter contains a corresponding link. The legal basis for sending the newsletter in this case is Art. 6(1)(f) GDPR in conjunction with Section 7(3) of the German Act against Unfair Competition (UWG).
After you unsubscribe from the newsletter distribution list, your email address may be stored by us in a blacklist to prevent future mailings to you. The data from the blacklist is only used for this purpose and is not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
We use Brevo to send our newsletter. The provider is Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France (hereinafter “Brevo”).
Brevo is a service with which the sending of newsletters can be organised and analysed. The data you enter to receive the newsletter (in particular your email address) is stored on Brevo’s servers. According to Brevo, these servers are located exclusively in the European Union.
Double opt-in procedure
After submitting the registration form, you will receive an email with a confirmation link. Only when you click this link will your email address be added to our newsletter distribution list. The time of registration and confirmation as well as your IP address are stored so that we can prove your consent.
Newsletter analysis
With the help of Brevo, we can analyse whether a newsletter message was opened and which links in it were clicked. For this purpose, the emails contain an invisible tracking pixel and links that are forwarded via Brevo. The analysis helps us to better tailor our newsletters to the interests of the recipients. If you do not want any analysis, you can unsubscribe from the newsletter at any time via the unsubscribe link in every newsletter message.
Legal basis and storage period
Data processing is based on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time with effect for the future, for example via the unsubscribe link in the newsletter. The lawfulness of the data processing carried out until the revocation remains unaffected. The data is stored at Brevo until you unsubscribe from the newsletter; thereafter the information above under “Newsletter data” applies.
Further information can be found in Brevo’s privacy policy: https://www.brevo.com/legal/privacypolicy/.
We have concluded a data processing agreement (DPA) with Brevo. This is a contract required by data protection law which ensures that Brevo only processes the personal data of our newsletter subscribers in accordance with our instructions and in compliance with the GDPR.
We use Firebase for the live chat and live games between registered members. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). We only use the Firebase services Authentication (sign-in to the chat) and Realtime Database (real-time transmission of chat notifications and game moves). We do not use any Firebase analytics or marketing functions.
Data processed: member ID and username, chat sign-in status, content and time of the most recently transmitted chat message, online status, game moves and technical connection data (e.g. IP address, browser information). The complete chat history is stored on our own server in Germany.
Storage in the browser: To keep you signed in to the chat, Firebase stores information in your browser’s storage (IndexedDB “firebaseLocalStorageDb” and local storage “firebase:*”). Firebase does not set cookies for this. Firebase is only loaded when you are logged in as a member.
Purpose and legal basis: Processing serves to provide the live chat and live games and to assign them to your member account. The legal basis is Art. 6(1)(b) GDPR, as these functions are part of the membership you use. Information is stored in your browser in accordance with Section 25(2) No. 2 TDDDG, as it is strictly necessary for the function you have expressly requested.
Storage location and access protection: The Firebase database is located in the European Union (Belgium). Each member can technically only access their own data. Google processes the data as our processor; we have concluded a data processing agreement with Google (Firebase Data Processing and Security Terms). Insofar as Google accesses data from outside the EU in individual cases (e.g. for maintenance or support), this is based on the adequacy decision for the EU-US Data Privacy Framework, under which Google LLC is certified, and additionally on the EU Standard Contractual Clauses.
Storage period: The most recently transmitted message is only kept in Firebase until you visit the website again. When your member account is deleted, your Firebase entry and your Firebase sign-in account are deleted (see “Deletion of your member account”). You can delete the sign-in data stored in your browser at any time via your browser settings.
Further information: https://firebase.google.com/support/privacy and Google’s privacy policy: https://policies.google.com/privacy.
You can add FoundmyLove to the home screen of your smartphone as an app (a so-called web app). No app store is needed for this. For the app to work, your browser stores a program file of our website (service worker) and small settings in its storage, e.g. when you were last asked about notifications. This storage is strictly necessary for the app function you have requested (Section 25(2) No. 2 TDDDG). You can remove the app from your home screen at any time like any other app.
Notifications: If you wish, we will notify you when a member sends you a chat message or when a community meetup that you have signed up for or are hosting is about to start. You only receive notifications if you expressly activate them and confirm your device’s prompt. A chat notification contains the sender’s username and the number of new messages, but not the content of the message. The number on the app icon shows how many unread messages you have.
Data processed: To send notifications, we store with your member account the delivery address generated by your device (push address) together with the associated technical keys, the selected language and the time of activation (at most five devices per account). If another member logs in on the same device, the device is automatically removed from the previous account.
Delivery: We send the notifications ourselves from our server. For technical reasons, delivery to your device always takes place via the notification service of the manufacturer of your device or browser (e.g. Apple for iPhones, Google for Android devices with Chrome, Mozilla for Firefox, Microsoft for Edge). The content of each notification is encrypted according to the “Web Push” standard so that the respective service cannot read it; the service only receives the encrypted message, the push address and technical connection data. A transfer to the USA cannot be ruled out; the providers mentioned are certified under the EU-US Data Privacy Framework. We do not use any other services (e.g. providers of marketing notifications).
Legal basis: Processing is based on your consent (Art. 6(1)(a) GDPR; Section 25(1) TDDDG), which you give by activating notifications.
Withdrawal and storage period: You can switch off notifications at any time in the settings of your device or browser, or remove the app. The push address then becomes invalid and is automatically deleted by us at the next delivery attempt. At the latest when your member account is deleted, all push addresses stored for your account are deleted.
So that members who speak different languages can understand each other, we offer a translation function in the chat. For this we use the Google Cloud Translation API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you have a message translated, only the text of this message and the desired target language are transmitted from our server to Google; your name, your member ID and your IP address are not transmitted. Google processes the texts as a processor solely to create the translation and, according to its own information, does not use them for training. A transfer to the USA cannot be ruled out; Google LLC is certified under the EU-US Data Privacy Framework, and the EU Standard Contractual Clauses apply additionally.
The legal basis is Art. 6(1)(b) GDPR, as the translation is a function of your membership that you have requested. Further information: https://cloud.google.com/terms/data-processing-addendum.
For user accounts without their own profile picture, a placeholder image may be displayed via the Gravatar service. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. An encrypted value (hash) of your email address and your IP address are transmitted to Automattic in order to check whether an image is stored for this email address.
Use is based on our legitimate interest in a uniform presentation (Art. 6(1)(f) GDPR); if consent has been requested, on the basis of Art. 6(1)(a) GDPR. Automattic is certified under the EU-US Data Privacy Framework. Further information: https://automattic.com/privacy/.
To display country flags consistently in all browsers, we load a small program library via the content delivery network jsDelivr. The provider is Prospect One, Królewska 65A/1, 30-081 Kraków, Poland. When loading, your IP address is transmitted to the provider. The legal basis is our legitimate interest in an error-free presentation of our website (Art. 6(1)(f) GDPR). Further information: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net.
This site uses Google Fonts for the uniform display of fonts, which are installed locally on our server. No connection to Google servers takes place.
We collect, process and use personal customer and contract data to establish, define the content of and change our contractual relationships. We only collect, process and use personal data about the use of this website (usage data) insofar as this is necessary to enable the user to use the service or to bill for it. The legal basis for this is Art. 6(1)(b) GDPR.
The customer data collected will be deleted after completion of the order or termination of the business relationship and expiry of any existing statutory retention periods. Statutory retention periods remain unaffected.
We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the payment service provider commissioned with payment processing.
No further transfer of data takes place, or only if you have expressly consented to the transfer. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.
The basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data to fulfil a contract or pre-contractual measures.
We integrate payment services of third-party companies on our website. When you make a purchase from us, your payment data (e.g. name, payment amount, account details, credit card number) is processed by the payment service provider for the purpose of payment processing. The respective contractual and data protection provisions of the respective providers apply to these transactions. The payment service providers are used on the basis of Art. 6(1)(b) GDPR (contract processing) and in the interest of a payment process that is as smooth, convenient and secure as possible (Art. 6(1)(f) GDPR). Insofar as your consent is requested for certain actions, Art. 6(1)(a) GDPR is the legal basis for data processing; consent can be revoked at any time for the future.
We use the following payment services / payment service providers on this website:
The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.
For details, please refer to PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
The provider of the payment service is Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. Apple’s privacy policy can be found at: https://www.apple.com/legal/privacy/.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google’s privacy policy can be found here: https://policies.google.com/privacy.
Payment with Apple Pay or Google Pay is processed via PayPal; PayPal’s privacy provisions apply additionally.
Anyone who wants to host a community meetup must be a Gold or Platinum member, have a verified profile (blue check) and have their ID checked once. To do this, you upload a photo of your ID card or passport; you may black out the document number. The image is stored in a protected folder on our server that cannot be accessed publicly (for hosting see section 2) and is visible only to our administrators. We check whether name, photo and age match the profile and whether the ID is valid.
We delete the image immediately after our decision. We only keep a note that, and when, your ID was verified and which administrator checked it; if rejected, also the reason. If an upload is not processed within 30 days, we delete it automatically. Verified hosts receive a host symbol in their profile that is visible to other members.
The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by ticking the box when uploading and which you can withdraw at any time with effect for the future, as well as our legitimate interest in the safety of real-life meetups (Art. 6(1)(f) GDPR). Without an ID check you cannot host meetups, but you can still take part in them.
When you sign up for a meetup, we store your registration (user account, time, status, waiting list if applicable). Hosts as well as Gold and Platinum members can see your username and profile picture in the participant list. From 2 hours before until 12 hours after the start you can check in on site (“Yes, I am here”) or cancel at short notice (“No, I am not coming”). We only store that, and when, you checked in or cancelled; we do not record your location. The host can see who has checked in or cancelled and is notified of cancellations. If you have activated notifications, we remind you of the check-in by notification when the meetup starts (see “FoundmyLove as an app and notifications”). Messages in a meetup’s group chat are visible only to the host and participants. The legal basis is the performance of the user agreement (Art. 6(1)(b) GDPR).
After a meetup, participants receive an email inviting them to rate the meetup. Participants who checked in or confirmed “Everything was fine” can rate the host with stars in four categories (organisation, venue, atmosphere, safety) and write a comment. The review is published immediately with the reviewer’s username and profile picture and is visible to Gold and Platinum members on the meetup page and on the host page. The host can reply publicly once.
If a member reports a review, we store the report (who, when, reason) and notify our team by email. We check the report and remove reviews that violate our GTC. Reviews remain stored as long as the meetup and your account exist. You can ask our support to delete your own review at any time. The legal basis is the performance of the user agreement (Art. 6(1)(b) GDPR) and our legitimate interest in reliable and safe meetups (Art. 6(1)(f) GDPR).
This section explains which data we process in connection with advertisements on our website, business accounts of venues and our affiliate partner program. Business cooperation is governed by our Terms for Businesses and Partners.
On some pages (e.g. the member overview) we display advertising banners. The banners are delivered from our own server. We do not use any third-party ad networks; advertisers do not set cookies via our website and do not receive any personal data of our visitors.
Which banner is displayed depends on the language of the page and on your country. For logged-in members we take the country from the profile; for other visitors we briefly determine it from your IP address using a country database stored on our server, without storing the IP address for this purpose. Members with a Gold or Platinum membership do not see advertising.
If you click on a banner, you are redirected to the advertiser via an address on our website. We only increase a click counter for the respective banner and do not store any information about you. After the redirect, the advertiser’s privacy policy applies.
The legal basis is our legitimate interest in financing our service through advertising and in showing relevant ads (Art. 6(1)(f) GDPR).
If you submit an advertising request via the form on the page “Advertise on FoundmyLove”, we process the data you provide: company, contact person, email address, optionally phone number, website, target countries/languages, budget and message and – if you upload them – your banner files. The request is stored in our system and sent to us by email; uploaded banners are stored in our media library. To prevent abuse, we limit the number of requests per connection; for this we store an encrypted check value (hash) of your IP address for one hour, not the IP address itself.
The legal basis is the processing of your request and, where applicable, the performance of the contract (Art. 6(1)(b) GDPR) as well as our legitimate interest in preventing spam (Art. 6(1)(f) GDPR). We delete the data as soon as it is no longer required for processing and no statutory retention obligations apply (e.g. up to ten years for business letters and invoices under Section 257 of the German Commercial Code and Section 147 of the German Fiscal Code).
Restaurants, bars and other organisers can offer their own events in the “Community meetups” section via a business account. For this we process company and contact data (e.g. company name, legal form, address, contact person, email address, tax number or VAT ID), event details, messages in the event chat as well as billing and invoice data. The company name, the venue address and the event details are published on our website.
Venues have no access to member profiles or the member search. They only receive the information required to hold the event (e.g. the number of registrations) and messages that participants send them via the event chat themselves. Venues may use this data only for the respective event.
The legal basis is the performance of the contract with the venue (Art. 6(1)(b) GDPR) and compliance with tax and commercial law obligations (Art. 6(1)(c) GDPR). We keep invoices and accounting records for ten years (Section 147 of the German Fiscal Code, Section 257 of the German Commercial Code); we delete the remaining data after the end of the contract.
If you apply as an affiliate partner, we process the information from the application form: name, optionally company, email address, country of residence, your channels (e.g. website, Instagram, TikTok, YouTube, Facebook), reach, target countries/languages, your information on the planned promotion, optionally the type and number of your tax number, and your payout details (PayPal email address or account holder, IBAN/account number and BIC/SWIFT). After approval you receive a partner code and a personal link to your partner dashboard, where you can view your statistics and change your payout details.
For payouts we transmit the necessary data to PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) or to our bank. The legal basis is the performance of the partner contract (Art. 6(1)(b) GDPR) and compliance with tax and commercial law obligations (Art. 6(1)(c) GDPR). We keep accounting records for ten years (Section 147 of the German Fiscal Code, Section 257 of the German Commercial Code); we delete the remaining data after the end of the partnership or after an application has been rejected.
If you come to our website via a partner’s link (link with the addition “?partner=…”), we set our own cookie named “fmla_ref”. It only contains the partner’s identifier and the time of the click and is automatically deleted after 30 days. In addition, we store for this click: the time, the referring website (domain and address without parameters, if transmitted by your browser), the page visited, the page language and the country, which we determine from your IP address. We do not store the IP address itself. So that a click is counted only once per day, we store an encrypted check value (hash) formed from the IP address, partner and date for 24 hours.
If you register within 30 days, we store in your member account which partner you came through, the time and your country. For later purchases of Premium packages or credits within 12 months, we calculate the partner’s commission based on the net amount.
The partner does not receive any personal data about you – neither your name nor your profile or contact details. In its dashboard it only sees aggregated figures (clicks, registrations, purchases) and the amount of its commissions.
The legal basis for the processing is our legitimate interest in correct settlement with our partners and in preventing abuse (Art. 6(1)(f) GDPR); for storing the cookie on your device we rely on Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). You can object at any time by deleting or blocking the cookie in your browser or by contacting us. We delete click data no later than 24 months after the click, and the attribution in your member account when your account is deleted.
Please enter your username or email address. You will receive a link to create a new password via email.