Privacy notice: Application for the alpha phase

As of September 2026

This notice provides information on the processing of personal data when you apply to take part in the alpha phase of lovlov using the form at lovlov.co/alpha. Access to the website is governed by the privacy notice on the use of the website.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

Alpha 360 Omega GmbH
c/o Unicorn Workspace GmbH
Schlüterstraße 39
10629 Berlin
Germany
Telephone: +49 30 52006260
Email: hello@lovlov.co

2. Data protection officer

The controller has designated an external data protection officer, who can be contacted at datenschutz@lovlov.co; messages sent to this address are forwarded to the data protection officer unchanged.

3. Processing of your personal data

3.1 Application for the alpha phase

Description and scope of processing. In the course of the application, the following data is processed:

• first name and email address (mandatory information)
• country
• age range of the applicant and of the partner
• length of the relationship, shared household, children
• reason for the application, preferred start alone or as a couple, urgency
• previous experience with relationship services and with AI for relationship questions
• how the applicant heard about lovlov, and preferred start date

We receive the application details only when the applicant sends them by email to hello@lovlov.co.

Purpose of processing. Selection of the participants in the alpha phase, contacting them for this purpose and consideration for admission if a place becomes available.

Legal basis. Article 6(1)(b) GDPR (taking steps prior to entering into a contract at the request of the applicant). Information on the age range and on the shared living circumstances of the partner is processed on the basis of Article 6(1)(f) GDPR; the legitimate interest lies in selecting suitable participants. The information on how the applicant heard about lovlov is processed on the basis of Article 6(1)(f) GDPR; the legitimate interest lies in evaluating our own communication channels.

Source. Information about the partner originates from the applicant.

Provision of data. There is no statutory or contractual obligation to provide the data. Without first name and email address, the application cannot be processed. All other information is voluntary.

Storage period. The application data is erased as soon as the application procedure has been completed for the applicant. If the application is considered for admission if a place becomes available, the data required for this purpose is stored until the process of filling available places has been completed, and no longer than six months after the selection of the participants has been completed. If the application is withdrawn, the data is erased without undue delay.

Exercising your rights. You can withdraw your application at any time by sending an informal email to hello@lovlov.co. In this case, your data will be erased.

4. Recipients of personal data

5. Transfers to third countries

When certain service providers are used, personal data may be transferred to servers in third countries outside the European Union, in particular to the United States. For the United States, an adequacy decision under Article 45(3) GDPR has applied since 11 July 2023 to providers certified under the EU-US Data Privacy Framework. Where a provider is not certified, the transfer is based on appropriate safeguards under Article 46(2)(c) GDPR (standard contractual clauses of the European Commission). The basis applicable to each recipient is set out in Section 4. You can request a copy of the standard contractual clauses at hello@lovlov.co.

Please note that a transfer to the United States involves risks despite an adequacy decision or standard contractual clauses. Providers of electronic communication services established in the United States are subject to surveillance by US intelligence services under 50 U.S. Code § 1881a (“FISA 702”) and may be obliged to make personal data available to US authorities. Under the CLOUD Act (18 U.S.C. § 2713), US security authorities are also entitled to access data of European companies whose parent companies are established in the United States.

6. Your rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights against the controller:

Right of access (Article 15 GDPR). You have the right to obtain confirmation as to whether personal data concerning you is being processed. Where this is the case, you have the right to access this data and the following information: the purposes of processing; the categories of personal data; the recipients or categories of recipients; the envisaged storage period or the criteria used to determine it; the existence of the rights to rectification, erasure, restriction or objection; the right to lodge a complaint with the competent supervisory authority; where applicable, the source of the data; where applicable, the existence of automated decision-making including profiling; where applicable, the transfer to a third country.

Right to rectification (Article 16 GDPR). If your personal data is inaccurate or incomplete, you can request its rectification or completion without undue delay.

Right to restriction of processing (Article 18 GDPR). You can request the restriction of processing if you contest the accuracy of the data, for the period of verification; if the processing is unlawful and you request restriction instead of erasure; if we no longer need the data but you require it for the establishment, exercise or defence of legal claims; or if you have objected, pending verification whether our legitimate grounds override yours.

Right to erasure (Article 17 GDPR). You can request the erasure of your personal data without undue delay if the data is no longer necessary for the purposes for which it was collected; if you withdraw your consent and there is no other legal ground; if you have objected and there are no overriding legitimate grounds; if the data has been processed unlawfully; or if erasure is required to comply with a legal obligation. This does not apply to the extent that processing is necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.

Right to data portability (Article 20 GDPR). Where the processing is based on consent or a contract and carried out by automated means, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format or, where technically feasible, to have it transmitted to another controller.

Right to withdraw consent (Article 7(3) GDPR). You can withdraw consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

An informal message to hello@lovlov.co is sufficient to exercise your rights.

Right to object (Article 21 GDPR). You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR. Please send your objection to hello@lovlov.co.

7. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR (Article 77 GDPR). The supervisory authority competent for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59-61
10555 Berlin
Germany
www.datenschutz-berlin.de

8. Automated decision-making

No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place.