Privacy notice: Use of the website

As of 5 November 2026

This notice provides information on the processing of personal data when you visit the website lovlov.co, when you contact us by email and when you book a call. Separate privacy notices, available at lovlov.co/privacy, apply to the application for participation in the alpha phase, to the use of the test and to purchase and withdrawal.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

Alpha 360 Omega GmbH
c/o Unicorn Workspace GmbH
Schlüterstraße 39
10629 Berlin
Germany
Telephone: +49 30 52006260
Email: hello@lovlov.co

2. Data protection officer

The controller has designated an external data protection officer, who can be contacted at datenschutz@lovlov.co; messages sent to this address are forwarded to the data protection officer unchanged.

3. Processing of your personal data

3.1 Provision of the website and creation of log files

Description and scope of processing. Each time the website is accessed, the system automatically collects data and information from the device of the accessing user:

• IP address
• information about the browser type and the version used
• the operating system
• date and time of access
• the page accessed
• the website from which access is made

This data is stored in the system's log files. This data is not stored together with other personal data of the user.

Purpose of processing. The temporary storage of the IP address is necessary to deliver the website to the user's device. Storage in log files takes place to ensure the functionality of the website and the security of the information technology systems. The data is not evaluated for marketing purposes.

Legal basis. Article 6(1)(f) GDPR. The legitimate interest lies in the purposes stated.

Provision of data. There is no statutory or contractual obligation to provide the data. Without the technically required access data, the website cannot be delivered.

Storage period. The data is erased as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of the provision of the website, this is the case when the respective session ends. Personal access data in log files is erased no later than seven days after it is recorded.

Exercising your rights. The collection of data for the provision of the website and its storage in log files is strictly necessary for the operation of the website. You can object to the processing under Article 21 GDPR; whether the objection succeeds depends on a balancing of interests.

3.2 Reach measurement

Description and scope of processing. For reach measurement, we use Plausible Analytics, a service of Plausible Insights OÜ, Tartu, Estonia. The service does not set cookies, and the data is processed exclusively in the European Union. When a page is accessed, the following data is transmitted: the address of the page without access identifiers contained in it, the referring website and campaign parameters, the browser, the operating system and the device type, the scroll depth, the time spent on the page and interactions with the page. The IP address is used only to determine the approximate location (country, region, city) and to form a visitor identifier that changes every day. Neither the IP address nor a permanent identifier linking visits on different days is stored.

Purpose of processing. Analysis of the use of the website in order to design and improve the offering.

Legal basis. Article 6(1)(f) GDPR. The legitimate interest lies in the analysis of the use of the website.

Provision of data. The provision of the data is voluntary and not required for the conclusion of a contract. The website can also be used without reach measurement.

Storage period. The data is stored until the entry for this website is deleted at the service.

Exercising your rights. You can object to the processing at any time under Article 21 GDPR (Section 6). Independently of this, you can exclude your browser from reach measurement using the switch on this page; this choice is stored in your browser.

3.3 Access to terminal equipment and cookies

No cookies are set when you visit the information pages. No scripts of advertising providers are integrated, and there is no tracking across different websites. Fonts are delivered from our own server. Local browser storage is used only to store the exclusion of your browser from reach measurement under Section 3.2. Section 3.6 applies instead to a video that you start yourself. Access to terminal equipment when taking part in the test is governed by the privacy notice “Taking part in lovlov”.

3.4 Email contact

Description and scope of processing. You can contact us at the email address hello@lovlov.co. In this case, the personal data transmitted with the email is stored. The data is processed to handle the enquiry and, where required by law, to comply with retention obligations.

Purpose of processing. Handling of and response to the enquiry.

Legal basis. Where the processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract at your request, Article 6(1)(b) GDPR. Otherwise, Article 6(1)(f) GDPR; the legitimate interest lies in handling of and responding to the enquiry.

Provision of data. The provision of data is neither required by law nor by contract. Without the information required to handle it, the enquiry cannot be answered.

Storage period. The data is erased when the conversation has ended. The conversation has ended when it is apparent from the circumstances that the matter concerned has been conclusively resolved. Commercial and business letters are retained on the basis of Article 6(1)(c) GDPR in conjunction with Section 257 HGB (German Commercial Code) and Section 147 AO (German Fiscal Code) for six years from the end of the calendar year in which they were received or sent; statutory extensions remain unaffected.

Exercising your rights. For processing based on legitimate interests, the right to object under Section 6 applies.

3.5 Booking a call

Description and scope of processing. A call with the founder can be booked via an appointment page. When booking, the first name, last name, email address, the selected time and the statement on transcription are processed. The invitation with access to the video conference and reminders are sent by email. The call is transcribed if consent to transcription has been entered in the booking form and all persons present agree orally at the start of the call. The call and the transcript may contain information about sex life, health and mental wellbeing.

Purpose of processing. Organising and holding the call. The transcript is used to understand the concerns of couples and to develop lovlov further; it is not used to train artificial intelligence models.

Legal basis. For the booking and the call, Article 6(1)(b) GDPR. For the transcription, Article 6(1)(a) in conjunction with Article 9(2)(a) GDPR. Consent can be withdrawn at any time with effect for the future.

Provision of data. A call cannot be booked without name and email address. Transcription is voluntary. If consent is missing from the booking form or is not given in the call, the call takes place without a transcript; questions can also be asked by email at any time (Section 3.4).

Storage period. The transcript is deleted six months after the call. Section 3.4 applies accordingly to the booking data.

Exercising your rights. To withdraw consent, a message to hello@lovlov.co or a statement during the call is sufficient. Otherwise, Section 6 applies.

3.6 Embedded videos

Description and scope of processing. On some pages a video from YouTube can be played, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. No connection to YouTube is established before playback; the preview image is on our server. The player loads only when you click play. Google then receives in particular your IP address, the address of the calling page and details of your browser and device, and may store or read information in your browser. Google also processes this data for its own purposes, including advertising, and may transfer it to the United States; the basis is the adequacy decision (EU-US Data Privacy Framework).

Purpose of processing. Playing the video you have selected.

Legal basis. Article 6(1)(a) GDPR and Section 25(1) of the German TDDDG. You give your consent by clicking play.

Provision of data. Use is voluntary. The video can also be accessed directly on YouTube.

Storage period. We store no data about your click. Google's privacy policy applies to its processing.

Exercising your rights. You can withdraw your consent at any time with effect for the future by stopping playback and leaving the page; without a new click, no further connection to YouTube is established. For data already collected, please contact Google. Otherwise, Section 6 applies.

3.7 Persons named on resource pages

Description and scope of processing. On our resource pages we recommend books, videos, podcasts, accounts and studies. For this purpose we process the name, user name, profile picture, professional details, the titles and our assessment of their work and public reach figures of the persons named there. The details come from publicly accessible sources, such as the websites of those persons, publishers and platforms.

Purpose of processing. Selecting and presenting content for our readers.

Legal basis. Article 6(1)(f) GDPR. The legitimate interest lies in recommending publicly accessible work by persons acting in a professional capacity.

Storage period. The details are stored for as long as an entry is shown and are then removed at the next revision of the register.

Exercising your rights. You may object to the processing under Article 21 GDPR at any time; a message to hello@lovlov.co is sufficient. Otherwise, Section 6 applies.

4. Recipients of personal data

The following recipients act as processors:

Data is disclosed to further recipients only when you start a video (Section 3.6) or where we are legally obliged to do so.

5. Transfers to third countries

When certain service providers are used, personal data may be transferred to servers in third countries outside the European Union, in particular to the United States. For the United States, an adequacy decision under Article 45(3) GDPR has applied since 11 July 2023 to providers certified under the EU-US Data Privacy Framework. Where a provider is not certified, the transfer is based on appropriate safeguards under Article 46(2)(c) GDPR (standard contractual clauses of the European Commission). The basis applicable to each recipient is set out in Section 4. You can request a copy of the standard contractual clauses at hello@lovlov.co.

Please note that a transfer to the United States involves risks despite an adequacy decision or standard contractual clauses. Providers of electronic communication services established in the United States are subject to surveillance by US intelligence services under 50 U.S. Code § 1881a (“FISA 702”) and may be obliged to make personal data available to US authorities. Under the CLOUD Act (18 U.S.C. § 2713), US security authorities are also entitled to access data of European companies whose parent companies are established in the United States.

6. Your rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights against the controller:

Right of access (Article 15 GDPR). You have the right to obtain confirmation as to whether personal data concerning you is being processed. Where this is the case, you have the right to access this data and the following information: the purposes of processing; the categories of personal data; the recipients or categories of recipients; the envisaged storage period or the criteria used to determine it; the existence of the rights to rectification, erasure, restriction or objection; the right to lodge a complaint with the competent supervisory authority; where applicable, the source of the data; where applicable, the existence of automated decision-making including profiling; where applicable, the transfer to a third country.

Right to rectification (Article 16 GDPR). If your personal data is inaccurate or incomplete, you can request its rectification or completion without undue delay.

Right to restriction of processing (Article 18 GDPR). You can request the restriction of processing if you contest the accuracy of the data, for the period of verification; if the processing is unlawful and you request restriction instead of erasure; if we no longer need the data but you require it for the establishment, exercise or defence of legal claims; or if you have objected, pending verification whether our legitimate grounds override yours.

Right to erasure (Article 17 GDPR). You can request the erasure of your personal data without undue delay if the data is no longer necessary for the purposes for which it was collected; if you withdraw your consent and there is no other legal ground; if you have objected and there are no overriding legitimate grounds; if the data has been processed unlawfully; or if erasure is required to comply with a legal obligation. This does not apply to the extent that processing is necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.

Right to data portability (Article 20 GDPR). Where the processing is based on consent or a contract and carried out by automated means, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format or, where technically feasible, to have it transmitted to another controller.

Right to withdraw consent (Article 7(3) GDPR). You can withdraw consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

An informal message to hello@lovlov.co is sufficient to exercise your rights.

Right to object (Article 21 GDPR). You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR. Please send your objection to hello@lovlov.co.

7. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR (Article 77 GDPR). The supervisory authority competent for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59-61
10555 Berlin
Germany
www.datenschutz-berlin.de

8. Automated decision-making

No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place.