Privacy Policy

Last updated: 1 January 2026

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:

Herzklopfen GmbH
Musterstraße 1
60311 Frankfurt am Main
Germany

Email: datenschutz@herz-klopfen.com
Web: www.herz-klopfen.com

For any data protection questions you can contact our Data Protection Officer directly: datenschutz@herz-klopfen.com

2. Data We Collect

We collect and process the following categories of personal data:

Registration data: When you create an account we collect your first name, email address, age, gender and a password chosen by you (stored as a secure hash).

Profile data: Optional information you add to your profile, such as profile photos, interests, descriptions and other personal details you choose to share.

Usage data: Information about your activity on the platform, e.g. messages (sent and received), search activity, profile views, clicks and reactions to profiles.

Technical data: IP address, browser type, operating system, device identifiers, time zone and the timestamp of your visits. This data is required for security and error analysis.

Cookie data: Information collected via cookies and similar technologies. Details can be found in our Cookie Policy.

3. Purposes and Legal Basis

We process your personal data for the following purposes:

Platform operation (Art. 6(1)(b) GDPR): Providing, managing and improving the Herzklopfen platform and user communication.
Matching and personalisation (Art. 6(1)(b) GDPR): Suggesting compatible profiles based on your information and usage behaviour.
Security (Art. 6(1)(f) GDPR): Detecting and preventing fraud, abuse and other unlawful activities on the platform.
Legal obligations (Art. 6(1)(c) GDPR): Compliance with statutory retention obligations and handling official requests.
Customer service (Art. 6(1)(b) GDPR): Processing support requests, reports and complaints.

We do not sell your personal data to third parties. Disclosure only takes place in the following cases:

Processors: We engage carefully selected service providers (e.g. hosting providers, email services) who process data on our behalf. They are contractually obligated to comply with data protection requirements (data processing agreement pursuant to Art. 28 GDPR).
Authorities: We may be required to disclose data to law enforcement or other public bodies where required by law or necessary to prevent serious harm.
Consent: With your explicit consent, data may be shared with additional third parties.

All transfers to third countries outside the EU only take place with appropriate safeguards pursuant to Art. 46 GDPR (e.g. EU Standard Contractual Clauses).

5. Cookies

Herzklopfen uses cookies and similar technologies to provide and improve the platform. Cookies are small text files stored on your device.

We use the following cookie categories:

Necessary cookies: Essential for the platform to function (e.g. session cookies, CSRF protection). These cannot be disabled.
Preference cookies: Store your personal settings such as language and display preferences (retention: 1 year).
Analytics cookies: Help us analyse platform usage anonymously and improve the service (retention: up to 2 years).

Detailed information about the cookies we use can be found in our Cookie Policy.

6. Your Rights as a Data Subject

Under the GDPR you have the following rights:

Right of access (Art. 15)

You have the right to obtain confirmation of whether we process personal data about you and to request a copy of that data.

Right to rectification (Art. 16)

You have the right to request correction of inaccurate data or completion of incomplete data.

Right to erasure (Art. 17)

You have the right to request deletion of your personal data, provided no statutory retention obligations apply.

Data portability (Art. 20)

You have the right to receive your data in a structured, machine-readable format and to transmit it to another controller.

Right to object (Art. 21)

You have the right to object at any time to processing based on legitimate interests.

Right to restriction (Art. 18)

In certain cases you can request restriction of the processing of your data.

You also have the right to lodge a complaint with the competent data protection supervisory authority. The responsible authority is the Hessian Commissioner for Data Protection and Freedom of Information.

7. Privacy Contact

For all data protection questions, to exercise your rights or for any concerns about data processing, please contact:

Herzklopfen GmbH – Data Protection
Email: datenschutz@herz-klopfen.com
Musterstraße 1, 60311 Frankfurt am Main

We handle all data protection requests within 30 days as required by the GDPR. For complex requests this deadline may be extended by a further 60 days — we will inform you in advance if this is the case.