The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of EU Member States is:

2. Provision of the Website & Server Log Files

Every time our website is accessed, our system automatically collects technical data and information from the computer system of the calling device:

• Anonymized IP address of the user
• Date and time of server request
• Transferred data volume and HTTP status code
• Browser type, version and operating system
• Referrer URL (previously visited website)

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable and secure server operation).

3. Age Verification & Mandatory Cookies (FSK 18)

To ensure compliance with statutory youth welfare provisions (§ 4 JMStV), we store a technically mandatory cookie named age_verified. This records your confirmation of legal majority (18+) for 30 days so that you do not encounter repeated prompts.

Legal basis: Art. 6(1)(c) GDPR (compliance with statutory obligations) in conjunction with Art. 6(1)(f) GDPR.

4. Payment Processing (NetDebit Gateway)

For topping up account balance and publishing premium ads, we use the certified payment provider NetDebit GmbH. Transaction amount, booking reference, and member identifier are transferred via an encrypted SSL/TLS connection. We do not store sensitive bank account or credit card numbers on our servers.

Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR.