Privacy Policy

As of July 2026

Your privacy is our top priority–especially with an offer like this. In this Privacy Policy, we transparently explain what personal data we collect, for what purposes we process it, and what rights you have in this regard. Data processing is carried out exclusively in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.

1. Data Controller

The entity responsible for data processing on this platform within the meaning of Article 4(7) of the GDPR is:

Mia Media UG (limited liability)
Beispielallee 12
10115 Berlin, Germany

Email: datenschutz@mia-media.example

If you have any questions regarding data protection, you can contact us at any time at the address listed above. You can reach our Data Protection Officer at the same email address with the subject line “Data Protection.”

2. What Data We Collect

Depending on how you use the platform, we process different categories of personal data:

  • Registration data: username, email address, encrypted password, and your preferred country or language.
  • Profile data: voluntary information you provide in your account, such as your display name or preferences.
  • Usage data: pages and content viewed, time spent on the site, clicks, and interactions such as likes, comments, and messages.
  • Technical data: IP address (stored in truncated form), browser type, operating system, device identifiers, and approximate region (derived via GeoIP).
  • Payment data: Amount, time, selected payment method, and transaction status. We never store complete credit card or account details (see Section 6).
  • Communication data: Content of support requests and messages you send via the platform.

3. Purposes and Legal Bases for Processing

We process your data exclusively for clearly defined purposes:

  • Performance of a contract (Art. 6(1)(b) GDPR): Providing your account, content, and membership.
  • Legitimate interest (Art. 6(1)(f) GDPR): Platform security, fraud prevention, technical error analysis, and improvement of our services.
  • Legal obligation (Art. 6(1)(c) GDPR): Retention of billing documents and compliance with tax and commercial law obligations.
  • Consent (Art. 6(1)(a) GDPR): Optional cookies, analytics, and marketing emails, which you may revoke at any time.

Processing for a purpose other than the original one will only take place if it is permitted by law.

4. Cookies, Tracking, and Analytics

We use cookies and similar technologies. Technically necessary cookies–such as those for your login, shopping cart, or language settings–are essential for the platform to function and do not require your consent.

Analytics and convenience cookies help us understand which content is popular and how we can improve the platform. We only set these if you have consented via the cookie banner. You can adjust or revoke your selection at any time via the cookie settings in the footer.

We do not sell your data or share user profiles with advertising networks.

5. Age Verification and Protection of Minors

This platform is intended exclusively for adults (18 years of age and older). To protect minors, we may require verification to confirm your age.

The data processed in this context is used solely for the purpose of age verification. Verification documents are reviewed by a specialized service provider and, once successfully confirmed, are stored only to the extent required by law–ID photos are not retained permanently. We never share this data for advertising or any other purposes.

6. Payment Processing

Payments are processed through external, PCI-DSS-certified payment service providers (e.g., credit card acquirers, PayPal, SEPA providers). You enter your complete payment information directly with the respective provider–it is not stored on our systems.

We only receive information from the payment service provider regarding whether a payment was successful, along with the amount and an anonymized transaction reference. We need this information to activate your membership and generate billing statements. The privacy policies of the respective payment service provider also apply.

7. Confidentiality and Billing

We understand that discretion is especially important with a service like this. That’s why your bank statement will show no explicit reference to the nature of the content–the charge will appear under a neutral billing description.

Notifications and emails sent out are also designed so that third parties cannot draw any conclusions about your use of the platform.

8. Disclosure to Third Parties

We will only disclose your personal data if it is necessary to provide our services or if we are legally required to do so. Recipients may include:

  • Data processors (Art. 28 GDPR): hosting, email delivery, payment processing, and age verification–each contractually obligated to maintain confidentiality and follow our instructions.
  • Government agencies, provided we are legally required to disclose information or it is necessary to enforce our rights.

Under no circumstances will your data be sold to third parties.

9. Retention Period

We store your data only for as long as is necessary for the respective purposes. Account data is retained for the duration of your membership and deleted within 30 days after your account is deleted–with the exception of data that we are required to retain due to statutory retention periods (e.g., billing documents, typically up to 10 years). After that, the data will be deleted or anonymized.

10. Data Transfer to Third Countries

To the extent that individual service providers process data outside the European Economic Area (EEA), we ensure, through appropriate safeguards, that an adequate level of data protection is guaranteed–in particular through the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR) or a valid adequacy decision.

11. Data Security

We take technical and organizational measures to protect your data from loss, misuse, and unauthorized access. These include end-to-end TLS encryption of the connection, hashed storage of passwords, strictly regulated access rights, and regular security audits. However, no system is completely secure–please protect your login credentials and use a strong, unique password.

12. Your Rights

Under the GDPR, you have comprehensive rights regarding your personal data:

  • Right of access (Art. 15) – what data we process about you.
  • Right to rectification (Art. 16) – correction of inaccurate data.
  • Erasure (Art. 17) – “Right to be forgotten.”
  • Restriction of processing (Art. 18).
  • Data portability (Art. 20) – Receiving your data in a commonly used format.
  • Objection (Art. 21) to processing based on legitimate interests.
  • Withdrawal of consent – effective for the future.

To exercise your rights, simply send an informal message to datenschutz@mia-media.example. In addition, you have the right to file a complaint with a data protection supervisory authority.

13. Changes to This Privacy Policy

We update this Privacy Policy when our services, legal requirements, or the technologies we use change. The most recent version published on this page is the one that applies. We will also notify you of any significant changes via email or through a notice on the platform.

14. Contact

Do you have questions about data protection or would you like to exercise one of your rights? Just write to us–we’re happy to help:

Mia Media UG (limited liability)
Beispielallee 12, 10115 Berlin
Email: datenschutz@mia-media.example