GEONDA GmbH hereby provides information on the use and collection of data in connection with this website. The following statement gives you an overview of what type of data is collected for which purpose.

Data Processing on This Website

The personal data collected during registration is used for the operation and billing of the functions offered by this website. When creating an account, personal data such as a pseudonym, password, email address, and IP address are stored. For certain payment systems, the collection of additional personal data (e.g., mobile phone number or bank account details) may be required; likewise, for extended system functions involving a callback or sending of an SMS, the mobile phone or telephone number may be collected. To request a free test account, a mobile phone number is required. By sending a verification code via SMS, it is verified whether the mobile phone number belongs to the current website visitor. The telephone number and/or bank account details are linked to the user’s account and are not shared or sold to third parties. The mobile phone number is also used to ensure that a person does not sign up multiple times for the free test account. To protect against access by minors, certain personal data is required. This data is only used to verify the minimum required age for viewing age-restricted content. By creating an account, you also agree that special categories of personal data may be collected and processed.

Data Processing According to Art. 14 GDPR (Information from Other Sources)

In addition to the data you provide to us directly, we also receive personal data in isolated cases from other sources (third parties). This occurs in particular to verify your identity, prevent fraud, or fulfill legal obligations (e.g., youth protection). This includes the following specific cases:

Age Verification Service Providers

We receive confirmation that a user is of legal age (e.g., within the scope of statutory youth protection regulations).
Purpose: Compliance with age limits and protection of minors.
Legal basis: Art. 6(1)(c) GDPR (legal obligation) and, where applicable, Art. 9(2) GDPR (special categories of data if an age check is required).

Klarna

We receive confirmation that a person has actually verified their ownership of a bank account (e.g., for payments via Klarna).
Purpose: Fraud prevention, protection against the improper use of payment information.
Legal basis: Art. 6(1)(b) GDPR (fulfillment of a contract) and/or Art. 6(1)(f) GDPR (legitimate interest in minimizing the risk of payment defaults).

MaxMind

We receive information on whether an IP address has previously been associated with fraudulent activities.
Purpose: Fraud detection and prevention.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting our services against fraud).

Google and PayPal

If a customer uses the respective login services (e.g., "Login with Google" or "Login with PayPal"), we receive confirmation that the respective email address has been verified.
Purpose: Simplifying the login process, preventing identity misuse.
Legal basis: Art. 6(1)(b) GDPR (performance of the user account/contract) and/or Art. 6(1)(f) GDPR (legitimate interest in preventing identity theft).

Categories of Personal Data

Confirmation of age or age status (yes/no, whether of legal age)
Confirmation of bank account ownership
Risk assessment or fraud warnings related to an IP address
Verification status (whether email is verified)
Storage Period and Erasure:
This data is only stored as long as needed to fulfill the aforementioned purposes. Afterwards, it is deleted or blocked in accordance with legal retention periods and deleted once those periods have expired.

Your Rights (Art. 14(2)(c)-(f) GDPR)

You have the right to request information about this data, to have it corrected or deleted, to restrict its processing, or to object to its processing. You also have the right to data portability as well as the right to lodge a complaint with a supervisory authority. Further information on your rights can be found in the general data protection notices in this Privacy Policy.

Revocation and Deletion

You may revoke your consent to this Privacy Policy at any time by using the Support Form we provide. A complete deletion of all personal data stored in the user’s account, as well as deletion of the account itself, is possible at any time upon request. However, content posted by the user in public areas remains — without the other personal data from the account — intact. We also reserve the right to retain data from accounts that show concrete indications of possible criminal prosecution or fraudulent behavior (e.g., unpaid payments). If a free test account has been set up, the mobile phone number will continue to be stored — solely for the purpose of ensuring that no new registration for the free test account takes place. If a bank account has been blocked, it will remain stored in order to keep the block on that bank account in effect.

Disclosure to Third Parties

GEONDA GmbH does not sell or rent personal data to third parties. Disclosure only takes place in a limited manner and exclusively for the purposes described in this policy. You expressly agree that personal data may be forwarded to a collection agency appointed by the operator of this website in the event of payment default.
In the event of payment defaults with direct debits, data is forwarded to atriga GmbH, Pittlerstr. 47, DE 63225 Langen. With certain payment systems (PayPal, Skrill), the data you provide to the payment provider may be forwarded to a collection agency engaged by that provider; please consult the privacy policies of the respective payment provider for more information.
In the event of concrete indications of fraudulent activities, personal data may be forwarded to a payment provider or collection agency. You expressly agree that in such cases, personal data may be passed on to the relevant entities (payment provider, collection agency, or investigating police authority) for the purpose of clarifying suspected fraud or determining whether the debtor is indeed the person who conducted the transaction(s) within the scope of this website.

Cookies

Your browser offers so-called "cookies" which—if you allow their use—store small amounts of data from your visit to our websites on your computer. Cookies help us track which of our features you like best. And if you visit our websites again, cookies can enable us to tailor our content to your preferences. However, cookies do not reveal anything about you unless you expressly provide us with additional information.

On our websites, we use cookies in the following categories:

Strictly Necessary Cookies
These cookies are essential for you to move around the website and use its features, these are so-called session cookies, which will get deleted automatically by your browser once your browser session expires and load balancer cookie, that are needed for server load-balancing and maitaining your connection to the webserver(s)

Login Cookies
These cookies remember choices when logging into the service and can make it easier for you, to log into the website in the future. Please note that due to security and legal requirements you may still get asked for additional information to identify, such requirements include PSD 2 regulation and so called "strong customer authentication" requirements as well as youth protection legislation in Germany and other countries to make sure you are of legal age and not sharing your account with minors.

Analytics Cookies
These cookies, including Google Analytics cookies, collect anonymous information about the pages visited. Google Analytics stores information on which pages you visit, how long you stay on the site, how you got there, and what you click on. This data is collected via a JavaScript tag in our web pages and is not linked to personal data. These cookies collect information about how visitors use a website, such as which pages are visited most frequently. They do not collect information that would allow the identification of a visitor. All information collected by these cookies is aggregated and therefore anonymous. It is only used to improve the performance of a website.

Live Support Cookies
These cookies are used to store settings you make when using the Live Support feature on our website and are only maintained to personalize your experience with the live support service. The cookies may be stored on your device and will not be used for other purposes than Live Support on this website.

In addition, you have choices regarding cookies. By changing your browser settings, you can choose to accept all cookies, be notified when a cookie is set, or reject all cookies. However, please note that if you reject some or all cookies, your experience on our websites and on other websites across the Internet may be limited. Some websites require cookies to function, such as those with e-commerce features. Moreover, if you do not allow cookies, you may not benefit from personalized content offered by us or other websites on the Internet.

If you have given consent for the use of cookies and wish to withdraw it, you can do so at any time via the cookie settings.

Newsletter

If you wish to receive the newsletter offered on our website, we need a valid email address from you as well as information that allows us to verify that you are the owner of the specified email address or that its owner agrees to receive the newsletter.
You can revoke your consent to the storage of your data, your email address, and their use for sending the newsletter at any time.
You can use our opt-out form or contact us directly.

Payment Systems

Some of the payment systems offered require the provision of personal data; however, the entry and further processing of this data are handled through the servers of the respective payment service providers. Please consult the privacy policies of the respective payment providers for more information.
In the case of direct debit payments, an automated decision-making process is used to assess the customer’s creditworthiness. By agreeing to this Privacy Policy, you also consent to the automated processing of your data for this decision-making process.
We do not store or process credit card information; credit card payment details are directly encrypted and transmitted to the systems of the respective payment providers. Credit card data is never stored or processed on our servers. The systems of the payment providers used are monitored and secured in accordance with the strict PCI DSS guidelines of the credit card industry.

Legal Bases

Unless otherwise specified in this Privacy Policy, the following applies: The legal basis for obtaining consents is Art. 6(1)(a) and Art. 7 GDPR, the legal basis for processing for the fulfillment of our services and the performance of contractual measures as well as for answering inquiries is Art. 6(1)(b) GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6(1)(c) GDPR, and the legal basis for processing to safeguard our legitimate interests is Art. 6(1)(f) GDPR.

Legal Bases (Supplement under Art. 6 GDPR)

When processing personal data, we particularly rely on the data subject’s consent (Art. 6(1)(a) GDPR) and on the necessity for the performance of a contract or for carrying out pre-contractual measures (Art. 6(1)(b) GDPR). Both apply, for example, when you register for our services so that we can carry out the usage agreement.

Collection of Sensitive Data

Some of the data collected as part of our services may be classified as “special categories of personal data” (also “sensitive data”) under Art. 9 GDPR and in accordance with CCPA § 1798.121, particularly where user actions could provide insights into sexual life or sexual orientation. If you use our services, you agree that such data—if collected—will be processed for the purposes stated in this Privacy Policy. We take appropriate security measures and only process such data based on relevant legal grounds (e.g., Art. 9(2)(a) GDPR or your explicit consent).
Under the CCPA and other U.S. state laws (see below), collecting data on your browsing behavior or purchasing decisions may also be categorized as sensitive data. We comply with the applicable regulations to protect this information.

Data Security

In accordance with Art. 32 GDPR, we take appropriate technical and organizational measures to ensure a level of security for your personal data appropriate to the risk. This includes, in particular, the encryption of sensitive data, the use of firewalls, secure servers, and regular security audits.

Transfer to Third Countries

If we transfer personal data of EU citizens to countries outside the European Union (EU) or the European Economic Area (EEA), this is done in accordance with the requirements of Art. 44 et seq. GDPR (e.g., based on recognized adequacy decisions (Art. 45 GDPR), by concluding standard contractual clauses with the recipients, or through your explicit consent with an appropriate notice of risks). Please contact us if you would like more information about the specific security measures we have put in place for data transfers.

Collaboration with Processors and Third Parties

If we commission third parties to process data on the basis of a data processing agreement, this is carried out on the basis of Art. 28 GDPR.

Cloud Services and Data Processing

We utilize a range of Amazon Web Services (AWS) to support the functionality of our platform and to help ensure compliance with applicable legal and payment provider regulations. These AWS services include, but are not limited to:

AWS Personalize: Used to deliver personalized recommendations.
Amazon DynamoDB: Used for fast and flexible data storage.
Amazon EC2: Provides scalable computing capacity.
Amazon RDS: Manages relational database services.
Amazon S3: Utilized for secure and scalable file storage.
Amazon SQS and SNS: Facilitate message queuing and notification services.
AWS Rekognition: Employed for content monitoring to maintain compliance with legal obligations and payment provider requirements.

When you use our services, your data may be processed and stored using these AWS services. AWS acts as a data processor on our behalf, and we have entered into appropriate agreements with AWS to ensure that your data is handled securely and in compliance with all applicable data protection regulations.

We remain committed to maintaining transparency regarding our data processing practices. For further information on how your personal data is used and protected, or if you have any concerns regarding these practices, please contact our Data Protection Officer.

Your Rights

In accordance with the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15): You have the right to obtain confirmation as to whether your personal data is being processed and, if so, to access that data along with information about the purposes of the processing, the categories of personal data concerned, and the recipients to whom the data has been or will be disclosed.
• Right to Rectification (Art. 16): You have the right to request the completion of incomplete data concerning you or the correction of inaccurate data concerning you.
• Right to Erasure (Art. 17): You have the right to request that your personal data be deleted without undue delay, or, where deletion is not possible, to request the restriction of its processing.
• Right to Restriction of Processing (Art. 18): Under certain circumstances, you have the right to obtain a restriction on the processing of your personal data. This means that while we may continue to store your data, we will not process it further without your consent or unless required by law.
• Right to Data Portability (Art. 20): You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to request its transfer directly to another controller where technically feasible.
• Right to Object (Art. 21): You have the right to object, on grounds relating to your particular situation, to the processing of your personal data. If you object, we will cease processing your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing is required for the establishment, exercise, or defense of legal claims.
• Rights Regarding Automated Decision-Making (Art. 22): You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
• Right to Lodge a Complaint (Art. 77): You have the right to lodge a complaint with the competent supervisory authority if you believe that your rights under the GDPR are being infringed.

Right of Revocation

You have the right to revoke consent granted in accordance with Art. 7(3) GDPR with effect for the future.

Restrictions (Art. 23)

Under Article 23 of the GDPR, the exercise of the rights and obligations set out in Articles 12 to 22 may be restricted when necessary to safeguard public security, national defense, or the prevention, investigation, detection or prosecution of criminal offenses, or the execution of criminal penalties. Such restrictions must be provided for by law and shall be applied in a manner that respects the fundamental rights and freedoms of the data subject.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies,” which are text files placed on your computer, to help analyze how you use the website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to and stored by Google on servers in the United States. Google will use this information for evaluating your use of the website, compiling reports on website activity for website operators, and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties if required to do so by law or if such third parties process this data on Google’s behalf. Under no circumstances will Google associate your IP address with other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Chat System

Texts entered via the chat system are stored on encrypted storage media for a period of 6 weeks and then automatically deleted. In exceptional cases such as concrete indications of fraudulent behavior or cases where there is concrete danger to participants of the chat system, or if crimes are announced or committed, chat texts may be forwarded to investigating authorities, and a copy may be placed in longer-term storage.

Messaging System

Messages and/or recorded videos sent via the messenger (messaging system) are stored indefinitely and made available only to the respective recipient. In the event of indications of illegal activities or violations of our Terms &aml; Conditions/Guidelines, the messages may also be reviewed. A sent message is deleted if it is removed under "sent items." A received message can be deleted in the inbox. When the account is deleted, both sent and received messages are deleted.

We do allow performers to contact you via the internal messaging system (in doing so, no personal data other than your pseudonym is disclosed). If you wish to object (opt-out) to this disclosure of your data, you may contact us via or use our opt-out form. Browser settings alone (e.g. "Do Not Track") may not be sufficient to honor such an objection. Therefore, please use our opt-out form or contact us directly

Rights for California Residents (CCPA)

Under the California Consumer Privacy Act (CCPA), individuals residing in California have, among others, the following rights (CCPA § 1798.100 ff.):

• Right to Know which personal data we collect about you, how we use it, whether it is shared or sold
• Right to Delete personal information
• Right to Correct inaccurate personal information
• Right to Opt-out of the sale or sharing of personal data
• Right not to receive discriminatory treatment

Additionally, when collecting personal data in California, we must inform you (Notice of Collection, CCPA § 1798.10) about the categories of data collected and the purposes for which it is used. For further details, please refer to the information provided above in this Privacy Policy.

Authorized Agent Procedures (CCPA § 1798.140)

You may appoint an "authorized agent" to make requests on your behalf under the CCPA. If you do so, please send us written authorization or other proof of the agent’s authority (e.g., via email to ), so that we can verify your identity and the agent’s credentials.

Opt-out of Sale/Sharing (CCPA § 1798.120, GDPR Art. 6, Art. 21)

We do not sell your personal data or disclose it to third parties for advertising purposes. We do allow performers to contact you via the internal messaging system (in doing so, no personal data other than your pseudonym is disclosed). If you wish to object (opt-out) to this and any other potential disclosure of your data, you may contact us via or use our opt-out form. Browser settings alone (e.g. "Do Not Track") may not be sufficient to honor such an objection. Therefore, please use our opt-out form or contact us directly.

Rights in Other US States

As of January 1, 2025, a number of other comprehensive privacy laws are in effect in the United States (e.g., in Colorado, Connecticut, Nevada, Virginia, Utah, Texas, Montana, Oregon, as well as in New Hampshire, Nebraska, Iowa, Delaware). If you are a resident of one of these states and these laws apply to us, you may have additional or comparable rights (e.g., the right to access, delete, correct, restrict processing, or opt out). If you have any questions regarding your privacy rights in your state or the applicability of these laws to our services, please contact us at .

Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in our practices or applicable laws. In the event of material changes, we will update the effective date and, if required by law, notify you. Please review this Privacy Policy periodically to stay informed about how we protect your personal data.

Data Protection Officer and Contact Information

GEONDA GmbH
Zimbagasse 1
A-1140 Vienna