Information on the processing of personal data pursuant to Art. 13 and 14 GDPR and § 25 TDDDG (German law) · Version: 2026
English translation of the German original. In case of any discrepancy, the German version prevails, without prejudice to mandatory consumer protection provisions in your country of residence.
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:
siteface UG (haftungsbeschränkt)
Brüderweg 252, D-57074 Siegen, Germany
Managing director: Thomas Dibke
Phone: +49 (0) 271 - 2503232 · Email for data protection requests: service@two-dating.com
Protecting your privacy is a top priority at twoLove. We process personal data exclusively in accordance with the GDPR:
3.1 Profile data and photos: when you sign up, we collect your email address, password, display name, date of birth, gender and place of residence. Your password is stored only in encrypted form. Uploaded profile photos are stored on our servers, given a random hash file name and are only visible to registered members within the platform.
3.2 Location, postcode and OpenStreetMap Nominatim: to show suitable singles in your area, you can enter your place of residence by postcode or, on explicit click (“Use my location”), use your device location. To determine the name of the place from the postcode or location, a request is sent to the OpenStreetMap Nominatim service (nominatim.openstreetmap.org, operated by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom) and, additionally for place searches, to the OpenStreetMap-based search service Photon (photon.komoot.io, komoot GmbH, Potsdam). An adequacy decision of the EU Commission exists for the United Kingdom. When determining your location, your coordinates are rounded in the browser to two decimal places before transmission (accuracy approx. 1 km), so your exact home address is never transmitted. For technical reasons, the map service receives your IP address and the rounded coordinates or the postcode entered. The legal basis is your consent when you click to share your location (Art. 6(1)(a) GDPR) or the performance of the contract when selecting your place of residence (Art. 6(1)(b) GDPR). There is no background location tracking.
3.3 Protection against unintended disclosure of data: to protect our users from having private contact details harvested, phone numbers, email addresses and external messenger handles in public profile texts are automatically detected and filtered out.
4.1 System and notification emails: we inform you by email about security-related events (registration confirmation, password reset) and, if enabled, about new messages, likes and matches. You can deactivate all notification emails at any time with one click in your account settings or via the unsubscribe link in every email.
4.2 Browser notifications: only if you expressly allow it in your browser will your browser send you live notifications about new messages. You can revoke this permission at any time in your browser settings.
When you purchase a VIP membership, payment is processed directly by certified payment service providers (e.g. PayPal). We do not collect or store credit card or bank login details. The legal basis is Art. 6(1)(b) GDPR.
6.1 Technically necessary storage: for your login status, your language setting, your local search filters and the progress of your daily profile selection, twoLove uses technically necessary session cookies and local browser storage (localStorage / sessionStorage) in accordance with § 25(2) no. 2 TDDDG.
6.2 Consent management (Usercentrics) and analytics: we use the consent management platform Usercentrics to manage cookie consents. Optional analytics services (such as Google Analytics with IP anonymisation enabled) are only used in accordance with your settings.
6.3 Spam protection (Google reCAPTCHA): when signing up by email in the browser, you can use Google reCAPTCHA from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, so that we can detect automated sign-ups. reCAPTCHA is only loaded when you tap “Agree” (Art. 6(1)(a) GDPR, § 25(1) TDDDG). In particular, your IP address and information about your browser and device are transmitted to Google; processing in the USA is possible. We store your consent only in your browser. You can withdraw it at any time with effect for the future by deleting the website data in your browser. Without consent, you can sign up via Google or Facebook.
7.1 Delete your account at any time: you can delete your user account at any time yourself under Delete account or by sending a short message to service@two-dating.com.
7.2 What happens on deletion: your account is deactivated immediately. Your profile, profile pictures, messages and personal information are no longer visible to other members, and you will no longer receive emails from us.
7.3 Retention to prevent abuse: to protect our members from fraud, fake profiles and re-registration by blocked persons, we then keep the data of the deactivated account blocked for 12 months (legitimate interest under Art. 6(1)(f) GDPR). During this time, we use it exclusively to prevent abuse and to comply with legal obligations. After this period it is deleted. Billing data for paid orders is kept longer due to statutory retention obligations (German commercial and tax law, HGB/AO). Technical server backups are automatically overwritten after 14 days at the latest.
7.4 Early deletion: if you would like your data to be deleted before this period ends, write to us at service@two-dating.com. We will review your request under Art. 17 GDPR and delete the data unless reasons of abuse prevention or legal obligations prevent this.
You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority in your country of residence or the authority responsible for us, the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).
