Introduction
We take the protection of your personal data very seriously. This privacy policy explains what personal data we collect, how we use it, and what rights you have regarding your data.
We process your data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection regulations. As an informational directory and introduction service for private social associations, we are committed to handling your data responsibly.
Data Controller
The responsible party for data processing on this website is:
- Company:
- IXIAS - THAT COMPANY
- Address:
- Ruhrtalstraße 415
45219 Essen
Deutschland - Email:
- info@ixias.com
For questions about data protection, you can contact us at the above email address.
What Data We Collect
Automatically Collected Data
When you visit our website, our web server automatically collects and stores certain information:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which access occurred (referrer URL)
- Browser used and, if applicable, the operating system of your computer
- Name of your internet service provider
This data is used for system administration, statistical purposes, and to improve our website. It cannot be assigned to specific individuals.
Data You Provide
When you use certain services on our website (e.g., contact forms, registration, orders), you provide us with personal data voluntarily:
- Name and contact details (email address, phone number)
- Payment information (processed via Stripe — we do not store card details)
- Account credentials (username, passkey or password)
- Communication content (messages, inquiries)
Device and Session Data
When you use our service, we automatically collect technical data about your device and session:
- Device type, operating system, and browser version
- Screen resolution and language settings
- Session identifiers (stored in secure, HTTP-only cookies)
- Authentication tokens and passkey credential identifiers
- Time zone and approximate location (country/region level, derived from IP)
Location Data
If you grant location permission, we collect your precise geolocation to show nearby clubs. Location data is used solely to calculate distances and is not stored persistently on our servers. You may deny or revoke location permission at any time through your browser or device settings.
Push Notification Data
If you opt in to push notifications, we collect and store a push notification token provided by your browser or device. This token is used solely to deliver notifications you have requested. You can withdraw consent at any time through your browser settings, which will stop all further notifications.
Legal Basis for Data Processing
We process your personal data based on the following legal grounds under the GDPR:
Art. 6 (1) a GDPR - Consent
When you have given explicit consent for the processing of your personal data for specific purposes.
Art. 6 (1) b GDPR - Contract Performance
When processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract.
Art. 6 (1) c GDPR - Legal Obligation
When processing is necessary to comply with a legal obligation to which we are subject.
Art. 6 (1) f GDPR - Legitimate Interests
When processing is necessary for the purposes of our legitimate interests, provided that your interests or fundamental rights and freedoms do not override those interests.
Third-Party Services
Hosting Provider
Our website is hosted by external service providers. All data collected on our website is stored on their servers. This may include IP addresses, contact forms, comments, and other data provided through our website.
The hosting provider processes data on our behalf based on a data processing agreement in accordance with Art. 28 GDPR.
Content Delivery Networks (CDN)
We may use CDN services to deliver content faster and more efficiently. CDNs store cached copies of website content on servers distributed globally.
Payment Processing (Stripe)
We use Stripe, Inc. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland / 354 Oyster Point Blvd, South San Francisco, CA 94080, USA) to process payments. When you make a purchase, you are redirected to Stripe's secure checkout. We do not store or process your card details — Stripe handles all payment data directly under their own privacy policy.
Stripe may transfer payment data to the United States under standard contractual clauses. For details, see Stripe's Privacy Policy .
Legal basis: Art. 6 (1) b GDPR (contract performance).
SMS and Phone Verification (Twilio)
We use Twilio Inc. (375 Beale Street, Suite 300, San Francisco, CA 94105, USA) to deliver SMS messages for two-factor authentication (2FA) and account verification. When you provide a phone number for 2FA, your phone number is transmitted to Twilio solely for the purpose of sending the verification code.
Twilio processes data in the United States under standard contractual clauses. Your phone number is not used for marketing. For details, see Twilio's Privacy Policy .
Legal basis: Art. 6 (1) b GDPR (contract performance / providing authentication service).
Analytics Services
We may use web analytics services to analyze website usage and improve our services. These services may use cookies and similar technologies to collect information about your browsing behavior.
You can prevent data collection by analytics services by:
- Disabling JavaScript in your browser
- Installing browser add-ons that block tracking
- Adjusting your browser privacy settings
Cookies and Similar Technologies
What are Cookies?
Cookies are small text files stored on your device when you visit websites. They enable websites to recognize your device and remember certain information about your visit.
Types of Cookies We Use
- Essential Cookies: Required for the website to function properly (e.g., session management, security)
- Functional Cookies: Enable enhanced functionality and personalization (e.g., language preferences)
- Analytics Cookies: Help us understand how visitors interact with our website
- Marketing Cookies: Used to deliver relevant advertisements (if applicable)
Managing Cookies
You can control and manage cookies through your browser settings:
Please note that disabling certain cookies may affect website functionality.
How Long We Keep Your Data
We only store your personal data for as long as necessary to fulfill the purposes outlined in this privacy policy or as required by law.
Retention Periods
- Server Logs: Automatically deleted after 7 days
- Account Data: Retained until you delete your account or request deletion
- Session Data: Active sessions expire after 30 days of inactivity; session records are deleted upon logout or expiry
- Push Notification Tokens: Retained until you revoke notification permission or delete your account
- Location Data: Not stored — used in real-time for distance calculation only
- Transaction Data: Retained for up to 7 years to comply with US federal and state tax law requirements
- Communication Data: Retained for as long as necessary to handle your inquiry, typically up to 3 years
Your Rights Under GDPR
Under the General Data Protection Regulation, you have the following rights regarding your personal data:
Right of Access (Art. 15 GDPR)
You have the right to obtain confirmation as to whether personal data concerning you is being processed, and access to that data.
Right to Rectification (Art. 16 GDPR)
You have the right to obtain the rectification of inaccurate personal data and to have incomplete personal data completed.
Right to Erasure (Art. 17 GDPR)
You have the right to obtain the erasure of personal data concerning you without undue delay under certain circumstances.
Right to Restriction of Processing (Art. 18 GDPR)
You have the right to obtain restriction of processing under certain conditions.
Right to Data Portability (Art. 20 GDPR)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object (Art. 21 GDPR)
You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection law.
To exercise any of these rights, please contact us at info@ixias.com .
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
- SSL/TLS encryption for data transmission
- Secure server infrastructure with regular updates
- Access controls and authentication mechanisms
- Regular security audits and monitoring
- Data backup and disaster recovery procedures
- Employee training on data protection
However, please note that no method of transmission over the Internet or electronic storage is 100% secure.
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us, and we will take steps to delete such information.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last updated" date.
We encourage you to review this privacy policy periodically to stay informed about how we protect your information.
California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights in addition to your GDPR rights above:
Right to Know
You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources, our purposes for collecting it, and the categories of third parties with whom we share it.
Right to Delete
You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions (e.g., completing transactions, security, legal obligations).
Right to Opt-Out of Sale
We do not sell your personal information to third parties. You therefore do not need to opt out.
Right to Non-Discrimination
We will not discriminate against you for exercising your CCPA rights.
To exercise your California privacy rights, contact us at info@ixias.com . We will respond within 45 days as required by law.
International Data Transfers
We are based in the United States and your personal data may be transferred to and processed in the United States or other countries outside the European Economic Area (EEA).
When we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR Art. 46, such as standard contractual clauses approved by the European Commission or other legally recognized transfer mechanisms.
By using our service, you acknowledge that your data may be transferred and processed in jurisdictions outside your own, which may have different data protection standards than your country of residence.