Sexpuppe24
DEEN
Book now

Legal

Privacy Policy

Note: This is a convenience translation. The legally binding version is the German one.

The protection of your personal data is an important concern for us. This privacy policy informs you, in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG), about which data we process, for which purpose and on which legal basis this takes place and which rights you are entitled to.

1. Introduction

We process personal data exclusively in accordance with the GDPR and the Austrian DSG. Due to the nature of our services, the rental and sale of erotic articles, individual processing operations may allow conclusions to be drawn about a person's sex life or sexual orientation. As special categories of personal data, such data enjoy increased protection under Art. 9 GDPR. We are aware of this particular sensitivity and therefore handle the data entrusted to us in a particularly economical, careful and confidential manner. We only collect what is necessary for the respective service.

2. Controller

The controller within the meaning of Art. 4 no. 7 GDPR is:

  • Company / NameSLX Service (Sexpuppe24.at)
  • AddressSalzburgerstraße 54, 4600 Wels, Austria
  • Emailinfo@sexpuppe24.at

3. General information and legal bases

We only process personal data if there is a legal basis for doing so. Depending on the processing, we rely on the following legal bases:

  • Art. 6(1)(a)Consent that you have given us for one or more specific purposes.
  • Art. 6(1)(b)Processing for the initiation, performance and handling of a contract with you.
  • Art. 6(1)(c)Fulfilment of legal obligations, such as retention obligations under tax and commercial law.
  • Art. 6(1)(f)Safeguarding our legitimate interests, in particular in the secure and error-free operation of the website.
  • Art. 9(2)(a)Explicit consent to the processing of special categories of personal data, such as biometric data.
  • Art. 9(2)(f)Processing of special categories for the establishment, exercise or defence of legal claims.

4. Hosting and server log files

This website is hosted by AltusHost B.V., Netherlands (EU). When the website is accessed, server log files transmitted by your browser are automatically processed. These include in particular the IP address, date and time of access, the page accessed, the browser type, the operating system used and the previously visited page (referrer). This processing serves technical operation, security and error analysis. The legal basis is Art. 6(1)(f) GDPR. A data processing agreement pursuant to Art. 28 GDPR exists with the host. The server log files are usually deleted after a few days, but at the latest after 30 days.

5. Age and identity verification (Veriff)

For the legally required verification of majority age and identity, we use the service provider Veriff OÜ, Niine 11, 10414 Tallinn, Estonia (EU). As part of the verification, you transmit to Veriff the image of an official identity document as well as a selfie or liveness recording. Veriff checks the authenticity of the document, compares the recordings and confirms your majority age and identity.

In the interest of data minimisation, we do not store the identity documents and the biometric data ourselves. We document exclusively the result of the verification, that is the verification status, your name and the time. The legal bases are Art. 6(1)(b), (c) and (f) GDPR, and for the biometric data Art. 9(2)(a) GDPR on the basis of your explicit consent in the verification process. A data processing agreement pursuant to Art. 28 GDPR exists with Veriff. You can find further information in the privacy policy of Veriff.

6. Automated decision-making

The decision on whether the identity verification is passed is made largely automatically by Veriff. If the verification is not passed, no booking can be completed. You have the right to request a review of the automated decision by a natural person, to state your own point of view and to contest the decision (Art. 22 GDPR). To do so, please contact the email address stated above.

7. Booking and contract handling

For the initiation and handling of a rental or purchase contract, we process the following categories of data depending on the transaction:

  • Master dataName or pseudonym and further details necessary for the handling of the contract.
  • Contact dataEmail address and further contact channels provided by you.
  • Booking dataSelected service, model choice, period and conditions.
  • Verification resultResult of the identity and age verification.
  • Payment dataDetails for the handling of payment, insofar as necessary for us.
  • Documentation dataDetails on handover, return and cleaning condition in the case of rental transactions.

The purpose is the fulfilment of the contract concluded with you, the legal basis is Art. 6(1)(b) GDPR. Insofar as special categories of personal data are affected, we treat these with particular confidentiality and limit access to the necessary extent.

8. Contact and forms

If you use our contact form or the booking enquiry, we process your name or pseudonym, your contact data and the content of your message in order to process your enquiry. The legal basis is Art. 6(1)(b) GDPR insofar as the enquiry is directed at a contract, otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in answering enquiries. Enquiries that do not lead to a contract are deleted after final processing, at the latest after six months.

9. Communication via email and WhatsApp

At your request, the reply is made by email or via WhatsApp. WhatsApp is operated by Meta Platforms Ireland Limited. When using WhatsApp, a transfer of data to third countries, in particular to the USA, may occur. The use of WhatsApp takes place exclusively at your explicit request and thus on the basis of your consent pursuant to Art. 6(1)(a) GDPR. If you do not wish this, you can communicate with us exclusively by email at any time.

10. Payment processing

For the processing of payments, we use specialised payment service providers licensed within the European Union that are geared towards adult offerings (so-called high-risk payment service providers). The payment data, in particular card data, are processed exclusively at the payment service provider and do not come into our access. We only receive the information about the success or failure of the payment. The legal basis is Art. 6(1)(b) GDPR. We use Shopify as our shop and checkout provider. When you complete an order, the data required for the order and the payment are transmitted to Shopify and processed there. In the Shopify checkout, the payment methods available there are at your disposal, for example credit and debit card as well as PayPal.

11. Cookies and local storage

This website does not use tracking or analytics cookies. When you enter the website, an age prompt appears. If you confirm there that you are of legal age, this is stored only for the current session in your browser (sessionStorage) and is discarded when you close the browser. In addition, during the booking and purchase process you confirm your legal age via a mandatory checkbox; this confirmation is not stored. As technically necessary, only temporary details about the ongoing booking are also stored in the browser during the booking process (sessionStorage). This data remains in your browser and is not transmitted to us. The legal basis is Art. 6(1)(f) GDPR. You can delete this data at any time via the settings of your browser.

12. Fonts and external content

The fonts used on this website are delivered locally from our server. There is no connection to third-party servers and no transmission of your IP address to providers of external fonts.

13. Retention period

We store personal data only for as long as it is necessary for the respective purposes or as long as legal retention obligations exist. Booking and invoice data are stored for seven years due to retention obligations under tax and commercial law. We keep the result of the identity verification for the duration of the legal retention obligations as well as for the establishment, exercise or defence of legal claims. Enquiries without conclusion of a contract are deleted at the latest after six months. Server log files are deleted after 30 days at the latest.

14. Recipients and third-country transfer

We only pass on your data insofar as this is necessary for the performance of the contract, for example to hosting, identity verification, payment and delivery service providers, or insofar as we are legally obliged to do so. All service providers used by us are contractually bound to comply with data protection. A transfer to third countries only takes place in the cases described in this policy, in particular when using WhatsApp at your request, and exclusively on the basis of appropriate safeguards or your consent.

15. Your rights

Under the GDPR, you are entitled to the following rights:

  • AccessRight to information about the data processed about you (Art. 15).
  • RectificationRight to rectification of inaccurate data (Art. 16).
  • ErasureRight to erasure of your data (Art. 17).
  • RestrictionRight to restriction of processing (Art. 18).
  • Data portabilityRight to data portability (Art. 20).
  • ObjectionRight to object to certain processing (Art. 21).
  • WithdrawalRight to withdraw consent given at any time with effect for the future (Art. 7(3)).

In addition, you have the right to lodge a complaint with the supervisory authority if you are of the opinion that the processing of your data violates the GDPR: Austrian Data Protection Authority, Barichgasse 40 to 42, 1030 Vienna, dsb.gv.at.

16. Data security

This website is delivered via an encrypted SSL/TLS connection. Access to personal data is limited to the necessary extent. Access credentials and keys to the services used are stored outside the publicly accessible area.

17. Changes to this privacy policy

We adapt this privacy policy if the legal situation or our services change. The version published on this page applies in each case.

As of: 01 July 2026