Service Provider

MPL GbR (General Partnership)
Ottenweg 19
49479 Ibbenbüren
Germany

Authorized Representatives

Lukas Poggemann and Markus Pliet

Contact Information

If you have any questions regarding data protection, you can contact us using the following details:

Email: [email protected]
Contact Form: https://www.key2host.com/contact

Data Processing

We process personal data exclusively in accordance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Below, we provide you with transparent information regarding the categories of data processed, the purposes of data processing, and the respective legal bases pursuant to Article 6(1) of the GDPR. If processing is necessary for the performance of a contract, we rely on Article 6(1)(b) of the GDPR. If processing is based on your consent, Article 6(1)(a) of the GDPR applies. For legal obligations, Article 6(1)(c) of the GDPR applies. In cases of legitimate interest, we rely on Article 6(1)(f) of the GDPR as the legal basis.

Collection and Storage of Technical Access Data

Every time you access our website, certain technical data is automatically collected and stored in server log files. This data includes, among other things, the IP address, the type and version of the browser used, the date and time of access, and the website from which the user accessed our site. The IP address is processed to ensure technical security. This data is stored only for a limited period and is subsequently deleted or anonymized. This data serves to ensure the functionality and security of our website, as well as to analyze usage in order to improve the user experience. The legal basis for the processing of this data is Article 6(1)(f) of the GDPR, as this processing is based on our legitimate interest in ensuring the technical security and stability of our website. Server log files are generally stored for a maximum period of 14 days and are subsequently deleted automatically, unless longer retention is necessary to investigate security-related incidents.

Registration of a User Account

When you create your user account on our platform, we collect and process certain personal data necessary for setting up and managing your account. This includes, in particular:

• Your full name
• Your address (street, house number, ZIP code, city, country)
• Your date of birth
• Your phone number
• Your email address

The collection and processing of this data is based on Article 6(1)(b) of the GDPR, as it is necessary for the implementation of pre-contractual measures and for the performance of the contract. Furthermore, the processed data will only be stored for as long as is necessary for the administration of the user account and the performance of the contractual relationship, provided that no statutory retention obligations preclude this.

Identity Verification

We use the Stripe Identity service to verify your identity during registration. Stripe Identity enables us to verify your identity based on the information and documents you provide. In particular, we receive information from Stripe regarding the status and outcome of the verification.

Depending on the specific use case, Stripe processes this data either as a data processor or under its own responsibility. For more information on data processing by Stripe and its privacy policy, please visit https://stripe.com/privacy.

As part of the identity verification process, Stripe may also process additional data, including identity documents (e.g., ID card or passport), photos, video recordings, biometric verification data, and the verification result (e.g., successful/unsuccessful).

This data is processed exclusively for the purpose of identity verification and to prevent fraud and abuse. The legal basis is Article 6(1)(b) of the GDPR and Article 6(1)(f) of the GDPR, as there is a legitimate interest in preventing fraud and abuse.

Order Processing

As part of the order processing on our platform, we collect and process personal data necessary to process and fulfill your order. This data includes, in particular:

• Your full name
• Your address (street, house number, ZIP code, city, country)
• Your payment information (e.g., IBAN, payment service provider)
• Your email address

We use an external payment service provider to process payments. Stripe processes your payment information in accordance with applicable data protection regulations and ensures that it is used exclusively for the purpose of processing the payment. You can find further information regarding Stripe’s processing of your data, as well as Stripe’s privacy policy, at https://stripe.com/privacy einsehen.

The collection and processing of this data is based on Article 6(1)(b) of the GDPR, as it is necessary for the performance of the contract. Your data will only be stored for as long as is necessary to complete the order process and to comply with legally required retention periods.

Contests

As part of the contests we offer on our website for various occasions, we collect certain personal data, including your first and last name, your email address, and, if applicable, the country you are from. This data is used exclusively for the purpose of conducting and administering the respective contest, in particular to notify the winners and to ensure a fair process. Once the contest has concluded and the winners have been notified, the collected data will be deleted immediately. The legal basis for this data processing is Article 6(1)(a) of the GDPR, as the processing is based on the consent of the participants.

Opt-In Newsletter via Email

By subscribing to our newsletter, you will receive regular updates about our products, services, technical innovations, and special offers. The newsletter is sent exclusively on the basis of your explicit consent, which you provide during the sign-up process. Consent is given by entering your email address and confirming it via a so-called “double opt-in” process. After signing up, you will receive an email with a confirmation link that you must click to complete your registration.

We process your email address and, if provided, any other personal data (e.g., name) that you provide during registration exclusively for the purpose of sending the newsletter. Your data is processed only on our own mail servers, which are secured in accordance with applicable data protection regulations. We do not share your data with third parties unless this is necessary for sending the newsletter (e.g., through the use of servers or service providers acting as processors in accordance with Article 28 of the GDPR).

You may withdraw your consent to receive the newsletter at any time. You can do so by clicking the unsubscribe link in any newsletter email or by contacting us directly at the address provided above. Once you unsubscribe, your data will no longer be used to send you the newsletter.

The newsletter is sent based on your consent in accordance with Article 6(1)(a) of the GDPR.

Contact Form, Live Chat, Ticket System, and Phone Support

The use of our contact form, live chat, ticket system, and phone support is voluntary. When you contact us through these channels, we collect the data necessary to process your inquiry. This includes, in particular, your first name, last name, email address, phone number, and the content of your message. Data processing is carried out exclusively for the purpose of handling your inquiry and ensuring prompt and competent support.

The legal basis for processing your data via the contact form, live chat, ticket system, and phone support is Article 6(1)(b) of the GDPR (performance of a contract or pre-contractual measures), provided your inquiry relates to an existing contract or is necessary for the implementation of pre-contractual measures. If the inquiry is not related to a contract, processing is based on Article 6(1)(f) of the GDPR, as our legitimate interest lies in processing and responding to your inquiry.

The data collected will be stored only for as long as is necessary to process and respond to your inquiry. Once processing is complete, the data will be either deleted or anonymized, provided there are no legal retention requirements.

Your data will not be disclosed to third parties without your express consent. In this regard, data processing is carried out exclusively for the purposes mentioned above. If you have any questions regarding data processing or wish to withdraw your consent, you may contact us at any time.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to provide certain features, ensure the secure use of our services, and, where necessary, manage your consent.

The storage period depends on the specific cookie or technology. Technically necessary cookies are stored only for as long as is necessary for the respective purpose. For cookies requiring consent, you may revoke your consent at any time with future effect.

1. Legal Basis and Consent

Technically necessary cookies and similar technologies are used in accordance with Section 25(2) of the German Telemedia Act (TDDDG), as they are strictly necessary to provide the website and ensure its security.

To the extent that cookies or similar technologies are not technically necessary, their use is based exclusively on your consent pursuant to Section 25(1) of the TDDDG in conjunction with Article 6(1)(a) of the GDPR.

The subsequent processing of personal data is carried out in accordance with the relevant provisions of the GDPR.

2. Overview of Cookies Used

Technically Necessary Cookies

Optional cookies and services (requiring consent)

3. Cookie Management

You can prevent cookies from being set by adjusting your browser settings or delete cookies that have already been stored. However, completely disabling cookies may result in limited functionality on our website.

4. Cookie Settings

You can change your cookie settings at any time. Using our cookie banner, you can adjust your preferences by either accepting all cookies or rejecting all non-essential cookies. Please note that these changes will only apply to future visits, and cookies that have already been stored will not be deleted retroactively when you change your settings.

Processing by Third Parties

As part of our services, we use third-party providers who may process personal data. These include, in particular, providers of payment processing, identity verification, security functions, content delivery, card display, and web analytics.

Depending on the service, processing is carried out either as commissioned processing in accordance with Article 28 of the GDPR or under the sole or joint responsibility of the respective provider.

Please note that some providers may also process data outside the European Union, particularly in the United States. Where data is transferred to third countries, this is done, where applicable, on the basis of an adequacy decision, the EU-US Data Privacy Framework, or on the basis of standard contractual clauses pursuant to Article 46 of the GDPR.

Further information on data processing by the respective providers can be found in the privacy policies mentioned in this Privacy Policy.

Security of Processing (Art. 32 GDPR)

We implement technical and organizational measures to ensure an appropriate level of protection for the processing of personal data and to comply with the requirements of the General Data Protection Regulation (Art. 32 GDPR). These include, in particular, encryption (SSL/TLS), access controls, and protective mechanisms to defend against attacks.

You can find more detailed information about the security measures we use on our Security Overview.

The protection of your data is our top priority. However, if you notice any security vulnerabilities or irregularities in our systems, please inform us immediately. We take such reports very seriously and carefully investigate every report.

Retention Periods for Personal Data

We process and store your personal data only for as long as is necessary to fulfill the purposes for which it was collected. In accordance with the requirements of the General Data Protection Regulation (GDPR), we ensure that your data is reviewed regularly and retained only for as long as is necessary to fulfill our contractual and legal obligations.

• Data related to the registration of a user account
  Your personal data will be stored for as long as your user account remains active. As soon as you delete your account or ask us to delete your data, all personal data associated with your account will be deleted immediately, unless required by law to be retained.
• Data related to orders
  Your order data will be retained for the period necessary to fulfill the order and to comply with tax and commercial law retention requirements. In Germany, this period is generally 10 years in accordance with the provisions of the German Commercial Code (HGB) and the German Fiscal Code (AO). After that, the data will be deleted unless there are still legal retention obligations.
• Data Related to Communication
  The data collected in connection with the processing of inquiries via our contact channels is retained only for as long as necessary to process and resolve the inquiry. Afterward, the data is deleted or anonymized, unless there are legal retention requirements.
• Cookies and similar technologies
  The retention period depends on the specific cookie or technology. For cookies requiring consent, you may revoke your consent at any time with future effect.
• Data in Connection with Contests
  Your personal data collected in connection with a contest will be deleted immediately after the contest has ended and the winners have been notified, unless you have previously given separate consent for the further use of your data.

We regularly review the necessity of storing your personal data and delete it immediately if the purpose of processing no longer applies or if you request its deletion, unless there are legal obligations that require us to retain it for a longer period.

Your Rights

With regard to the processing of your personal data, as a data subject, you have the following rights, which you may exercise at any time:

• Right of access (Art. 15 GDPR)
  You have the right to request confirmation from us as to whether we are processing your personal data. If this is the case, you have the right to obtain access to this data as well as further information (e.g., the purposes of processing, the recipients of the data).
• Right to rectification (Art. 16 GDPR)
  You have the right to request the rectification of inaccurate personal data or the completion of incomplete personal data that we have stored about you.
• Right to erasure (Art. 17 GDPR)
  You have the right to request the erasure of your personal data, provided that there are no legal obligations to retain the data or other legal grounds preventing erasure.
• Right to restriction of processing (Art. 18 GDPR)
  Under certain conditions, you may request the restriction of the processing of your personal data, for example if the accuracy of the data is disputed or the processing is unlawful but you oppose erasure.
• Right to data portability (Art. 20 GDPR)
  You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You may also request that this data be transmitted directly to another controller, provided this is technically feasible.
• Right to object (Art. 21 GDPR)
  You have the right to object to the processing of your personal data if it is based on Article 6(1)(e) or (f) of the GDPR (e.g., on the basis of a legitimate interest). In this case, we will cease processing unless we can demonstrate compelling legitimate grounds for the processing that override your interests.
• Right to withdraw your consent (Art. 7(3) GDPR)
  You have the right to withdraw your consent at any time with future effect. The lawfulness of the processing prior to withdrawal remains unaffected.

To exercise any of these rights, please contact us at the email address provided above ([email protected]). We will respond to your request as soon as possible, and no later than one month from receipt.

Automated Decision-Making

We do not, as a general rule, engage in automated decision-making, including profiling, as defined in Article 22 of the GDPR.

However, to ensure the security of our systems and prevent misuse, automated processes may be used that, for example, detect unusual activity and trigger appropriate protective measures (e.g., temporary restrictions or account suspensions).

When using third-party providers (e.g., for payment processing or identity verification), automated processes may also be used over which we have no direct control.

Protection of Minors

Our services are intended exclusively for individuals who are at least 18 years of age. We do not knowingly collect personal data from minors. Should we become aware that personal data from a minor has been processed without proper authorization, we will delete such data immediately.

Links to External Websites

Our website may contain links to external websites that are not under our control. This privacy policy applies exclusively to the online services we operate. We assume no responsibility for the content and privacy practices of websites accessible via links on our site. We recommend that you review the privacy policies of these external websites, as their privacy practices may differ from ours.

Voluntary Provision of Your Data

The provision of personal data is generally voluntary. However, without providing certain data, some features or services of our platform may not be available or may be limited.

Changes to the Privacy Policy

We reserve the right to review this Privacy Policy periodically and to update it as necessary to ensure that it complies with current legal requirements or to reflect changes in our services. In the event of a material change, we will notify you via a notice on our website or by other appropriate means. The most current version of this Privacy Policy is available on our website at all times.

Data Protection Authority

You have the right to file a complaint with a data protection authority.
The competent authority is, in particular:

State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2-4
40213 Düsseldorf
Germany

Website: https://www.ldi.nrw.de

Last Updated

This Privacy Policy was last updated on April 27, 2026.

Updates

This Privacy Policy is reviewed regularly and updated as needed to comply with legal requirements.