Overview of Legal Bases
The GDPR recognizes six lawful bases for processing personal data. LoveLink primarily relies on three of these, depending on the specific processing activity. We do not process your data without a clear, documented legal justification.
Important: We regularly review our processing activities to ensure alignment with data protection principles. If the legal basis for processing changes, we will notify you and, where required, obtain fresh consent.
1. Consent
1 When We Rely on Your Consent
We process certain data when you have freely given, specific, informed, and unambiguous consent. This applies to:
- Marketing communications and promotional emails
- Optional features like profile visibility expansion and personalized match suggestions beyond core functionality
- Cookies and tracking technologies that are not strictly necessary for service delivery
- Processing of special category data (e.g., sexual orientation, religious beliefs) when explicitly opted-in
You may withdraw consent at any time via your account settings or by contacting our Data Protection Officer. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
2. Contractual Necessity
2 Processing Necessary for Our Service
When you register for a LoveLink account, you enter into a service agreement with us. We process your data because it is necessary to fulfill this contract, including:
- Creating and managing your profile
- Operating our matching algorithm and suggesting compatible users
- Facilitating messaging, video calls, and in-app communication
- Processing payments for premium subscriptions
- Account verification and fraud prevention
Without this processing, we cannot provide the core dating services you have requested. If you terminate your account, we will cease processing except where retained for legal or legitimate purposes outlined below.
3. Legitimate Interests
3 Our Legitimate Business & Security Interests
We rely on legitimate interests where processing is necessary for our operational, security, or developmental purposes, provided these do not override your fundamental rights. This includes:
- Network security, fraud detection, and prevention of platform abuse
- Service improvement, analytics, and product development
- Direct marketing to existing users (with opt-out available)
- Legal claims defense and regulatory compliance reporting
- Internal administrative functions and audit trails
Before relying on legitimate interests, we conduct a Legitimate Interests Assessment (LIA) to balance our interests against your privacy rights.
4. Legal Obligation
4 Compliance with Applicable Laws
Occasionally, we must process data to comply with statutory requirements. This may include:
- Retaining transaction records for tax and financial regulations
- Responding to lawful requests from law enforcement or regulatory bodies
- Age verification obligations under digital service regulations
- Anti-money laundering and Know Your Customer (KYC) requirements where applicable
We only process data under this basis when explicitly required by law and only to the extent necessary to fulfill that obligation.
How We Determine the Applicable Basis
Our Data Protection team evaluates each processing activity individually. The determination depends on:
- The purpose of the processing
- Whether consent was freely given
- Whether the processing is essential to deliver your requested service
- Whether a legal requirement applies
- The outcome of our Legitimate Interests Assessment
If multiple legal bases apply to a single activity, we document the primary basis and maintain records of our decision-making process in accordance with GDPR Article 30.
Your Rights Under Data Protection Law
Depending on the legal basis relied upon, you may have the following rights:
- Right to Access: Request a copy of your personal data we hold
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion where processing is no longer necessary or consent is withdrawn
- Right to Restriction: Limit processing while disputes are resolved
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Opt out of processing based on legitimate interests or direct marketing
- Right to Withdraw Consent: Revoke permission at any time without affecting prior lawful processing
To exercise any of these rights, please contact our Data Protection Office. We respond to valid requests within 30 days.
Questions About Our Legal Basis?
Our privacy team is available to explain how we apply data protection laws to your account.
📧 Contact Our Data Protection Officer