Last updated: 26 September 2026
Thank you for your interest in DOSKIO.de. Protecting your personal data is important to us. Below, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), we inform you which data we process when you visit and use our website, for what purposes and on what legal basis.
This translation is provided for convenience. In case of discrepancies, the German version is legally binding.
1. Controller
DOSKIO.de
Alexander Müller
Eugen-Roth-Weg 6
12683 Berlin
Germany
E-mail:
Contact form: doskio.de/en/contact
No data protection officer has been appointed, as the legal requirements for this are not met. If you have any questions about data protection, please contact the address above.
2. Hosting and server log files
Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A data processing agreement (Art. 28 GDPR) has been concluded with the provider.
Each time the website is accessed, the server automatically records information transmitted by your browser (server log files): IP address, date and time of access, page or file requested, amount of data transferred, notification of successful retrieval, browser type and version, operating system and the previously visited page (referrer). This data is required to deliver the website, ensure its stability and security and detect misuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and functional operation). Log files are deleted after 14 days at the latest, unless they are needed to investigate a specific security incident.
3. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.
4. Cookies and consent management
Our website uses cookies and similar technologies (e.g. local storage). We use technically necessary cookies on the basis of § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR; they are required to operate the website (e.g. session cookie for logging in, storing your cookie choice, language selection, protection against misuse).
We only use all other cookies and services (functional, statistics) with your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). On your first visit, a consent banner appears (CookieHint and Consent by reDim GmbH, the plugin runs on our own server). There you can accept all categories, reject them or select them individually. Without your consent, statistics services are not loaded.
As proof of your decision, we store a random consent ID, the time, the selected categories, a shortened IP address and the browser identifier (Art. 7(1), Art. 6(1)(c) GDPR). These records are automatically deleted after three years.
You can withdraw or change your consent at any time with effect for the future – via the cookie icon at the bottom left of every page or via this link: open cookie settings.
5. Registration and user account
You can create a user account to post and manage ads. In doing so, we process the data you provide (in particular name or username, e-mail address, password in encrypted form) as well as the time of registration and the IP address. The legal basis is Art. 6(1)(b) GDPR (user agreement). The data is stored for as long as your account exists. You can have your account deleted at any time; statutory retention obligations (e.g. for payment records) remain unaffected.
6. Publication of classified ads
When you post an ad, we publish the content you enter (title, description, photos, video links, price, city or region and the contact details you release) publicly on DOSKIO.de. This content is visible to all visitors and search engines. Please only publish information you want to make public. The legal basis is Art. 6(1)(b) GDPR. Ads are no longer displayed once they expire and you can delete them at any time.
To make the site easier to use, we store functional cookies (e.g. last category visited, recently viewed ads, ad view counts) if you have consented to the “Functional” category.
7. Contact form and contact by e-mail
If you contact us via the contact form or by e-mail, we process your details (first name, last name, country/city, e-mail address, ad ID and link where applicable, your message and any uploaded files) to handle your request. The details are stored in our database and forwarded to us by e-mail. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries) or your consent (Art. 6(1)(a) GDPR). We delete the data once your request has been finally dealt with, at the latest after 12 months, unless statutory retention obligations apply.
8. Spam protection with Google reCAPTCHA
To protect our forms (e.g. registration, login, contact) against spam and automated access, we use Google reCAPTCHA v3 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). reCAPTCHA analyses the visitor’s behaviour using various characteristics (e.g. IP address, time spent on the site, mouse movements, browser and device information) and transmits this data to Google. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting our website from misuse. Data may be transferred to the USA; Google LLC is certified under the EU-US Data Privacy Framework. More information: policies.google.com/privacy.
9. Payment processing
For paid services (e.g. points packages, highlighted ads) we offer the following payment methods. The data required for payment (e.g. name, e-mail address, amount, order number, payment details) is transmitted to the respective payment provider. The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (retention obligations under tax and commercial law, usually 6 or 10 years).
- PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. Privacy policy: paypal.com/de/legalhub/privacy-full
- Stripe: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Stripe sets technically necessary cookies for fraud prevention (e.g.
__stripe_mid,__stripe_sid). Privacy policy: stripe.com/privacy - Prepayment / bank transfer: Payment is made via your bank; we receive the details from the transfer.
Payment providers may also transfer data to third countries (e.g. the USA); for this they are certified under the EU-US Data Privacy Framework or use EU standard contractual clauses.
10. Web analytics with Google Analytics 4
Only if you have consented to the “Statistics” category do we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies (e.g. _ga, _ga_*, stored for up to 2 years) to analyse the use of the website (e.g. pages viewed, time spent, source, device and browser). IP addresses are not stored in Google Analytics 4. Data may be transferred to servers of Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework.
Without your consent, the Google Analytics script is not loaded. We also use Google Consent Mode, which passes your choice on to Google. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time in the cookie settings. The data is deleted after 14 months. More information: policies.google.com/privacy.
11. Embedded videos (YouTube, Vimeo)
Users can embed videos from YouTube (Google Ireland Limited) or Vimeo (Vimeo.com, Inc., 330 West 34th Street, New York, USA) in their ads. When such a video is played, a connection is established to the servers of the respective provider and, among other things, your IP address and device information are transmitted; the provider may set cookies. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Privacy information: YouTube/Google, Vimeo.
12. Voice input in search
The search offers optional voice input (microphone icon). Speech recognition is performed by your browser via the Web Speech interface; depending on the browser (e.g. Google Chrome), the recording is transmitted to the browser manufacturer for this purpose. We ourselves do not receive or store any audio data, only the recognised search text. The function is only activated if you click the microphone icon and allow microphone access in your browser.
13. E-mail notifications
As part of using the site, we send you system e-mails (e.g. registration confirmation, password reset, notifications about your ads and payments). The legal basis is Art. 6(1)(b) GDPR.
14. Recipients and transfers to third countries
We only pass on your data where this is described in this policy, necessary for the performance of a contract, required by law or where you have consented. Recipients are in particular our hosting provider, the payment providers mentioned and Google (reCAPTCHA and, with consent, Analytics). For transfers to third countries without an adequate level of data protection, we rely on adequacy decisions (EU-US Data Privacy Framework) or EU standard contractual clauses.
15. Storage period
We only store personal data for as long as is necessary for the respective purpose or as required by statutory retention periods. The data is then deleted or, if deletion is not possible, blocked.
16. Your rights
You have the right at any time to:
- access your stored data (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- withdraw consent given, with effect for the future (Art. 7(3) GDPR).
Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation.
To exercise your rights, simply send a message to
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.
17. Obligation to provide data
Providing your data is neither required by law nor by contract. However, without the details required for registration, posting ads or payment, these functions cannot be used. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
18. Changes to this privacy policy
We will update this privacy policy if our website or the legal requirements change. The version published here applies.
