Privacy Policy
1. Data Controller
Responsible for the processing of personal data within the meaning of the GDPR is:
OnlySafeSis
Frodlgasse 4/2
9020 Klagenfurt am Wörthersee
Austria
Email: datenschutz@onlysafesis.com
1a. Data Protection Officer
Our company data protection officer is:
Daniel Prugger
Erkergasse 6
9020 Klagenfurt am Wörthersee
Austria
You can contact our data protection officer at any time with data protection concerns.
2. Who we are and what we do
OnlySafeSis provides content creators with a personal protection service against the unauthorized distribution of their content on the internet. We search forums, platforms, search engines, and download sites for leaks, initiate takedown requests, and regularly report on the status via a personal dashboard. This service requires the processing of particularly sensitive personal data, which we treat with the utmost care and confidentiality.
3. What data we process
We process only data that is necessary for the provision of our service:
- Personal master data: Name, email address, phone number, postal address
- Account data: Password (stored encrypted), safeword for security functions
- Creator data: Selected package, creator names/pseudonyms, social media links and profiles
- Leak data: URLs to unauthorized content, descriptions and, if applicable, copies of this content required for identification and takedown initiation
- Dashboard data: Finding reports, status updates, processing progress of takedown requests
- Referral data: Promo codes and associated links when using our referral program
- Technical data: IP address (temporary), device information, browser type for security purposes
- Payment data: Is processed exclusively by our payment service provider Stripe and is not stored by us
4. Special categories of personal data
For our service, we process special categories of sensitive data within the meaning of Art. 9 GDPR – specifically intimate image and video content that has been distributed without the consent of the data subject, as well as URLs and descriptions of such content.
- Art. 9(2)(f) GDPR – for the assertion, exercise, or defense of legal claims
- Art. 9(2)(a) GDPR – on the basis of your explicit consent
This processing is carried out exclusively for the purpose of legal enforcement and the protection of the data subject. The legal bases are:
5. Legal bases for processing
| Purpose | Legal basis |
|---|---|
| Provision of protection service | Art. 6(1)(b) GDPR (Contract fulfillment) |
| Optional additional functions | Art. 6(1)(a) GDPR (Consent) |
| Tax retention obligations | Art. 6(1)(c) GDPR (Legal obligation) |
| Security, fraud prevention | Art. 6(1)(f) GDPR (Legitimate interests) |
6. Purposes of processing
We use your data for the following purposes:
- Leak search and removal – identification of unauthorized content and initiation of takedown measures with platforms, search engines, and hosting providers
- Dashboard operation – provision of your personal dashboard with finding reports and status updates
- Communication & Support – personal support via WhatsApp, email, or video call
- Contract processing – billing, account management, referral program
- Security & quality assurance – protection of our systems and improvement of our service
7. Data sharing with third parties
We only share your data to the extent that this is strictly necessary for the provision of our service:
- Platforms, social networks, and search engines – for initiating takedown requests (only the information necessary for removal is transmitted)
- Stripe Inc. – for payment processing; Stripe processes payment data independently as its own data controller
- IT service providers – for the technical operation of our platform, exclusively on the basis of data processing agreements (DPA) pursuant to Art. 28 GDPR
- Authorities – only when legally required
Your data is not shared for advertising purposes or sold to third parties.
8. International data transfers
Within the scope of our service, data may be transferred to countries outside the EU/EEA:
- Stripe (USA) – for payment processing, secured by EU Standard Contractual Clauses (SCCs)
- International platforms – for worldwide takedown requests; only the data strictly necessary for removal is transmitted
9. Storage duration
| Data category | Storage duration |
|---|---|
| Contract data and invoices | 7 years (tax retention obligation) |
| Leak data and takedown documentation | Up to 30 days after contract end, then deletion |
| Account data | 30 days after cancellation, then deletion |
| Technical data (e.g., IP addresses) | Maximum 90 days |
| Records of consent | Until the expiry of possible claims (max. 3 years from revocation) |
10. Your rights as a data subject
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR): You can find out what data we have stored about you.
- Right to rectification (Art. 16 GDPR): You can request the correction of incorrect data.
- Right to erasure (Art. 17 GDPR): You can request the deletion of your data, provided no statutory retention obligations conflict.
- Right to restriction of processing (Art. 18 GDPR): You can request the restriction of processing under certain conditions.
- Right to object (Art. 21 GDPR): You can object to processing based on our legitimate interests.
- Right to data portability (Art. 20 GDPR): You can receive your data in a common, machine-readable format.
- Right to withdraw consent (Art. 7(3) GDPR): You can withdraw given consent at any time with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected. After a revocation, we may no longer be able to provide all parts of the service.
To exercise your rights, contact: datenschutz@onlysafesis.com
Right to lodge a complaint: You have the right to lodge a complaint with the competent supervisory authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at
11. Protection of minors
Our service is directed exclusively at adults (18+). We do not knowingly process data of minors. If we become aware that a data subject is a minor, their data will be deleted immediately.
12. Cookies & Tracking
Technically necessary cookies
These cookies are necessary for the operation of the website and cannot be deactivated. They serve, for example, security, session management, and cookie consent management. Legal basis: Art. 6(1)(f) GDPR.
Analytics cookies (Google Analytics)
We use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to understand and improve the use of our website. Data such as page views, dwell time, and approximate location information are processed. IP anonymization (anonymizeIp) is enabled, so IP addresses are only recorded in anonymized form. These cookies are only set with your consent. You can withdraw your consent at any time via our cookie banner. Further information: policies.google.com/privacy. Legal basis: Art. 6(1)(a) GDPR.
Stripe cookies
For secure payment processing, our payment provider Stripe sets technically necessary cookies. Legal basis: Art. 6(1)(b) GDPR.
You can adjust your cookie preferences at any time via the cookie banner on our website.
13. Automated decision-making
We do not make automated decisions within the meaning of Art. 22 GDPR that produce legal or similarly significant effects on you. We use automated tools exclusively for the technical support of leak searches; all essential decisions are manually reviewed and made by our employees.
14. Data security
We protect your data through appropriate technical and organizational measures, in particular:
- Encryption of all data transmissions (TLS/HTTPS) and data storage
- Strict access controls according to the need-to-know principle
- Regular security updates and monitoring of our systems
- Confidentiality obligations for all employees and data processors
15. Contact
For questions about data protection and to exercise your data subject rights, please contact:
OnlySafeSis
Frodlgasse 4/2
9020 Klagenfurt am Wörthersee
Email: datenschutz@onlysafesis.com
Data Protection Officer:
Daniel Prugger
Erkergasse 6
9020 Klagenfurt am Wörthersee
💫 Our Promise: We treat your data with the same care and respect that we would expect for ourselves. Transparency and trust are the foundation of our work.
As of: June 2026