Version: 14.11.2026
ELITEDOMAINS explains here how we handle your data and why it is safe with us. The current statutory requirements of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG) are taken into account.
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to this privacy policy.
Please also note the General Terms and Conditions and the cancellation policy of ELITEDOMAINS GmbH.
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.
Data processing on this website is carried out by the website operator. Their contact details can be found in the imprint of this website.
On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.
Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter our website.
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data or the restriction of its processing. For this and for further questions on the subject of data protection, you can contact us at any time at the address given in the imprint. You also have the right to lodge a complaint with the competent supervisory authority.
When you visit our website, your surfing behaviour may be statistically analysed. This is done with the analysis program Plausible Analytics, which works without cookies. The analysis of your surfing behaviour is anonymous; the surfing behaviour cannot be traced back to you. Detailed information on this can be found in the section "Web analysis with Plausible Analytics".
You can object to this analysis. We inform you about the options for objecting in the section mentioned.
The party responsible for data processing on this website is:
Jörn Schillmann
Beim Schlump 18
20144 Hamburg
Telephone: +49 40 2285 1311
Email: info@elitedomains.de
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. An informal email to us is sufficient for this. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.
In the event of data protection violations, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the data protection commissioner of the federal state in which our company is based. A list of the data protection commissioners and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/AnschriftenLinks/anschriftenlinks-node.html.
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
Within the framework of the applicable statutory provisions, you have the right at any time to receive information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correction or deletion of this data or to restriction of its processing. For this and for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.
We hereby object to the use of contact data published as part of the imprint obligation for sending advertising and information material that has not been expressly requested. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam emails.
For security reasons and to protect the transmission of confidential content, such as the enquiries you send to us as the site operator, this site uses SSL encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
When SSL encryption is activated, the data you transmit to us cannot be read by third parties.
If, after concluding a contract subject to a fee, there is an obligation to transmit your payment data to us (e.g. account number for a direct debit authorisation), this data is required for payment processing.
Payment transactions via the common means of payment (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
With encrypted communication, the payment data you transmit to us cannot be read by third parties.
The websites partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are dealt with separately in this privacy policy.
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
browser type and browser version
operating system used
referrer URL
host name of the accessing computer
time of the server request
IP address
This data is not merged with other data sources. The basis for data processing is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing the website in a technically error-free and secure manner.
You can register on our website to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.
For important changes, for example to the scope of the offer or for technically necessary changes, we use the email address provided during registration to inform you in this way.
The data entered during registration is processed on the basis of your consent (Art. 6 (1) (a) GDPR). You can revoke any consent you have given at any time. An informal email to us is sufficient for this. The lawfulness of the data processing already carried out remains unaffected by the revocation.
The data collected during registration is stored by us for as long as you are registered on our website and is then deleted. Statutory retention periods remain unaffected.
We only transfer personal data to third parties if this is necessary in the course of processing the contract, for example to the companies entrusted with delivering the goods (registries in the case of domains) or the credit institution or payment provider commissioned with processing payments. The data is not transferred further, or only if you have expressly consented to the transfer. Your data is not passed on to third parties without express consent, for example for advertising purposes. The basis for data processing is Art. 6 (1) (b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.
In the course of registering and managing domains, it is essential for the performance of the contract to transfer, among other things, personal data to the respective registry (hereinafter: "registry") in order to execute the respective order. In the case of registrations, contracts are thus also concluded between the domain registry and the respective holder.
The registry DENIC eG is responsible for .de domains. The domain holder's data must be transmitted to this cooperative under the DENIC domain terms and conditions with every registration and every update. DENIC eG's privacy policy can be viewed here: https://www.denic.de/ueber-denic/datenschutzerklaerung/
In this context, it may happen (depending on the responsible registry) that personal data is transferred to third countries, even if an adequate level of data protection is not guaranteed there. In some cases, the transmitted data can be viewed publicly via databases (so-called WHOIS databases).
Your data is transferred to the registries on the basis of Art. 6 (1) (b) GDPR (processing for the performance of a contract). In accordance with the principle of data minimisation, we take great care to transmit only the data required for the permanent registration of a domain with the respective registry.
When the contact form on our website is used, the following personal data is collected and processed: name, email address, content of the message.
This data is processed exclusively for the purpose of handling the expression of interest and contacting the domain seller. The personal data is processed on the basis of Art. 6 (1) (b) GDPR (implementation of pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest). The legitimate interest consists in enabling contact between prospects and the domain seller.
The collected data (name, email address, content of the message) is not transmitted to the domain seller, but is merely made available to the seller for viewing on our platform in order to enable them to contact the prospect. It is not passed on to third parties beyond this unless this is required by law or necessary for the enforcement of rights. In addition, due to DENIC's data protection provisions, the domain seller's data may not be disclosed to the person expressing interest.
The personal data is stored in accordance with the statutory retention obligations. We use technical and organisational measures to ensure the security of the transmitted data and to protect it against unauthorised access.
In the course of a buy-now purchase, personal data is processed for the purpose of concluding the contract and issuing invoices. Depending on the type of buy-now purchase, the data is processed as follows:
Buy-now purchase without a price proposal:
The domain seller receives an email with the sales confirmation. For lawful contract processing and invoicing, the following data of the seller and the buyer is disclosed in the invoice: name, address, email address, VAT ID if applicable
Buy-now purchase with a price proposal:
The domain seller receives an email with the price proposal. The price proposal can be viewed by the seller and the prospective buyer in the lead area. Only in the event of a successful purchase is the following data of the seller and the buyer processed for contract processing and invoicing and visible in the invoice: name, address, email address, VAT ID if applicable.
The personal data is processed on the basis of the following legal bases: Art. 6 (1) (b) GDPR (performance of a contract and pre-contractual measures) and Art. 6 (1) (c) GDPR (legal obligation to issue invoices). The collected data is only transmitted to the contracting parties involved in each case (seller and buyer). It is only passed on to third parties if this is required by law or necessary for the enforcement of legal claims.
The personal data is stored in accordance with the statutory retention obligations. We use technical and organisational measures to ensure the security of the transmitted data and to protect it against unauthorised access.
If you would like to receive the newsletter offered on the website, we need an email address from you as well as information that allows us to verify that you are the owner of the email address provided and agree to receive the newsletter. Further data is not collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.
The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can revoke your consent to the storage of the data, the email address and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the revocation.
The data you provide to us for the purpose of receiving the newsletter is stored by us until you unsubscribe from the newsletter and is deleted after you cancel the newsletter. Data that we have stored for other purposes (e.g. email addresses for the members' area) remains unaffected.
To statistically analyse visits to our website, we use the open-source software Plausible Analytics. We operate it ourselves on our own server (t.elitedomains.de); the data is not passed on to the manufacturer of the software.
Plausible Analytics does not set cookies and does not store any information on your device. It records the page accessed, the referring website (referrer), browser, operating system, device type and the country derived from the IP address. Your IP address is not stored, but only combined with the browser into an anonymous identifier that changes daily. The data is only evaluated in aggregated form; it is not possible to draw conclusions about you personally or to create user profiles.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in understanding how our website is used and improving our offer. You can object to the analysis at any time, for example by blocking the script from t.elitedomains.de with a content blocker in your browser.
To improve the user experience in our applications, we use the service crisp.chat, offered by Crisp IM SARL, 149 Rue Pierre Semard, 29200 Brest, France (registration number: 83308580600010), for sending messages by email and for live chats. Crisp IM SARL enables us to get in touch with users more quickly and directly, in line with their expectations, and to process their enquiries. With crisp.chat, we can send users messages via live chat, email, SMS or push notifications, insofar as this is legally permissible. To make this possible, we have to synchronise our contact information about the users with Crisp IM SARL via an interface.
Crisp's privacy policy can be found at: https://crisp.chat/de/privacy/
Emails are sent via the registration portal using "Mailgun", an email sending platform of the US provider Mailgun Technologies, Inc., 535 Mission St., San Francisco, CA 94105. The transfer to the USA is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework (DPF), insofar as the provider is certified under it, and otherwise on the European Commission's standard contractual clauses (Art. 46 (2) (c) GDPR). Mailgun's privacy policy can be found at: https://www.mailgun.com/privacy-policy.
This site uses the service Sentry, 1501 Mariposa St #408, San Francisco, CA 94107, USA, to improve the technical stability of the service by monitoring system stability and identifying code errors. Sentry serves these purposes alone and does not evaluate any data for advertising purposes. User data, such as information about the device or the time of the error, is collected anonymously, is not used in a personal manner and is subsequently deleted.
Sentry's privacy policy can be found at: https://sentry.io/privacy/
SMS are sent via Twilio, a service of Twilio Inc. (hereinafter "Twilio"), 645 Harrison St # 3rd Floor, San Francisco, CA 94107 USA.
For this purpose, we transmit your mobile phone number to Twilio, where it is stored until your request has been completed. We then arrange for your mobile phone number to be deleted at Twilio. The legal basis for the use of Twilio is Art. 6 (1) sentence 1 (b) GDPR. The transfer to the USA is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework (DPF), insofar as the provider is certified under it, and otherwise on the European Commission's standard contractual clauses (Art. 46 (2) (c) GDPR). Twilio's privacy policy can be found at: https://www.twilio.com/legal/privacy
Our pages use functions of Cloudflare. The provider is Cloudflare, Inc.
665 3rd St. #200,
San Francisco, CA 94107,
USA.
Cloudflare offers a globally distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is routed via the Cloudflare network. Cloudflare is thus able to analyse the data traffic between users and our websites, for example to detect and repel attacks on our services. In addition, Cloudflare may store cookies on your computer for optimisation and analysis purposes. This serves to safeguard our legitimate interests in optimal marketing of our offer, which prevail within the framework of a balancing of interests, in accordance with Art. 6 (1) sentence 1 (f) GDPR.
We have concluded a corresponding data processing agreement with Cloudflare on the basis of the GDPR. The transfer to the USA is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework (DPF), insofar as the provider is certified under it, and otherwise on the European Commission's standard contractual clauses (Art. 46 (2) (c) GDPR).
Further information on the Data Privacy Framework can be found at https://www.dataprivacyframework.gov. Cloudflare collects statistical data about visits to this website. The access data includes: name of the page accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. Cloudflare uses the log data for statistical evaluations for the purpose of operating, securing and optimising the offer.
Here you can find information about the data collected there and information on data protection at https://www.cloudflare.com/de-de/privacypolicy/
Payments are processed by our service provider Stripe Payments Europe Ltd., C/O A & L Goodbody, Ifsc, North Wall Quay Dublin D01 H104, Ireland.
On our website, we offer payment via Stripe and the associated payment methods. The provider of these payment services is Stripe Payments Europe Ltd
Block 4, Harcourt Centre
Harcourt Road
Dublin 2
If you choose payment via Stripe, the payment data you enter will be transmitted to Stripe.
Your data is transmitted to Stripe on the basis of Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract). You have the option of revoking your consent to data processing at any time. A revocation does not affect the validity of data processing operations carried out in the past. All data required for payment processing is used exclusively to carry out the payments and is transmitted using the "SSL" procedure. Stripe is PCI DSS certified. Stripe may transfer, process and store personal data outside the EU. The transfer to the USA is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework (DPF), insofar as the provider is certified under it, and otherwise on the European Commission's standard contractual clauses (Art. 46 (2) (c) GDPR).
Stripe's privacy policy can be found at: https://stripe.com/de/privacy.
We use your data to collect outstanding claims. For this purpose, we use PAIR Finance GmbH, Hardenbergstraße 32, 10623 Berlin, as a debt collection service provider.
PAIR Finance's privacy policy can be found at: https://app.pairfinance.com/datenschutz