Privacy Policy

In this privacy policy we inform you about the processing of your personal data.

If you want to change your privacy settings (grant consent or revoke your previously granted consent), click here to change your settings.

Responsible

2×4 Solutions GmbH, Fichtenring 8, 84562 Mettenheim, Deutschland, info@2×4.de, +49 8631 607 164

Data security officer

You can contact our Data Protection Officer at:

attn. Ester Mittermeier,
Fichtenring 8
84562 Mettenheim
Phone: +49 8631 607 164
Email: data-protection@2×4.de

Hosting

Contabo

Our website is hosted by our processor Contabo, Contabo GmbH, Aschauer Str. 32a, 81549 München, Germany.

Connection data are processed to provide and to deliver the website. Data are not stored beyond access for the mere purpose of delivery and provision of the website.

The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) (f) GDPR combined with § 25 TTDSG.

Connection data and other personal data are also processed in connection with various other functions or services in order to operate the website. Detailed information is provided in this Data Privacy Statement and in the individual functions or services.

Hetzner Online GmbH

Our website is hosted by our processor Hetzner, Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.

Connection data are processed to provide and to deliver the website. Data are not stored beyond access for the mere purpose of delivery and provision of the website.

The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) (f) GDPR combined with § 25 TTDSG.

Connection data and other personal data are also processed in connection with various other functions or services in order to operate the website. Detailed information is provided in this Data Privacy Statement and in the individual functions or services.

Mittwald CM Service GmbH & Co. KG

Our website is hosted by our processor Mittwald, Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany.

Connection data are processed to provide and to deliver the website. Data are not stored beyond access for the mere purpose of delivery and provision of the website.

The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) (f) GDPR combined with § 25 TTDSG.

Connection data and other personal data are also processed in connection with various other functions or services in order to operate the website. Detailed information is provided in this Data Privacy Statement and in the individual functions or services.

Strato

Our website is hosted by our processor Strato, Strato AG, Pascalstraße 10, 10587 Berlin, Germany.

Connection data are processed to provide and to deliver the website. Data are not stored beyond access for the mere purpose of delivery and provision of the website.

The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) (f) GDPR combined with § 25 TTDSG.

Connection data and other personal data are also processed in connection with various other functions or services in order to operate the website. Detailed information is provided in this Data Privacy Statement and in the individual functions or services.

CDN Provider

AWS Cloudfront CDN

Parts of our website are hosted by our processor AWS Cloudfront, Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, USA.

Connection data are processed to provide and to deliver the website. Data are not stored beyond access for the mere purpose of delivery and provision of the website. However, our processor keeps connection data for security purposes. The duration of processing for security purposes varies and ends with the necessity of the security measures. Furthermore, our processor anonymizes collected data immediately after such data were collected and provides us with statistics for analysis containing anonymous data. We use these statistics for debugging and the sophistication of our website.

The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) (f) GDPR combined with § 25 TTDSG.

Contact Form

You can contact us by using a contact form provided on our website. After submission of the contact form, the controller will process the personal data you have provided for the purpose of handling your request on the basis of your consent which you have given by submitting the form according to Art. 6 (1) (a) GDPR, until revocation.
You have no legal or contractual obligation to provide personal data. If you do not provide such data, you are simply not able to submit and we are not able to process your request.

Application Form

You can also apply for a job on our website. We will process the personal data provided in the application form in order to manage your application based on a pre-contractual relationship according to Art. 6 (1) (b) GDPR until further notice, and for a duration of not more than 6 months after completion of the application procedure.

If you explicitly want us to retain the application documents you have submitted, we will keep your records for not more than 18 months based on your consent according to Art. 6 Abs. 1 lit. a GDPR combined with § 25 TTDSG.

You have no legal or contractual obligation to provide personal data. If you do not provide such data, we are simply not able to manage your application.
We do not transfer your job application data to third parties.

Registration Form

You can register on our website. After you have registered, we will process the data provided in the registration form for the performance of the contract based on the contract concluded with us with your registration according to Art. 6 (1) (b) GDPR.

You have no legal or contractual obligation to provide personal data. You simply cannot register for the service if you do not provide such data.

Data are not transferred to third parties.

Comments Form

By commenting our products, postings, photographs or videos we will process your personal data for the purpose of imaging your comments on our website and internal documentation of the legal basis of the contract concluded according to Art. 6 (1) (b) GDPR (gratuitous hosting contract to image your commentation on our website). We will publish your name and comment on our website and store your personal data until deletion of your comment.

Embeddings

YouTube

If you have given your consent, we will process your personal data in cooperation with Youtube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as joint controllers for the purpose of playing videos on our website.

We will enable the service to collect connection data, data of your web browser, and to place an advertising cookie. The placing of advertising cookies allows Google to create an individual user-ID for each user. These personal data can be used for unambiguous identification and are then processed via the advertising network operated by Google.

The Google group transfers your personal data to the USA. The legal basis for data transfer to the USA is your consent in accordance with Art. 49 Para. 1 a in conjunction with Art. 6 Para. 1 a GDPR. Before you gave your consent, you were informed that the USA does not have a data protection level that complies with EU standards. In particular, US intelligence agencies can access your data without being informed about it and without you being able to take legal action against it. For this reason, the European Court of Justice ruled in a judgment that the previous adequacy decision (Privacy Shield) was invalid.

Any further independent processing of data, especially via the Google advertising network, is carried out by Google as sole controller. Detailed information is provided in the Data privacy policy of Google.

If you do not give your consent, we are simply not able to provide the Youtube service to you. You can withdraw your consent by changing the settings at Privacy policy.

The legal basis of processing is your consent according to Article 6 (1) (a) GDPR.

Vimeo

If you have given your consent, we will process your personal data in cooperation with Vimeo, Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA as joint controllers for the purpose of playing videos on our website.

We will enable the service to collect connection data, data of your web browser, and to place an advertising cookie. The placing of advertising cookies allows Vimeo to create an individual user-ID for each user. These personal data can be used for unambiguous identification and are then processed via the advertising network operated by Vimeo.

Any further independent processing of data, especially via the Vimeo advertising network, is carried out by Vimeo as sole controller. Detailed information is provided in the Data privacy policy of Vimeo.

If you do not give your consent, we are simply not able to provide the Vimeo service to you. You can withdraw your consent by changing the settings at Privacy policy.

The legal basis of processing is your consent according to Article 6 (1) (a) GDPR. The legal basis for data transfer to the USA is your consent in accordance with Art. 49 Para. 1 a in conjunction with Art. 6 Para. 1 a GDPR. Before you gave your consent, you were informed that the USA does not have a data protection level that complies with EU standards. In particular, US intelligence agencies can access your data without being informed about it and without you being able to take legal action against it. For this reason, the European Court of Justice ruled in a judgment that the previous adequacy decision (Privacy Shield) was invalid.

Payments are processed via:

Service: PayPal
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxenburg

Service: Stripe
Provider: Stripe,Inc. 185 Berry Street, Suite 550, San Francisco, CA 94107, USA

Newsletter Services

By own web/email server

After consenting we will process your personal data for the purpose of sending you electronic direct mailings (e.g. newsletter) until revocation.

The legal basis of processing is your consent according to Article 6 (1) (a) GDPR. You have no legal or contractual obligation to provide personal data. If you do not provide such data, we will not send you electronic direct mailings.

Service: SendinBlue
Operator: SendinBlue, 55 Rue d’Amsterdam, 75008 Paris, FRANCE
Privacy Policy: https://www.sendinblue.com/gdpr

Right to object

You have the right to object to processing if your personal data is processed based on legitimate interests.

We will then cease the processing carried out on this basis, unless there are compelling and legitimate reasons for us to do so.

You have the right to object to the processing of your personal data for the purpose of direct marketing. In this case, we will cease the processing of your personal data for the purpose of direct mail.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Withdrawal

You have the right to withdraw your consent at any time by changing the settings at Privacy settings.

If you have given your consent to receipt of advertising by email, you may withdraw your consent by clicking the unsubscribe link. In this case, we will cease the processing operations, unless there is any other legal basis.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to data subject

You have the right to access to, rectification, erasure and restriction of processing of personal data.

You have also the right to data portability if the processing of your personal data is based on your consent or on a contract concluded with you.

You have also the right to lodge a complaint with the supervisory authority. If you need more information on the supervisory authorities in the European Union, go to here.

Pin It on Pinterest