Privacy statement

Introduction

In this privacy policy, we inform you about the processing of your personal data and your data protection rights when visiting our website, using the 2zero app, or communicating with us. Your privacy is important to us. We place great importance on the data protection-compliant handling of your data and will not use it for any purposes other than those specified. We have taken appropriate technical and organizational measures to ensure compliance with applicable data protection laws.

What Information We Collect and Why

Information from Website Visitors

Like most website operators, 2zero automatically collects (i) technical information about your device, including the Internet Protocol address (IP address) of the device, and (ii) information about your visit to our websites (e.g., the referrer URL, displayed, and interacted content). The purpose of data processing on this website is to inform about the activities and services of the company 2zero.

Some of this information is collected using cookies and related technologies. More information about these technologies can be found below. We collect this information to better understand how visitors use our websites, improve our websites and user experience, and monitor website security. The legal basis for data processing is Art. 6(1)(f) of the GDPR.

Use of Cookies

This website uses so-called “cookies”, text files that are stored on your device and allow us to analyze the use of the website by you. The information generated by the cookie about your use of this website is used to evaluate visitor behavior on the website and improve our information offerings. The legal basis for data processing is Art. 6(1)(f) of the GDPR (legitimate interest).

You can prevent the installation of cookies by adjusting your browser software accordingly; however, please note that in this case, you may not be able to use all the features of this website to their full extent.

If the use of cookies that are not necessary for the operation of the website takes place, we will ask for your consent in advance; the legal basis for data processing is then Art. 6(1)(a) of the GDPR (consent).

Contact Form

If you contact us via our contact form, your data from the form will be processed to handle your request. The legal basis for transmission to us is consent according to Art. 6(1)(a) of the GDPR. You can withdraw your consent at any time with future effect, and the data will then be deleted. Unless a storage obligation arises from your request (e.g., an order), the data will be deleted after 2 years. Your data will be forwarded internally to the responsible contact person for processing your request.

2zero is committed to protecting and respecting your privacy. We use your personal data only to manage your account and provide relevant products and services. You can unsubscribe from all email notifications at any time via the unsubscribe function in the email.

Encryption

This website uses “Hypertext Transfer Protocol Secure” (https). The connection between your browser and our server is encrypted.

Personal Data from Users and Initiative Participants

You may choose to interact with our website, app, or initiatives in a way that provides us with your personal information. In this case, a user ID is generated to track forms and URLs, record page views and usage counts, and monitor and improve product performance.

The amount and type of information that 2zero collects depend on the nature of your interaction with us and the amount of information you want to provide. We collect the information you provide to us in connection with creating an account on our website or app. Certain profile data (such as your username) may be shared publicly, along with activities under your profile. You have the option to disable this public profile feature in the app settings.

In any case, 2zero collects personal data only to the extent necessary or appropriate to fulfill the purpose of your interaction with or request to 2zero. We may also collect personal information at live events and demos. We will not disclose your personal data except as described in this privacy policy.

Use of the 2zero App and Participation in Initiatives

The processing of your personal information is particularly necessary to achieve the goal of the app and our initiatives: to understand personal CO₂ emissions and reduce them through behavioral changes over the long term. The following purposes are particularly pursued in this context:

Conducting challenges to determine individual CO₂ footprints and track reduction measures (e.g., “Leaderboard”) within our initiatives. This includes processing your personal data such as completed challenges, habits, and distances traveled.
Provision of information and learning paths, with which you can gain increasingly in-depth knowledge through use.
Reward and gamification: As part of using our app, we continuously incentivize behavioral changes with points and prizes to maximize the impact of our actions.
Allocation of individual team names and the option to join specific teams within the framework of our challenges.
Evaluation and publication of challenge statistics and the CO₂ footprint of your community and individual teams. The personal reference is removed by aggregating and anonymizing your personal data.
Identification of teams and individual members for contact after completing challenges (e.g., to recognize “winning teams”). Corresponding email addresses will be forwarded to the organization team with the user’s consent.

Processed data types include, in particular:

Sociodemographic information (e.g., age, gender, postal code, income)
Activities and participation (e.g., completed challenges, participation in actions, distances covered)
Interests and preferences (e.g., through polls, feedback)

Registration with 2zero

Creating a user account with 2zero is possible anonymously, using a Google account, Apple ID, or a valid email address.

Registration with an email address is done via a double opt-in process. After entering the email address, you must click on a confirmation link sent to this address or enter the transmitted authentication code to ensure that your email address is not misused.

The email address used for registration can optionally be used for prize notifications by 2zero or the contractual partner of the respective community. You can find detailed information below.

The 2zero app can also be used anonymously, i.e., without creating a user account. Note that we cannot recover your data in this case if you delete the app from your device. Without registration, we also cannot fully ensure your data subject rights. In this case, some app features, such as participating in sweepstakes, may be limited.

Public Areas & Statistics

Your profile, including profile picture, name, statistics, and awards, will be displayed in your community and other public areas, such as public leaderboards, unless you disable this setting in your profile settings. You have the option to hide your profile, making it no longer visible to the public.

The overall results of your community and the results of initiatives (e.g., CO₂ savings, completed challenges, footprint) are published in an aggregated manner so that no conclusions about you or your account are possible—especially if you have hidden your profile.

We may aggregate all information collected through our websites, app, or interactions with our campaigns (including personal data) for statistical and analytical purposes. Aggregated or anonymized reports on community activities or initiatives may be published on our website, in publications, or for advertising purposes, e.g., in reports or case studies on the success of our initiatives.

Deletion of My Data

You can delete your user account at any time via the app settings. Please note that data recovery is not possible after account deletion. If you delete only the app but not your user profile, re-registration is possible using your previous login data.

Legal Basis for Data Processing

We process personal data based on the following legal grounds:

Consent (Art. 6(1)(a) GDPR)

If processing personal data is necessary and no other legal basis exists, we obtain the data subject’s consent. This applies, for example, if you ask us to send you marketing information (e.g., newsletter updates) or if you consent to our use of cookies or similar technologies. You can withdraw your consent at any time.

Contract Fulfillment and Pre-Contractual Measures (Art. 6(1)(b) GDPR)

If processing is necessary to fulfill a contractual obligation, such as using the 2zero app, we process your data based on contract fulfillment. This includes, among other things, managing your account access, providing our products and services, processing orders, and communicating about services.

Compliance with Legal Obligations (Art. 6(1)(c) GDPR)

To comply with a legal obligation to which we are subject under applicable law, we process personal data based on legal requirements. This is necessary, for example, to comply with tax regulations.

Legitimate Interests (Art. 6(1)(f) GDPR)

We process personal data within the framework of our legitimate interest, provided that the fundamental rights and freedoms of the data subject do not override. Legitimate interests include, in particular, improving and personalizing your experience with our websites and services, ensuring information security, enforcing our legal claims, and complying with other legal provisions. Our legitimate interest also includes the provision of information on the purposes of the 2zero app and addressing users with further offers. You can object to the use of your data for advertising purposes at any time.

How 2zero Uses and Protects Your Personal Data

Duration and Retention of Stored Data

The storage of your data is linked to your 2zero account. You can request the deletion of your data at any time by deleting your user account. Please note that data recovery is not possible after account deletion. If you delete only the app but not your user profile, re-registration is possible with your previous login data.

If you withdraw your consent to the processing of your personal data, we will delete your personal data, provided that legal retention periods or legal considerations do not prevent deletion. To analyze and transmit challenge statistics and CO₂ footprint (community, teams), the information you provided is anonymized and aggregated so that personal evaluation is no longer possible.

Disclosure of Your Information

2zero engages a number of service providers and partners to manage or support certain aspects of our business activities. 2zero may share your personal data with the third-party providers listed below for the purposes described in this privacy policy or with your consent. Currently, we use the following service providers:

Google Cloud Platform – Cloud Data Hosting
Firebase – App Stability Monitoring and Data Processing
Google Analytics – User Interaction Analysis
Vercel Hosting – Cloud Infrastructure Hosting
Brevo (Sendinblue) – Email Sending Service
Resend – Transactional Email Sending
PostHog – User Behavior Analysis
Knock – Notification Management
Ghost Newsletter – Newsletter Service
Typeform – Collection of User Feedback
HubSpot – CRM Database (Data Processor)
Notion – Internal Project Management and Documentation Tool
Slack – Internal Communication Tool
Google Workspace – Internal Collaboration Tools
Fillout – Form Creation, Data Collection

All service providers are bound to confidentiality and data protection. These include hosting providers, technical service providers, and consulting firms. We have entered into data protection agreements with these business partners to ensure an adequate level of data protection. The disclosure of personal data to authorities is only carried out in the presence of overriding legal provisions.

Disclosure of Email Address for Prize Notification

According to our privacy policy, it is possible that the email addresses of winners of an event are forwarded to the respective municipality or company. This applies only to app users who have explicitly agreed to this practice in the app. This consent allows us to include both individuals and teams in our community in our event prizes. The data provided may only be used for the purpose of prize notification; usage for other purposes is expressly prohibited.

Affiliated Companies

Your personal data collected under this privacy policy is shared by 2zero with our affiliated company twigbit technologies GmbH based in Berlin, Germany, to ensure the provision of the website, the delivery of our products and services, the management of your accounts, hosting, IT, security, support, billing, marketing, and communication.

Data Processing in Third Countries

We have configured our server locations within the EU and prefer data processing within the EU to ensure the highest data protection standards. However, in some cases, data transfer to third countries may be required. In such cases, we take appropriate safeguards to ensure the security of your personal data in accordance with GDPR requirements.

Should data processing in a third country be necessary, this is done only in compliance with legal requirements. Subject to explicit consent or legal requirements, we process data only in third countries with a recognized level of data protection or contractual obligations through standard data protection clauses of the European Commission, certifications, or binding data protection rules (see Art. 44 to 49 GDPR).

Communication with 2zero

If you are a registered website user and have provided us with your email address, 2zero may occasionally send you emails with important notices about security, new features, or updates to keep you informed about developments at 2zero and our products. We limit such emails to a minimum and primarily use our blog for such communications. Each marketing email includes an unsubscribe link to stop receiving these emails at any time.

If you send us a request (e.g., via a support email or one of our feedback tools), we reserve the right to publish your request to assist with clarification or response or to help other customers. However, we will not publish your personal data in connection with your request.

Contact Information and Data Subject Rights

Responsibility & Contact

The controller for processing your personal data as part of using our services and conducting challenges is:

2zero GmbH,
Kreuzbergstr. 29,
10965 Berlin

If you have any questions about data protection, you can contact all responsible parties at the contact details provided or directly at post@2zero.earth.

Data Subject Rights

If you wish to exercise your data protection rights under Articles 15 to 22 GDPR, you can contact us by email at support@2zero.earth.

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), deletion (Art. 17 GDPR), or restriction of processing of your personal data. If we process your personal data based on our legitimate interests, you can object to further processing. Whether your objection is successful is determined through a balancing of interests. If you have given consent, processing for contract fulfillment, or in the context of automated procedures, you generally have the right to data portability (Art. 20 GDPR).

In addition to the above rights, you have the right to lodge a complaint with the competent supervisory authority.

Current Version of the Privacy Policy

We reserve the right to change the content of this privacy policy at any time, particularly in the case of further developments or adjustments to the services used. You can view the current privacy policy on our website at https://www.2zero.earth/datenschutz. This policy is current as of: 10/30/2024.