Data Privacy
Introduction
In this privacy policy, we inform you about the processing of your personal data and your data protection rights when visiting our website, using the 2zero app or communicating with us. Your privacy is important to us. We attach great importance to the data protection-compliant handling of your data and will not use it for purposes other than those specified. To this end, we have taken appropriate technical and organizational measures to ensure that the provisions of applicable data protection law are observed.
Which information we collect and why
Informationen from Website Visitors
Like most website operators, 2zero automatically collects (i) technical information about your device, including the device’s Internet Protocol (IP) address, and (ii) information about your visit to our websites (e.g., the referrer URL, viewed and interacted content).
The purpose of data processing on this website is to provide information about the activities and services of the company 2zero.
Some of this information is collected using cookies and related technologies. You can find more information about these technologies below. We collect this information to better understand how visitors use our websites, to improve the websites and user experience, and to monitor website security.
The legal basis for data processing is Article 6(1)(f) of the GDPR.
Use of Cookies
This website uses so-called “cookies”, which are text files stored on your device and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is used to evaluate visitor behavior on the website and to improve our information offering.
The legal basis for data processing is Article 6(1)(f) of the GDPR (legitimate interest).
You can prevent the installation of cookies by setting your browser software accordingly; however, please note that if you do so, you may not be able to use all functions of this website in full.
If cookies are used that are not necessary for the operation of the website, we will ask for your consent in advance; the legal basis for data processing in that case is Article 6(1)(a) of the GDPR (consent).
Contact Form
If you contact us via our contact form, the data you enter will be processed for the purpose of handling your request. The legal basis for transmitting this data to us is your consent under Article 6(1)(a) GDPR. You can withdraw your consent at any time with future effect, and the data will then be deleted.
If your request does not result in any obligation to retain data (e.g., in the case of an order), the data will be deleted after a period of 2 years. Your data will be forwarded internally to the appropriate contact person for processing your request.
2zero is committed to protecting and respecting your privacy. We use your personal data only to manage your account and provide relevant products and services. You can unsubscribe from all email notifications at any time via the unsubscribe link in the email.
Encryption
Diese Webseite nutzt „Hypertext Transfer Protocol Secure“ (https). Die Verbindung zwischen deinem Browser und unserem Server erfolgt verschlüsselt.
Personal data of users and initiative participants
You may choose to interact with our website, app, or initiatives in a way that provides us with your personal information. In this case, a user ID will be generated to track forms and URLs, record page views and usage metrics, and monitor and improve product performance.
The amount and type of information that 2zero collects depends on the nature of your interaction with us and the amount of information you choose to provide. We collect the information you provide to us in connection with creating an account on our website or app. Certain profile data (such as your username) may be shared publicly, as well as activities under your profile. You have the option to disable this public profile feature in the app settings.
In all cases, 2zero collects personal data only to the extent that it is necessary or appropriate to fulfill the purpose of your interaction with or your request to 2zero. We may also collect personal information during live events and demos. We will not disclose your personal data except as described in this privacy policy.
Use of the 2zero app and participation in initiatives
The processing of your personal data is particularly necessary to achieve the goal of the app and our initiatives: to understand personal CO₂ emissions and reduce them long-term through behavioral changes. In this context, the following purposes are particularly pursued:
- Implementation of challenges to determine one's CO₂ footprint as well as tracking of reduction measures (e.g., leaderboard) within the scope of our initiatives. In particular, the following personal data of yours will be processed: completed challenges, habits, distances traveled.
- Provision of information and learning paths to help you gain deeper knowledge during your usage.
- Rewards and gamification: In the use of our app, we incentivize behavioral change continuously through points and prizes to maximize the impact of our actions.
- Possibility to assign individual team names and join specific teams in the course of our challenges.
- Evaluation and publication of challenge statistics and the CO₂ footprint of your community and individual teams. To do this, the personal reference is removed by aggregating and anonymizing your data.
- Identification of teams and their individual members for follow-up contact after the completion of challenges (e.g., to award “winners”). Corresponding email addresses are transferred to the organizing team with the users' consent.
- For development purposes, such as the optimization of the app by 2zero GmbH.
The types of data processed include in particular:
- Sociodemographic information (e.g., age, gender, postal code, income)
- Activities and participation (e.g., completed challenges, participation in actions, distances traveled)
- Interests and preferences (e.g., through polls, feedback)
In the event of technical errors or non-fulfillment of obligations by partner companies, 2zero assumes no responsibility for unredeemed rewards or prizes. 2zero will attempt to resolve the issue with the partner company but assumes no guarantee for the successful receipt of the reward.
If a partner company is unable to provide a promised reward or prize, it is the sole responsibility of that company to offer an equivalent alternative. 2zero assumes no substitute obligation for ungranted prizes or discounts.
Registration with 2zero
Creating a user account with 2zero can be done anonymously, with a Google account, an Apple ID, or a valid email address.
Registration with an email address is carried out via a double opt-in process. After entering your email address, you must click on a confirmation link sent to that address or enter the provided authentication code to ensure that your email address is not being misused.
The email address used for registration may optionally be used for prize notifications by 2zero or the contractual partner of the respective community. Detailed information can be found below.
The 2zero app can also be used anonymously, i.e., without creating a user account. Please note that in this case we cannot restore your data if you delete the app from your device. Without registration, we also cannot fully guarantee your data subject rights. Some features of the app, such as participation in prize draws, may also be limited in this case.
Registration with 2zeroProcessing of personal data for rewards and prize draws
If you participate in sweepstakes or discount campaigns from partner companies as part of our initiatives with partner companies, we process your personal data to ensure that you can receive your reward. For this purpose, we particularly collect and process:
- Your user ID to assign your points and your participation in the reward system.
- Your email address, if it is necessary to contact you as a winner or to send you a prize or discount code.
The legal basis for this processing is your consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time. If you withdraw your consent, you may no longer be able to participate in certain sweepstakes or discount campaigns.
Processing of personal data for rewards and prize drawsPublic areas & statistics
Your profile, including profile picture, name, statistics, and awards, will be displayed within your community and other public areas, such as public leaderboards, unless you disable this setting in your profile settings. You have the option to hide your profile, making it no longer publicly visible.
The overall results of your community as well as the results of initiatives (e.g., CO₂ saved, completed challenges, footprint) are published in an aggregated form, so that no conclusions can be drawn about you or your account—especially if you have hidden your profile.
We may aggregate all information collected through our websites, the app, or through interactions with our campaigns (including personal data) for statistical and analytical purposes. Aggregated or anonymized reports on community activities or initiatives may be published on our website, in publications, or used for promotional purposes, such as in reports or case studies highlighting the success of our initiatives.
Disclaimer for Partner Promotions
As part of sweepstakes and discount promotions, 2zero acts solely as an intermediary between users and partner companies. 2zero ensures that partner companies receive all the necessary information to provide the rewards, but is not responsible for:
- The actual provision of the reward or prize by the partner company.
- Any changes, delays, or failures in delivering the reward by the partner company.
- The redemption of discount or prize codes that cannot be used due to an error by the partner company.
- The further processing of the transferred data by the partner company after the sweepstake has concluded.
If a partner company fails to fulfill its obligations, 2zero reserves the right to remove the reward or sweepstake from the campaign, and no claims can be made against 2zero as a result.
Issue Resolution & Escalation:
- Users experiencing problems with redemption are encouraged to contact the partner company directly first.
- In the case of repeated issues or complaints, 2zero may exclude the affected partner company from future campaigns.
- 2zero offers support in resolving problems, but cannot guarantee a resolution.
Deletion of my data
You can delete your user account at any time via the settings in the app. Please note that once your account is deleted, the data cannot be restored. If you only delete the app but not your user profile, you can log in again later using your previous login credentials.
Legal basis for data processing
We process personal data if the following legal bases apply:
Consent
(Art. 6 Abs. 1 lit. a DSGVO)
If the processing of personal data is required and there is no other legal basis, we obtain the consent of the data subject. This applies, for example, if you ask us to send you marketing information (e.g., newsletter updates) or if you consent to the use of cookies or similar technologies. You may withdraw your consent at any time.Contract performance and pre-contractual measures (Art. 6 para. 1 lit. b GDPR)
Contract fulfillment and pre-contractual measures
(Art. 6 Abs. 1 lit. b DSGVO)
If processing is necessary for the performance of a contract, such as when using the 2zero app, we process your data on the basis of contract performance. This includes, among other things, the management of your account access, the provision of our products and services, the processing of orders, and communication regarding services.
Compliance with legal obligations
(Art. 6 Abs. 1 lit. c DSGVO)
To fulfill a legal obligation to which we are subject under applicable law, we process personal data based on statutory requirements. This is required, for example, for compliance with tax regulations.
Legitimate interests
(Art. 6 Abs. 1 lit. f DSGVO)
We process personal data based on our legitimate interests, unless fundamental rights and freedoms of the data subject outweigh those interests. Legitimate interests include, in particular, the improvement and personalization of your experience with our websites and services, ensuring information security, enforcement of our legal claims, and compliance with legal regulations. Our legitimate interest also includes providing information about the purposes of the 2zero app and contacting users with further offers. You may object to the use of your data for advertising purposes at any time.
How 2zero uses and protects your personal data
Duration and retention of stored data
The storage of your data is linked to your 2zero account.
You can request the deletion of your data at any time by deleting your user account.
Please note that it is not possible to restore your data after deletion of your account.
If you delete the app alone, but not your user, it is possible to log in again on a device using the previously used login data.
In the event that you revoke your consent to the processing of your personal data, we will delete your personal data, provided that statutory retention periods or legal considerations do not prevent deletion.
For the analysis and transmission of challenge statistics as well as the CO₂ footprint (community, teams), the information you provide will be anonymized and aggregated so that a personal evaluation is no longer possible.
Let me know if you'd like a version with both languages side by side!
Sharing your information
2zero engages a number of service providers and partners to manage or support certain aspects of our business operations. 2zero may share your personal data with the third parties listed below for the purposes described in this privacy policy or with your consent. We currently use the following service providers:
- Google Cloud Platform – Cloud data hosting
- Firebase – App stability monitoring and data processing
- Google Analytics – Analysis of user interactions
- Vercel Hosting – Hosting of the cloud infrastructure
- Brevo (Sendinblue) – Email delivery service
- Resend – Sending of transactional emails
- PostHog – User behavior analysis
- Knock – Notification management
- Ghost Newsletter – Newsletter service
- Typeform – Collection of user feedback
- HubSpot – CRM database (data processor)
- Notion – Internal project management and documentation tool
- Slack – Internal communication tool
- Google Workspace – Internal collaboration tools
- Fillout – Form creation, data collection
All service providers used are bound to confidentiality and data protection. This includes hosting providers, technical service providers, and consulting companies. We have concluded data protection agreements with these business partners to ensure an appropriate level of data protection. Disclosure of personal data to authorities only occurs if overriding legal provisions apply.
Forwarding the e-mail address for prize notification
According to our privacy policy, it is possible that email addresses of the winners of a campaign may be shared with the respective municipality or company. This applies exclusively to app users who have explicitly consented to this practice within the app. This consent allows us to include both individuals and teams in the campaign prizes. The provided data may be used exclusively for the purpose of prize notification; any use for other purposes is prohibited.
Disclosure as part of rewards and prize draws
To ensure that rewards and prizes can be provided to you by our partner companies, it may be necessary to share your email address and the associated prize code with the respective partner company. This transfer occurs exclusively for this purpose and only if you have consented to the data transfer.Legal basis: The transfer is only carried out with your explicit consent (Art. 6 para. 1 lit. a GDPR). If you do not consent to the data transfer, unfortunately, you cannot participate in the corresponding lotteries or discount promotions.The partner company commits to using this information solely for redeeming the reward and to delete it afterward. Any further use or storage of the data by the partner company is not permitted.Important note: If, after the transfer to the partner company, you have questions about the use of your data, please contact the partner company directly. 2zero assumes no liability for the compliance with data protection policies by third parties.
Associated companies
Your personal data, which we collect in accordance with this privacy policy, is shared by 2zero with our affiliated company twigbit technologies GmbH, located in Berlin, Germany, in order to ensure the provision of the website, the delivery of our products and services, the management of your accounts, hosting, IT, security, support, billing, marketing, and communication.
Data processing in third countries
We have configured our server locations within the EU and prefer data processing within the EU in order to ensure the highest data protection standards. In some cases, however, it may be necessary to transfer data to third countries. In such cases, we implement appropriate safeguards to ensure the security of your personal data in accordance with the requirements of the GDPR.
If data processing in a third country is required, it will only take place in compliance with legal requirements. Subject to explicit consent or legal requirements, we only process data in third countries with a recognized level of data protection or contractual obligations through standard contractual clauses of the EU Commission, certifications, or binding corporate rules (see Art. 44 to 49 GDPR).
Communication with 2zero
If you are a registered user of the website and have provided us with your email address, 2zero may occasionally send you emails with important notices regarding security, new features, or updates to keep you informed about developments at 2zero and our products. We limit these emails to a minimum and primarily use our blog for such communications. At the end of each marketing email, you will find an unsubscribe link that allows you to stop receiving them at any time.
If you send us a request (e.g., via a support email or a feedback tool), we reserve the right to publish your request for clarification or support purposes, without disclosing your personal data.
Contacting and rights of data subjects
Responsibility & Contact
The controller for the processing of your personal data in the context of the use of our services and the implementation of challenges is the:
2zero GmbH,
Kreuzbergstr. 29,
10965 Berlin
If you have any questions about data protection, you can contact all responsible parties using the contact details provided or directly at post@2zero.earth.
Rights of data subjects
If you wish to exercise your data protection rights pursuant to Art. 15 to 22 GDPR, you can contact us via email at support@2zero.earth.
You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) or restriction of processing of your personal data. If we process your personal data based on our legitimate interests, you may object to further processing. Whether your objection is successful will be determined through a balancing of interests.
In the case of your consent, processing for contract performance, or within automated procedures, you also have the right to data portability (Art. 20 GDPR).
Regardless of the above-mentioned rights, you also have the right to lodge a complaint with the competent supervisory authority.
Topicality of the privacy policy
We reserve the right to modify the content of this privacy policy at any time, especially in the event of further developments or adjustments to the services used. You can view the current privacy policy on our website at https://www.2zero.earth/datenschutz.
Effective date of this policy: 12.02.2025.