Privacy policy
In this privacy policy, we inform you about the processing of your personal data and your data protection rights when visiting our website, using the 2zero app or communicating with us. Your privacy is important to us. We attach great importance to the privacy-compliant handling of your data and will not use it for purposes other than those stated. To this end, we have taken appropriate technical and organizational measures to ensure that the provisions of applicable data protection law are observed.
General information
General information on data processing on the website, in the Co2 calculator and in the 2zero app
1.1 Persons responsible for data processing
The person responsible for data processing is:
2zero GmbH
Kreuzbergstr. 29, 10965 Berlin
post@2zero.earth
1.2 Contact for questions regarding data protection
If you have any questions regarding data protection, please do not hesitate to contact any of the persons responsible using the contact details provided or directly contact the data protection officer at post@2zero.earth.
1.3 Purposes and legal basis
In other respects, we process personal data when the following legal bases exist:
If the processing of personal data is necessary and there is no legal basis for such processing, we obtain the consent of the data subject pursuant to Art. 6 (1) lit a DSGVO.
If the processing is necessary for the fulfillment of a contractual obligation as well as for the implementation of corresponding pre-contractual measures - such as the use of the 2zero app, we process the data based on the fulfillment of the contract on the basis of Art. 6 para. 1 lit. b DSGVO.
In order to fulfill a legal obligation to which we are subject pursuant to any applicable law of a country in which the GDPR applies in whole or in part, we process data on the basis of legal obligations pursuant to Art. 6 (1) lit. c GDPR.
According to Art. 6 (1) lit. f DSGVO, we may process data within the scope of our legitimate interest or to protect the legitimate interests of third parties, unless the fundamental freedoms and rights and interests of the data subject prevail. Legitimate interests are in particular the provision of our website for information about our products and services, ensuring information security and the enforcement of our own legal claims and compliance with other legal provisions.
Our legitimate interest also includes sending users of the 2zero app information related to the purposes of the app and thus addressing them to further offers. Recipients of advertising material have the opportunity to object to the use of their data for advertising purposes at any time.
1.4 Categories of recipients of personal data
1.4.1 External receivers
We use service companies that are bound to confidentiality and data protection. These include hosting providers, service companies for technical support or software products used, as well as independent consulting companies. We have concluded corresponding data protection agreements with all business partners to ensure an appropriate level of data protection. Personal data is only passed on to authorities in the event of overriding legal requirements. A transfer of data to third countries only takes place under the conditions of Art. 44 et seq. DSGVO.
1.5 Storage duration
Personal data is processed by us for the purpose of smooth connection establishment and system security. The connection data is generally stored for no longer than seven days and automatically deleted. If the website or the 2zero app are misused, log data may be retained for further clarification of the incident for evidentiary purposes.
1.6 Data subject rights
You can exercise your right to information, correction and deletion of data at any time. Simply contact us in the ways described above. If you wish data to be deleted but we are still legally obliged to retain it, access to your data will be restricted (blocked). The same applies in the event of an objection. You can exercise your right to data portability insofar as the technical possibilities are available to the recipient and to us.
You have the possibility to file a complaint with a data protection supervisory authority at any time.
2. data processing on the website
2.1 Purposes and legal bases of data processing on the website
The purpose of data processing on this website is to provide information about activities and services of the company 2zero.
When visiting our website, personal data is only processed to the extent technically necessary. Our website collects a number of general data and information of the website visitor with each call. This general data and information is stored in the log files of the website server. The legal basis for the data processing is Art. 6 para. 1 lit. f DSGVO. The following can be collected
- browser types and versions used,
- the operating system used by the accessing system,
- the website from which an accessing system arrives at our website (so-called referrer),
- the sub-websites that are accessed via an accessing system on our website,
- the date and time of an access to the website,
- an Internet Protocol (IP) address,
- the Internet service provider of the accessing system and
- other similar data and information that serve to avert danger in the event of attacks on our information technology systems.
2.2 Use of cookies
This website uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website will be used to evaluate your visit behavior on the website and to improve our information offer. The legal basis for the data processing is Art. 6 para. 1 lit. f DSGVO (legitimate interest). The information obtained is only used for internal statistical evaluation and is not passed on to third parties. The cookies are deleted after the end of the session. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. The data collection is anonymized; the collected data cannot be related to your person.
If cookies that are not necessary for the operation of the website are used, we ask for your consent in advance; the legal basis for data processing is Art. 6 para. 1 lit. a DSGVO (consent).
2.3 Contact form
If you write to us via our contact form, your data from the form will be processed to handle your request. The legal basis for the transmission to us is consent according to Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. The data will then be deleted. If no retention obligation arises from your request (e.g. in the case of an order), the data will be deleted after 2 years. Your data will be forwarded internally to the responsible contact person for processing your request.
2zero is committed to protecting and respecting your privacy. We will only use your personal information to manage your account and provide you with products and services relevant to you. You can unsubscribe from all email notifications at any time by using the unsubscribe feature in the mail.
2.4 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The legal basis for this processing is your consent according to Art. 6 para. 1 lit. a DSGVO.
Google Analytics also uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. It is not excluded that the information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. The transmission of personal data to the USA was judged by the European Court of Justice to be fundamentally unsafe without further security measures, as it cannot be ruled out that US security authorities may gain access to this data. IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. A data transfer to the USA only takes place if the requirements of Art. 44 et seq. DSGVO are fulfilled. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. The user data is deleted after 24 months.
You can revoke your consent at any time with effect for the future and prevent the use of data by Google by downloading and activating the available browser plugin: http://tools.google.com/dlpage/gaoptout?hl=de.
You can also prevent the storage of cookies by selecting the appropriate settings on your browser software; however, please note that if you do this, you may not be able to use the full functionality of this website.
For more information about Google's privacy practices, please visit https://policies.google.com/privacy.
2.5 Encryption
This website uses "Hypertext Transfer Protocol Secure" (https). The connection between your browser and our server is encrypted.
3. data processing in the 2zero app and CO2 calculator.
3.1 Login to the 2zero app
Creating a user account in the 2zero app is possible with a Google account, Apple ID or a valid email address.
- Apple Single Sign-On: Authentication service from the service provider Apple Inc, Infinite Loop, Cupertino, CA 95014, USA. Privacy information at https://www.apple.com/legal/privacy/de-ww/
- Google Single Sign-On: Authentication service provided by the service provider Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy information at https://policies.google.com/privacy
- Registration with a valid email address is done via a double opt-in process. After entering the e-mail address, you must click on a confirmation link via a message sent to this address in order to complete your registration. In this way, we ensure that third parties do not use your e-mail address inappropriately.
- The email address used for registration may be used for prize notifications by 2zero or the contractual partner of the respective community.
The app can also be used anonymously, i.e. without creating a user account. Please note that when using the app without registration, it is not possible to assign your data record and we are therefore unable to restore your data after deleting the app from your end device. In addition, due to the lack of identification of your data record, we cannot fully guarantee your data subject rights. Nevertheless, you can still use the app with all its functions.
3.2 Processing of the carbon footprint data
The processing of personal data is necessary to achieve the app's goal of relating personal actions to the associated CO2 emissions. The processing of the data is carried out for the fulfillment of the user agreement on the basis of Art. 6 para. 1 lit. b DSGVO.
The types of data processed relate to the user you specify. The types of data processed may be:
- Socio-demographic information (e.g., age, gender, zip code, income),
- Economic preferences (e.g., risk attitudes, time preferences),
- Personal attitudes (e.g., toward climate change, the environment).
You can delete your user account independently at any time. Please note that the recovery of data after deletion of the user account is not guaranteed. After deleting your user account, it is necessary to create a new account and enter new data. If you delete the app alone, but not your user profile, a new login on a terminal device is possible in connection with the previously used login data.
3.2.1 Google database infrastructure
The cloud services of the provider Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland are used for data processing. For this purpose, a data protection agreement for order processing has been concluded with Google. A transmission of user data from the Firestore database to third countries does not take place. The storage location of the data is in the data centers available from Google in the EU.
To optimize the user experience and further develop the content of the 2zero app, the Google applications Google Analytics and Firebase Crashlytics are used.
3.2.2 Firebase Crashlytics
For the purpose of optimizing our apps, we use Firebase Crashlytics, a service of Google Ireland Ltd, Google Building Gordon House, Barrow Street, Dublin 4, Ireland. In case of a crash/error in the app, we receive crash reports with anonymized information (manufacturer and operating system of the phone, app state at the time of the crash, installation UUID, crash trace, last log entries). The use is necessary to improve the stability and reliability of our apps. A transmission to the USA to the parent company of Google Ireland Ltd, Google LCC, cannot be excluded when using the service. A data transfer to the USA only takes place if the requirements of Artt. 44 ff. DSGVO are fulfilled. For more information, please see the privacy policy of Firebase Crashlytics: https://firebase.google.com/support/privacy or https://firebase.google.com/support/privacy#data-collection-policies.
The legal basis for sending crash reports is your consent according to Art. 6 (1) lit. a DSGVO. You allow the transmission of crash reports in the app in your settings or are asked before sending the crash report.
For iOS apps, you can give consent in the app's settings or after a crash. For Android apps, you can specify during setup whether you generally agree to send crash notifications to Google and app developers.
You can revoke your consent at any time by adjusting the settings in the iOS apps (Function: Crash reports) or for Android apps (Settings -> Google -> Usage and diagnostics).
3.2.3 Google Analytics
The 2zero app uses Google Analytics, a service of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to analyze user behavior. IP anonymization is activated in the app, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and only shortened there. The consent of the users is obtained, as a transmission of the IP address of the used end device of the user cannot be excluded. The IP address transmitted as part of Google Analytics is not merged with other data from Google. The data is automatically deleted by Google after 24 months.
You can revoke your consent at any time with effect for the future and prevent the use of data by Google for the future by deactivating the sharing of data via the settings in your user profile in the app under "Privacy policy". Even with deactivation, all functions of the app are available to you. Please note that the objection will only have a full effect on future use, as we cannot completely ensure that data transmitted to Google will be completely deleted.
For more information about Google's privacy practices, please visit https://policies.google.com/privacy.
3.3 Use of anonymized data for scientific purposes
When data is exported from the database, the user data is anonymized, so that an evaluation of the data for scientific purposes is not personalized.
3.4 Using anonymized data to evaluate initiatives at the municipal and corporate level
As part of the evaluation and results analysis of initiatives, usage statistics are passed on to the organizers of such initiatives. The data is only provided in anonymized form. No personal data is passed on.
3.5 Forwarding the e-mail address for prize notification by e-mail
In accordance with our privacy policy, it is possible that email addresses of the winners will be passed on to the respective municipality/company. However, this is limited exclusively to those app users who have explicitly consented to this practice in the app by accepting the relevant terms and conditions during registration. This consent allows us to include both individuals and teams who are active in our community and have registered with an email address in our competition processes. It is important to emphasize that the data provided may only be used for the purpose of notifying winners. Any use for other purposes, such as for newsletters or forwarding to third parties, is expressly prohibited.
4. up-to-dateness of the privacy policy
We reserve the right to adapt the content of this privacy policy at any time. This usually occurs in the event of further development or adaptation of the services used. You can view the current data protection declaration on our website at https://www.2zero.earth/datenschutz. Status of this declaration: 19.06.2023.
