Privacy

Server log files

You can visit our web pages without giving any information about yourself.

Every time our website is accessed, usage data is transmitted by your browser to us or to our web host / IT service provider and stored in log data (server log files). This stored data includes, for example, the name of the page requested, the date and time of the request, the IP address, the amount of data transferred and the requesting provider. Processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offering.

Contact

Controller

Get in touch whenever you like. The controller for the data processing is: 2Bros Digital Group Data protection officer Hohenzollernstraße 25 30161 Hannover Germany +49 (0) 511 165 922-0 datenschutz@2bros-group.com

Contacting us by email on your own initiative

If you contact us by email on your own initiative for business purposes, we collect your personal data (name, email address, message text) only to the extent you provide it. The processing serves to handle and answer your enquiry.

Where the contact serves to carry out pre-contractual measures (for example advice on a purchase, preparing a quotation) or concerns a contract already concluded between you and us, this processing takes place on the basis of Art. 6 (1) (b) GDPR.

Where the contact is made for other reasons, this processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in handling and answering your enquiry. In that case you have the right, on grounds relating to your particular situation, to object at any time to processing of your personal data based on Art. 6 (1) (f) GDPR.

We use your email address only to handle your enquiry. Your data is then deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form we collect your personal data (name, email address, message text) only to the extent you provide it. The processing serves the purpose of making contact.

Where the contact serves to carry out pre-contractual measures (for example advice on a purchase, preparing a quotation) or concerns a contract already concluded between you and us, this processing takes place on the basis of Art. 6 (1) (b) GDPR. Where the contact is made for other reasons, this processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in handling and answering your enquiry. In that case you have the right, on grounds relating to your particular situation, to object at any time to processing of your personal data based on Art. 6 (1) (f) GDPR. We use your email address only to handle your enquiry. Your data is then deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

WhatsApp Business

If you contact us for business purposes via WhatsApp, we use WhatsApp Business, provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "WhatsApp"). If you are resident outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).

The processing serves to handle and answer your enquiry. For this purpose we collect and process the mobile number you have registered with WhatsApp, your name if provided, and further data to the extent you provide it. We use a mobile device for the service whose address book contains only data from users who have contacted us via WhatsApp. Personal data is therefore not passed to WhatsApp without you having already consented to that with WhatsApp.

Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA.

There is no adequacy decision by the EU Commission for the USA. The transfer takes place on the basis of, among other things, standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en).

Where the contact serves to carry out pre-contractual measures (for example advice on a purchase, preparing a quotation) or concerns a contract already concluded between you and us, this processing takes place on the basis of Art. 6 (1) (b) GDPR.

Where the contact is made for other reasons, this processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in providing a quick and simple way of getting in touch and in answering your enquiry. In that case you have the right, on grounds relating to your particular situation, to object at any time to processing of your personal data based on Art. 6 (1) (f) GDPR.

We use your personal data only to handle your enquiry. Your data is then deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Further information on the terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service (https://www.whatsapp.com/legal/#terms-of-service) and https://www.whatsapp.com/legal/#privacy-policy (https://www.whatsapp.com/legal/#privacy-policy).

Cookies

Our website uses cookies. Cookies are small text files stored in or by the browser on a user's computer system. When a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be identified uniquely when the website is called up again.

Cookies are stored on your computer. You therefore have full control over their use. By selecting the appropriate technical settings in your browser you can be notified before cookies are set, decide on each one individually, and prevent cookies being stored and the data they contain being transmitted. Cookies already stored can be deleted at any time. Please note, however, that you may then not be able to use all functions of this website in full.

The links below explain how to manage (and disable) cookies in the major browsers:

• Chrome: https://support.google.com/accounts/answer/61416 (https://support.google.com/accounts/answer/61416)
• Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies (https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies)
• Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences)
• Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac (https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac)

Technically necessary cookies

Unless stated otherwise elsewhere in this privacy policy, we use only these technically necessary cookies, for the purpose of making our offering more user-friendly, more effective and more secure. Cookies also allow our systems to recognise your browser after you move between pages and to offer you services. Some functions of our website cannot be provided without cookies. For those it is necessary that the browser is recognised after a change of page.

Cookies or comparable technologies are used on the basis of § 25 (2) TDDDG. Your personal data is processed on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in ensuring the website works optimally and in a user-friendly and effective design of our offering.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

Consent management (Klaro!)

To manage your consent we use the open-source software Klaro!. It runs exclusively on our own servers; no data is transmitted to third parties.

Klaro! allows you to give consent to data processing on the website — in particular to the setting of cookies — and to withdraw it at any time. Until you consent, the services concerned are not loaded.

Your choice is stored in a cookie named "klaro-consent" in your browser (retention 180 days) so that the request does not appear on every page. This cookie contains only your decision per service and is not transmitted to us or to third parties.

The processing takes place to fulfil a legal obligation on the basis of Art. 6 (1) (c) GDPR.

Language selection

This website is available in German and in English. If the language set in your browser differs from the language of the page you are on, we show a one-off notice offering to switch. No automatic redirect takes place.

The only information evaluated is what your browser provides anyway: the language you have set and your device’s time zone. This evaluation happens entirely in your browser. No IP-based location lookup is carried out and no data is transmitted to us or to third parties.

Your decision is stored in your browser’s local storage under the key "2bros:sprachwahl" so that the notice does not appear again. Only the code of the chosen language ("de" or "en") is stored. The entry remains until you clear your browser storage.

Under Section 25(2)(2) TDDDG this storage is strictly necessary in order to provide the service you have expressly requested — displaying the website in the language you chose — and therefore requires no consent.

Analytics

Use of Umami

For audience measurement we use Umami, self-hosted open-source analytics software. It runs on our own servers in Germany; no data is transmitted to third parties.

Umami sets no cookies and uses no cross-device identifier. Only anonymised information about the page view is recorded: the page called up, the referring page, the approximate location at country level, device type, browser and operating system. Your IP address is not stored.

No personal reference is therefore possible. The processing takes place on the basis of our legitimate interest in a statistical evaluation of website use pursuant to Art. 6 (1) (f) GDPR. Consent is not required for this, as no information is stored on or read from your device.

Heatmaps and session recording

With your consent we record how this website is used: mouse movement, clicks, scrolling and window size. From this we produce heatmaps (aggregated click and scroll distributions) and recordings of individual sessions, which we watch to find usability problems and improve the site.

The recording is done with Umami on our own servers in Germany. No data is passed to third parties, and no information is stored on or read from your device — neither cookies nor comparable technologies are used.

Anything you type into form fields is masked before the recording reaches our server. Your name, email address or message therefore never appears in a recording.

The legal basis is your consent under Art. 6(1)(a) GDPR. Without consent the recording is not loaded. You can withdraw your consent at any time with effect for the future by changing your selection in the consent dialogue.

Plug-ins and other services

Google Ads conversion tracking

We run advertisements on Google Ads and use the conversion tracking of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") to measure which enquiries come about through those advertisements.

If you reach this website through one of our advertisements and then send an enquiry through one of our forms, write to us by email or call the number given, that event is transmitted to Google. What is transmitted is that an enquiry took place — not its content. Names, messages and booking details do not reach Google.

Cookies are set in the process (among others "_gcl_au", "_gcl_aw") which allow your click on the advertisement to be attributed to the later enquiry. Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The transfer takes place on the basis of, among other things, standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks (https://policies.google.com/privacy/frameworks).

This processing takes place exclusively with your consent. As long as you have not consented, no Google service is loaded and no connection to Google is established. You can withdraw your consent at any time through the consent management, without affecting the lawfulness of the processing carried out until then.

Cookies or comparable technologies are used on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR; your personal data is processed on the basis of Art. 6 (1) (a) GDPR.

Further information on data protection at Google can be found at https://policies.google.com/privacy (https://policies.google.com/privacy).

Use of Google Tag Manager

We use Google Tag Manager, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"), on our website.

This application manages JavaScript tags and HTML tags used in particular to implement tracking and analytics tools. The processing serves the purpose of designing and optimising our website to meet demand.

Google Tag Manager itself neither stores cookies nor processes personal data. It does, however, allow further tags to be triggered which may collect and process personal data.

Further information on the terms of use and data protection can be found here (https://www.google.com/intl/en/tagmanager/use-policy.html).

Data subject rights and retention

Retention period

The data is stored taking statutory retention periods into account and is then deleted once those periods expire, unless you have consented to further processing and use.

Rights of the data subject

Where the statutory conditions are met, you have the following rights under Art. 15 to 20 GDPR: the right of access, to rectification, to erasure, to restriction of processing and to data portability.

You also have a right to object under Art. 21 (1) GDPR to processing based on Art. 6 (1) (f) GDPR, and to processing for the purpose of direct marketing.

Right to lodge a complaint with a supervisory authority

Under Art. 77 GDPR you have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is unlawful.

You can lodge a complaint with, among others, the supervisory authority responsible for us, whose contact details are:

Landesbeauftragte für den Datenschutz Niedersachsen Prinzenstraße 5 30159 Hannover Germany Phone: +49 511 1204500 Fax: +49 511 1204599 Email: poststelle@lfd.niedersachsen.de

Right to object

Where the personal data processing described here is based on our legitimate interest under Art. 6 (1) (f) GDPR, you have the right, on grounds relating to your particular situation, to object to that processing at any time with effect for the future.

Following an objection, processing of the data concerned will stop unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to establish, exercise or defend legal claims.