Legal

Privacy policy

This English version is provided for convenience. Only the German version is legally binding.

2K Plan GmbH takes the protection of your personal data seriously. We treat your data confidentially and in accordance with the statutory data protection regulations (GDPR, BDSG, TDDDG) and this privacy policy.

1. Controller

2K Plan GmbH
Kaltes Feld 36a · 08468 Heinsdorfergrund
Phone: +49 3765 382 982-0
Email: info@2k-plan.de

2. Server log files

When you access our website, technically necessary data is recorded in server log files: IP address, time of the request, requested address, status code, amount of data transferred, browser identifier (user agent) and referrer URL. The data is used to deliver the page and to detect and defend against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable delivery). Retention period: 7 days. The data is not combined with other data sources.

3. Contact form

If you send us an enquiry via the contact form, the details you provide (name, company, email, telephone, project context) are stored for the purpose of processing the enquiry and for any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) GDPR (legitimate interest in efficient processing).

To protect against automated spam requests, a time-limited, non-personal verification value is created when the form is filled in; your IP address is used briefly (for no more than 15 minutes, in memory only) to limit the number of requests per sender. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against misuse). After submitting, you will receive an automatic confirmation of receipt at the email address provided.

We do not pass on this data without your consent. You may withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). The data is stored for the duration of processing your enquiry; once completed, the data is deleted unless commercial retention obligations apply.

For the technical sending of emails we use the service provider Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend processes the data submitted via the form on our behalf as a processor; a data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider. Emails are sent via the provider's European infrastructure (data centres within the EU); your data are therefore normally processed within the EU. As the provider is a US company, access from a third country (USA) cannot be entirely ruled out; in this case, the transfer is safeguarded by the standard contractual clauses provided by the European Commission (Art. 46(2)(c) GDPR). The legal basis for using this service is our legitimate interest in reliable and traceable delivery of your enquiry (Art. 6(1)(f) GDPR).

4. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. It is delivered from a data centre in Falkenstein (Germany); all data transmission is encrypted (TLS). No data are transferred to a third country. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Hetzner Online GmbH.

5. Fonts

We use the fonts Geist Sans and Geist Mono. They are served exclusively from our own web server. No connection is made to Google Fonts or any other third-party provider; your IP address is not transmitted to third parties. The same applies to all other style and script files of the website — no external content delivery networks are used.

6. Cookies

In its current state, this website does not set any cookies that require consent under Section 25 TDDDG. Technically necessary storage (e.g. for delivering the website) takes place without cookies.

7. Your rights

You have the right at any time to:

Please send any requests to the contact details given in section 1.

8. Currency of this policy

This policy is current as of October 2026. We reserve the right to amend this privacy policy if technical circumstances or the legal situation change.