Privacy policy

As of October 2026. This is a translation for convenience; the German Datenschutzerklärung is legally binding.

1. Controller

PLAN2X UG (haftungsbeschränkt), Buchenweg 7, 65388 Schlangenbad, Germany
Represented by the managing directors Benjamin Bockmühl and Viviane Althaus
Email: [email protected]

We have not appointed a data protection officer, as there is no legal obligation to do so.

2. In short

This website uses no analytics or tracking tools, no advertising cookies, no social media plugins and no externally loaded content. Fonts and all other files are served from our own server.

3. Hosting and server log files

The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers in the EU. We have a data processing agreement with the host under Art. 28 GDPR.

When you visit the website, the server processes technically necessary data: IP address, date and time, page requested, amount of data transferred, referrer, browser and operating system. This serves the secure and stable operation of the website (Art. 6(1)(f) GDPR). Log files are deleted after 14 days at the latest unless they are needed to investigate a specific security incident.

4. Technically necessary cookies

We only set two technically necessary cookies: a session cookie and a security token that protects the contact form against cross-site request forgery. Both expire after two hours at the latest. The legal basis is § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR; no consent is required.

5. Contact form and email

If you contact us via the form or by email, we process your details (name, email address, role and, optionally, company and message) to answer your request. The legal basis is your consent (Art. 6(1)(a) GDPR) or, for enquiries about a possible collaboration, pre-contractual measures (Art. 6(1)(b) GDPR).

Form requests are not stored permanently; they are sent to us by email. If a request cannot be sent (for example because of invalid input), your entries are kept briefly in your session so you don't have to type them again; they expire after two hours at the latest. We delete your request once it has been fully dealt with, unless statutory retention periods apply. You can withdraw your consent at any time with effect for the future.

6. Partner login

The password from the partner login is neither stored nor logged. The email address is kept briefly in your session so it can be shown in the form again, and expires after two hours at the latest. To limit sign-in attempts, your IP address is processed for one minute.

7. Your rights

You have the right to

• access to your data (Art. 15 GDPR),
• rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
• withdraw consent you have given (Art. 7(3) GDPR).

An informal email to [email protected] is sufficient.

8. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.