Privacy Policy

This privacy policy explains which personal data we process when you visit our website 2b-local.com, for what purposes, on what legal basis, and what rights you have. A separate privacy policy applies to the 2B LOCAL App, which you can find in the app.

1. Controller

ROCKS & BIRDS MEDIA GmbH
Factory Berlin
Rheinsberger Straße 76/77
10115 Berlin, Germany
Phone: +49 69 17498610
E-mail: legal@2b-local.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2. General information

Legal bases

We only process personal data if there is a legal basis for doing so. Depending on the processing, this is:

  • your consent (Art. 6 (1) lit. a GDPR); where information is stored on or read from your device, additionally Section 25 (1) of the German Telecommunications Digital Services Data Protection Act (TDDDG),
  • the performance of a contract or pre-contractual measures (Art. 6 (1) lit. b GDPR),
  • compliance with a legal obligation (Art. 6 (1) lit. c GDPR),
  • our legitimate interest (Art. 6 (1) lit. f GDPR); storage on your device that is strictly necessary for the service you requested is based on Section 25 (2) no. 2 TDDDG.

The relevant legal basis is stated for each processing operation below.

Storage period

We only store personal data for as long as necessary for the respective purpose, as long as you have not withdrawn your consent, or as long as statutory retention periods (e.g. tax and commercial law periods of up to ten years) require longer storage. The data is deleted afterwards.

Recipients and data processing

We use service providers to operate the website (e.g. hosting). Where they process data on our behalf, we have concluded data processing agreements with them in accordance with Art. 28 GDPR. Data is only passed on to other third parties if a legal basis permits this.

Transfers to third countries

Some of the services we use are based in the USA or may transfer data there. Such transfers are based on an adequacy decision of the EU Commission, in particular the EU-US Data Privacy Framework (DPF) where the provider is certified under it, or on the EU Commission’s standard contractual clauses (Art. 46 (2) lit. c GDPR). Details are provided for each service.

SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock symbol in your browser’s address bar.

3. Your rights

You have the right at any time to:

  • access the data we store about you (Art. 15 GDPR),
  • rectification of inaccurate data (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • withdraw any consent you have given with effect for the future (Art. 7 (3) GDPR), e.g. via the privacy settings of our cookie banner or by e-mail,
  • lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information; you may also contact the authority in your place of residence.

For all requests, simply send an e-mail to legal@2b-local.com.

Right to object (Art. 21 GDPR)

Where we process data on the basis of our legitimate interest (Art. 6 (1) lit. f GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If your data is processed for direct marketing purposes, you may object to this at any time; this also applies to any related profiling. Your data will then no longer be used for direct marketing.

4. Hosting and server log files

Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you access the website, the server automatically records information transmitted by your browser (server log files): IP address, date and time of access, page accessed, referrer URL, browser type and version, and operating system.

This data is technically necessary to deliver the website and to ensure its security and stability. The legal basis is our legitimate interest (Art. 6 (1) lit. f GDPR). We have concluded a data processing agreement with IONOS. IONOS processes the data on servers in Germany or the EU.

5. Cookies and consent management

Cookies

Cookies are small text files stored on your device. We use technically necessary cookies on the basis of Section 25 (2) no. 2 TDDDG and Art. 6 (1) lit. f GDPR. We only use all other cookies and similar technologies with your consent (Section 25 (1) TDDDG, Art. 6 (1) lit. a GDPR). You can see which services these are in the cookie banner and in the sections below.

Real Cookie Banner

To obtain and manage your consent, we use the WordPress plugin “Real Cookie Banner” by devowl.io GmbH, Tannet 12, 94539 Grafling, Germany. The plugin is installed on our server; no data is transmitted to devowl.io. A pseudonymous identifier, the time and the content of your decision are stored so that we can prove it and take it into account on future visits. The legal basis is our legal obligation to document consent (Art. 6 (1) lit. c GDPR in conjunction with Art. 7 (1) GDPR). You can change or withdraw your settings at any time via the “Privacy settings” link.

Language setting (Polylang)

Our website is multilingual. The Polylang plugin stores the language you have selected in a cookie so that content is displayed in that language. The plugin runs on our server; no data is transmitted to third parties. The legal basis is Section 25 (2) no. 2 TDDDG and our legitimate interest in a user-friendly presentation (Art. 6 (1) lit. f GDPR).

6. Contact and forms

Contact by e-mail, phone or contact form

When you contact us, we process the information you provide (e.g. name, e-mail address, content of your request) in order to handle your request. The legal basis is Art. 6 (1) lit. b GDPR if your request relates to a contract, otherwise our legitimate interest in handling enquiries (Art. 6 (1) lit. f GDPR). We delete the data once your request has been fully processed, unless statutory retention obligations apply.

Tally

For some forms (e.g. sign-ups), we use the service Tally provided by Tally BV, Sint-Pietersnieuwstraat 11, 9000 Ghent, Belgium. When a Tally form is loaded, a connection to Tally’s servers is established and technical data such as your IP address is transmitted. The information you enter in the form is processed by Tally on our behalf and stored on servers in the EU.

Tally forms are only loaded once you have given your consent (Art. 6 (1) lit. a GDPR, Section 25 (1) TDDDG). You can withdraw your consent at any time. More information: https://tally.so/help/privacy-policy

7. Analytics

IONOS WebAnalytics

We use the statistics service IONOS WebAnalytics provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, to statistically evaluate the use of our website, e.g. pages viewed, time spent, referrer, browser, operating system and device type. IONOS WebAnalytics does not set cookies and only stores IP addresses in anonymised form, so that no conclusions can be drawn about you as a person. The legal basis is our legitimate interest in optimising our offering (Art. 6 (1) lit. f GDPR).

Mixpanel

With your consent, we use the analytics service Mixpanel provided by Mixpanel, Inc., San Francisco, USA. Mixpanel helps us understand how visitors use our website, e.g. which pages are viewed and which buttons are clicked. Device and browser information, approximate region and a pseudonymous identifier, among other things, are processed. The data is stored in Mixpanel’s EU data center.

Mixpanel is certified under the EU-US Data Privacy Framework; where data reaches the USA, the transfer is based on this framework. Mixpanel’s representative in the EU is MIXPANEL S.L., Avenida Diagonal 442, 08037 Barcelona, Spain.

The legal basis is your consent (Art. 6 (1) lit. a GDPR, Section 25 (1) TDDDG), which you can withdraw at any time via the privacy settings. More information: https://mixpanel.com/legal/privacy-policy

8. Newsletter

If you subscribe to our newsletter, we process your e-mail address and any other voluntary information in order to send you the newsletter. We use Mailchimp, provided by The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. We use the double opt-in procedure: after signing up, you will receive an e-mail in which you confirm your subscription.

The legal basis is your consent (Art. 6 (1) lit. a GDPR). You can unsubscribe at any time via the link in every newsletter. After you unsubscribe, we delete your data from the mailing list; your e-mail address may be stored in a blocklist to prevent further mailings (Art. 6 (1) lit. f GDPR).

Mailchimp is certified under the EU-US Data Privacy Framework; we have also concluded standard contractual clauses. More information: https://mailchimp.com/legal/privacy/

9. Embedded content and fonts

YouTube

We embed videos from YouTube on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the extended privacy mode. Videos are only loaded once you have given your consent. A connection to YouTube’s servers is then established; YouTube may set cookies and collect information about your usage behaviour, also in connection with your Google account.

The legal basis is your consent (Art. 6 (1) lit. a GDPR, Section 25 (1) TDDDG). Google is certified under the EU-US Data Privacy Framework. More information: https://policies.google.com/privacy

Google Fonts (local)

Most fonts on our website are stored locally on our server. No connection to Google’s servers is established when these fonts are loaded.

Google Fonts (from Google servers)

With your consent, we load individual fonts directly from the servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your IP address is transmitted to Google in the process. The legal basis is your consent (Art. 6 (1) lit. a GDPR, Section 25 (1) TDDDG). Without your consent, these fonts are not loaded and are replaced by a standard font. Google is certified under the EU-US Data Privacy Framework. More information: https://developers.google.com/fonts/faq/privacy

Font Awesome (local)

We use Font Awesome to display icons. The font is installed locally on our server; no connection to the servers of the provider Fonticons, Inc. is established.

WordPress emojis

To display emojis, WordPress may load graphics from WordPress.org servers (Automattic Inc., USA). Your IP address is transmitted in the process. This only happens with your consent (Art. 6 (1) lit. a GDPR, Section 25 (1) TDDDG).

10. Our social media profiles

We maintain profiles on Facebook, Instagram, TikTok, X, YouTube and Pinterest. On our website, these networks are only included as simple links; data is only transmitted when you click a link and visit the respective network.

When you visit our profiles, the respective operator processes your data, e.g. for statistics and advertising, even if you are not logged in. For the evaluation of page statistics (e.g. Facebook/Instagram Insights), we are partly jointly responsible with the operator (Art. 26 GDPR). The legal basis for our presence is our legitimate interest in communicating with interested parties (Art. 6 (1) lit. f GDPR). You can exercise your rights both against us and against the respective operator.

  • Facebook and Instagram: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland – Privacy Policy
  • TikTok: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland – Privacy Policy
  • X: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland – Privacy Policy
  • YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – Privacy Policy
  • Pinterest: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland – Privacy Policy

11. Changes to this privacy policy

We will update this privacy policy if our website, the services we use or the legal situation change. The version published here applies.

Last updated: October 2026

GDPR Cookie Consent with Real Cookie Banner