Take the Planet2050 survey - Your view on carbon as an asset class - plus a prize draw
Take the Planet2050 survey - Your view on carbon as an asset class - plus a prize draw
We take the protection of your personal data seriously. This privacy policy explains which personal data we collect when you visit our website www.planet2050.earth, subscribe to our newsletter, take part in one of our surveys or contact us; for which purposes we use it; on which legal basis; how long we store it; and which rights you have.
Terms such as "personal data", "processing", "controller" and "processor" have the meaning given to them in Art. 4 GDPR.
The controller responsible for the processing of personal data described in this privacy policy within the meaning of Art. 4(7) GDPR is:
Represented by: Lucas Zaehringer
Email: hello@planet2050.earth
Website: https://planet2050.earth/
If you have any questions about the processing of your personal data, or wish to exercise any of the rights described in Section 12, please contact us at hello@planet2050.earth.
We process personal data only where a legal basis permits it. Depending on the situation, we rely on the following:
Art. 6(1)(a) GDPR - your consent (e.g. newsletter, surveys, non-essential cookies);
Art. 6(1)(b) GDPR - performance of a contract or pre-contractual steps taken at your request;
Art. 6(1)(c) GDPR - compliance with a legal obligation to which we are subject;
Art. 6(1)(f) GDPR - our legitimate interests or those of a third party, where your interests and fundamental rights do not override them.
Where we rely on legitimate interests, we state the relevant interest at the point in question.
You are under no statutory or contractual obligation to provide us with personal data. However, without the information marked as required in the respective form we may be unable to answer your enquiry, send you our newsletter or process your survey response.
We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of Art. 22 GDPR.
Where we analyse how you use our website or evaluate your survey responses - the processing described in Sections 7, 9.2, 9.4, 9.6 and 9.7 - we do so only on the basis of your consent. No automated decisions are taken about you on that basis, and the analysis is not used to assess or score you as an individual.
Our website is not directed at children.
Under Art. 8 GDPR, where information society services are offered directly to a child, processing based on the child's own consent is lawful only from the age set by the applicable national law. The GDPR sets that age at 16 years, and permits Member States to lower it to not less than 13. Cyprus, where we are established, has set the age at 14 years (Section 8(1) of Law 125(I)/2018); other Member States apply ages between 13 and 16.
Below the applicable age, processing is lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility. We do not knowingly collect personal data from children below the applicable age. If you become aware that a child has provided us with personal data, please contact us and we will delete it.
When you visit our website, the browser on your device automatically transmits information to our server. This information is temporarily stored in a log file. The following data is collected without any action on your part:
IP address of the requesting device;
date and time of the request;
name and URL of the file retrieved;
the website from which the request originates (referrer URL);
browser type and version and, where technically identifiable, the operating system of your device and the name of your access provider.
We process this data for the following purposes:
establishing a stable connection to the website;
ensuring convenient use of our website;
evaluating system security and stability;
detecting, limiting and investigating attacks and misuse;
other administrative purposes.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes listed above, in particular the need to operate our website securely and reliably. We have no interest in identifying you from this data and do not merge it with other data sources.
Storage period: log data is deleted after 7 days, unless a longer period is required in an individual case to investigate a specific security incident, in which case the relevant log entries are retained until the incident has been resolved.
Our website is hosted on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany ("Hetzner"). The server is located in Germany. All data described in Section 3.1, and any other data transmitted when you use our website, is processed on this server.
Hetzner processes this data on our behalf as our processor. We have concluded a data processing agreement with Hetzner in accordance with Art. 28 GDPR, under which Hetzner may process your data only on our documented instructions and not for its own purposes. The legal basis for the underlying processing is the one stated in Section 3.1.
Our domain is registered with STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany ("STRATO"), which also operates the name servers for our domain. When your browser resolves our domain name, your IP address is transmitted to and processed by STRATO for the purpose of directing your request to our server.
This processing is necessary in order to make our website reachable; the legal basis is Art. 6(1)(f) GDPR and our legitimate interest lies in operating our domain. STRATO acts as our processor under a data processing agreement in accordance with Art. 28 GDPR, is established in Germany and processes this data within the European Union.
Our website is built with Statamic, a flat-file content management system installed and operated on our own server at Hetzner. The content management system runs entirely within our own hosting environment; no visitor data is transmitted to the software vendor as part of normal website operation.
You can contact us using the contact form on our website or by writing to hello@planet2050.earth. A valid email address is required so that we know who has contacted us and can reply. Any further information is provided voluntarily.
We process the data you send us solely in order to handle your enquiry and any follow-up questions. The legal basis is:
Art. 6(1)(b) GDPR, where your enquiry relates to the conclusion or performance of a contract or to pre-contractual steps taken at your request;
Art. 6(1)(f) GDPR in all other cases, based on our legitimate interest in responding effectively to enquiries addressed to us;
Art. 6(1)(a) GDPR for any additional information you choose to provide that is not necessary to answer your enquiry.
Submissions made through the contact form are stored on our own server at Hetzner (see Section 3.2) and forwarded to our business mailbox. Emails you send us - whether via the contact form or directly - are received and stored using Google Workspace, our business email provider (see Section 9.3).
Storage period: we delete your enquiry once it has been dealt with conclusively and there is no reason to assume that the matter needs to be revisited. Where business correspondence is subject to statutory retention obligations under the company or tax law applicable to us, we retain it for the period required by those obligations and restrict its processing to that purpose.
If you have expressly consented, we will use your email address to send you our newsletter on a regular basis. Providing an email address is all that is required to subscribe.
Consent and documentation of consent
You can subscribe to our newsletter through the sign-up form on our website or through one of our other forms. In each case, you must actively opt in to receiving the newsletter before we add you to our distribution list; your consent to receive marketing communications is always sought separately from any other request you may be making at the same time.
We log the consent you give, the time at which it was given and the form through which it was given, in order to be able to demonstrate your consent as required by Art. 7(1) GDPR.
Performance measurement
Our newsletters contain a tracking pixel and individualised links. These allow us to see whether and when a newsletter was opened and which links were clicked, and to link this information to your email address. We use this data in aggregate to measure and improve the performance of our newsletter. We inform you of this performance measurement when you subscribe, and the consent you give covers it.
The legal basis for sending the newsletter and for this performance measurement is your consent under Art. 6(1)(a) GDPR and, as regards the storage of and access to information on your device, the national provisions implementing Art. 5(3) of Directive 2002/58/EC (in Germany, Sec. 25(1) TDDDG).
Withdrawal and deletion
You can unsubscribe at any time, for example via the "Unsubscribe" link at the end of every newsletter, or by sending an email to hello@planet2050.earth. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
Storage period: we store your email address for as long as you are subscribed. After you unsubscribe, we remove it from the distribution list. Two separate records remain, and they have different lifespans.
Your address is added to an internal suppression list. We keep this entry indefinitely, because deleting it would allow your address to be added to the distribution list again and would defeat the purpose of your withdrawal. The suppression list serves one purpose only - ensuring that you receive no further mailings from us - and is not used to contact you or for any other processing. The legal basis is Art. 6(1)(c) GDPR, in order to give effect to your withdrawal or objection in accordance with Art. 7(3) and Art. 21(3) GDPR.
Separately, we retain the record of your consent and its withdrawal for three years after the end of the year in which the withdrawal took place, so that we are able to demonstrate compliance if a claim is brought. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the defence of legal claims, alongside our accountability obligation under Art. 5(2) and Art. 7(1) GDPR.
We use Brevo, an email marketing platform, to manage and send our newsletter (see Section 9.8).
We use cookies and comparable technologies (such as local storage and pixels) on our website. Cookies are small files that your browser automatically creates and stores on your device when you visit our site. They store information relating to the specific device used; this does not mean that we thereby obtain direct knowledge of your identity.
Session cookies are stored only for the duration of your browser session and are generally deleted automatically when you leave our website. Persistent cookies remain on your device for a defined period.
Technically necessary cookies
These cookies are required for the website to function and to be provided securely. Storing and accessing them does not require your consent under the national provisions implementing Art. 5(3) of Directive 2002/58/EC (in Germany, Sec. 25(2) no. 2 TDDDG). The subsequent processing of the data is based on Art. 6(1)(f) GDPR; our legitimate interest lies in a functional, secure website.
Non-essential cookies
Analytics and user-behaviour cookies, and cookies set by embedded third-party content (in particular Google Analytics 4, Hotjar and embedded YouTube videos, see Section 9), are set only with your prior, express and informed consent pursuant to Art. 6(1)(a) GDPR and the national provisions implementing Art. 5(3) of Directive 2002/58/EC (in Germany, Sec. 25(1) TDDDG).
When you first visit our website, a consent banner provided by Cookiebot is displayed. It allows you to accept or reject each category of non-essential cookies individually, and to reject all non-essential cookies as easily as you can accept them. You can change or withdraw your selection at any time with effect for the future at https://planet2050.earth/cookies. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Your consent is valid for 12 months, after which we ask for it again.
Most browsers accept cookies automatically. You can, however, configure your browser to refuse cookies or to notify you before a new cookie is set. Disabling cookies entirely may mean that you cannot use all the features of our website.
We occasionally invite people to take part in surveys, for example to understand investment preferences. Invitations may be issued on our website, by email, through our newsletter, at events, or through partners and other channels. Participation is always voluntary. If you choose to take part, we collect the information you provide, such as your investment preferences and, where you provide them, your contact details.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, which you give by submitting the survey. This applies regardless of the channel through which you received the invitation. You may withdraw your consent at any time with effect for the future by contacting us; in that case we will delete the data collected via the survey unless we are required to retain it for legal reasons.
Where we invite you to take part in a survey using contact details that we received from a partner or another third party rather than from you, we will tell you at the latest when we first contact you where we obtained your details, which categories of data we hold and for what purpose we are using them, as required by Art. 14 GDPR.
Storage period: survey responses are deleted or irreversibly anonymised no later than 24 months after collection, or earlier once the purpose of the survey has been achieved. Anonymised, aggregated results may be retained indefinitely, as they no longer constitute personal data.
We use Tally, a third-party form and survey tool, to conduct these surveys (see Section 9.7).
As a general rule, we do not sell or rent your personal data, and we do not share it with third parties for their own marketing or commercial purposes. We disclose your personal data to third parties only in the following limited circumstances:
you have given your express consent in accordance with Art. 6(1)(a) GDPR;
you have intentionally chosen to share your information with a named third party - for example by opting in on a co-branded survey, a joint event or a promotional offer where the partner is clearly identified;
disclosure is necessary under Art. 6(1)(f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest in your data not being disclosed;
we are subject to a legal obligation to disclose the data under Art. 6(1)(c) GDPR; or
disclosure is legally permissible and necessary for the performance of a contract with you under Art. 6(1)(b) GDPR.
In addition, we engage the following external service providers as processors for technical and organisational purposes:
website hosting: Hetzner Online GmbH;
domain registration and DNS: STRATO GmbH;
tag management: Google Tag Manager;
consent management: Cookiebot (Usercentrics A/S);
web analytics and user-behaviour analysis: Google Analytics 4, Hotjar;
internal analytics reporting: Google Looker Studio and Google Sheets;
survey collection: Tally;
business email, calendar, file storage and collaboration: Google Workspace;
newsletter and transactional email: Brevo.
These providers may access your personal data only to the extent necessary to perform their services on our behalf. We have concluded data processing agreements with each of them in accordance with Art. 28 GDPR, obliging them to process your data solely on our documented instructions and in compliance with the GDPR.
Separately from the processors listed above, some pages on our website embed video content hosted by YouTube. YouTube does not act as our processor: it processes the data described in Section 9.9 as an independent controller for its own purposes.
When you visit our website, your browsing behaviour may be analysed statistically. This is done primarily using the analytics services described below. The analysis is carried out using pseudonymous identifiers: we do not assign the data to a named individual, but the data is not anonymous in the legal sense and remains personal data. You can prevent this analysis at any time by not consenting via our cookie banner, or by withdrawing consent you have already given.
This website uses Google Tag Manager, a tag management system provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Tag Manager allows us to manage and trigger website tags - including our consent banner, Google Analytics 4 and Hotjar - through a single interface.
Google Tag Manager does not itself set cookies on your device and does not collect personal data for its own purposes; it only triggers other tags, which may in turn collect data. Because our consent banner is delivered through Google Tag Manager, the container is loaded when you open a page, before you have made any choice about cookies. Loading the container transmits your IP address to Google, where it is processed at least temporarily in order to deliver the container to your browser. No cookies are set and no analytics data is collected at this point.
The legal basis for loading the container is Art. 6(1)(f) GDPR. Our legitimate interest lies in operating a single, centrally managed mechanism through which our consent banner is delivered and through which all consent-dependent tags are controlled. You have a right to object to this processing under Art. 21(1) GDPR, as described in Section 13.
The tags described in Sections 9.2 and 9.6 are triggered only after you have given your consent. Where a tag is deactivated at domain level, that deactivation applies to all tracking tags implemented via Google Tag Manager.
This website uses Google Analytics 4 ("GA4"), a web analytics service provided by Google Ireland Limited, implemented via Google Tag Manager. GA4 uses cookies and similar technologies to help us analyse how visitors use our website.
GA4 is activated only after you have given your consent via our Cookiebot banner. It is not loaded automatically when you visit our website.
In GA4, IP addresses of visitors from the EU and EEA are collected on European servers and truncated before any onward transfer; Google Analytics does not log or store full IP addresses. Data generated may nevertheless be transmitted to and stored by Google LLC in the United States as part of Google's global infrastructure. See Section 10 on international transfers.
On our behalf, Google uses this information to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website activity and internet usage. We do not use the Google Signals function, so no cross-device tracking based on signed-in Google accounts takes place.
Storage period: user- and event-level data collected via GA4 is retained for 2 months and then deleted automatically. Aggregated reports are not affected by this deletion.
In addition to withdrawing consent, you can prevent Google from collecting and processing the data generated by the cookie by downloading and installing the browser add-on available at https://tools.google.com/dlpage/gaoptout?hl=en. You can also prevent the storage of cookies through your browser settings, although this may mean you cannot use all functions of this website.
We use Google Workspace, provided by Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2, Ireland, for our internal business operations. This includes our business email (Gmail), calendar, file storage and document collaboration (Drive, Docs, Sheets) and video meetings (Meet). Personal data you send us - for example when you email hello@planet2050.earth or complete our contact form (see Section 4) - is transmitted to and stored on Google's servers as part of hosting these services. Where we schedule a meeting or call with you, the associated calendar entry and any contact details it contains are also processed within Google Workspace.
Google acts as our processor for these purposes under a data processing agreement in accordance with Art. 28 GDPR (Google's Cloud Data Processing Addendum). The legal basis for the underlying processing is Art. 6(1)(b) GDPR where it relates to a contract or pre-contractual steps, and otherwise Art. 6(1)(f) GDPR, our legitimate interest being the efficient and secure administration of our business communications.
Further information is available in the Google Cloud Privacy Notice at https://cloud.google.com/terms/cloud-privacy-notice.
For internal reporting we further process the data already collected via GA4 (see Section 9.2) using Google Looker Studio and Google Sheets, both provided by Google Ireland Limited. No additional cookies are set and no data is collected from you beyond what Section 9.2 describes. This further processing is covered by the same consent (Art. 6(1)(a) GDPR). The considerations regarding international transfers in Section 10 apply equally.
We use Cookiebot, a consent management platform provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (company registration number DK34624607). Cookiebot allows us to obtain, manage and document your consent to the use of non-essential cookies and tags.
Cookiebot is deployed through Google Tag Manager (see Section 9.1) and is configured using Google Consent Mode. Until you make a choice, all non-essential consent categories remain set to "denied" and no consent-dependent tag is triggered.
Storing and accessing the Cookiebot cookie on your device is strictly necessary in order to provide the consent function you have requested, and therefore does not itself require your consent (in Germany, Sec. 25(2) no. 2 TDDDG). The subsequent processing of the consent record - a randomly generated consent key, your IP address in truncated form, the date and time of consent, the browser used and the URL - is based on Art. 6(1)(c) GDPR in conjunction with our accountability obligations under Art. 7(1) and Art. 5(2) GDPR. This data is used solely to document your consent and cannot be used to identify you.
The consent record is stored for 12 months, after which your consent is requested again. Further information: https://www.cookiebot.com/en/privacy-policy/.
This website uses Hotjar, a user-behaviour analytics service provided by Hotjar Ltd. (a Contentsquare company), Level 2, St Julians Business Centre, 3 Elia Zammit Street, St Julians STJ 1000, Malta, implemented via Google Tag Manager.
Hotjar helps us understand our users' experience through session recordings and heatmaps - for example how long is spent on which pages, which links are clicked, and how users scroll and navigate. Hotjar uses cookies and similar technologies to collect data such as a de-identified form of your device's IP address, screen size, device type, browser information, approximate geographic location at country level, and preferred language. Hotjar is contractually prohibited from selling any data collected on our behalf.
Input fields on our website are suppressed in the Hotjar configuration: what you type into a form - for example your name or your email address - is masked in your browser before transmission and does not reach Hotjar's servers. The information you enter is not displayed back to you elsewhere on the site, so it does not enter recordings by any other route. We review this whenever we add a new page or form.
Hotjar's cookies and tags are activated only after you have given your consent via Cookiebot.
Storage period: session recordings and heatmap data are retained by Hotjar for 365 days from the date of capture and are then deleted automatically. You can object to Hotjar's collection of data across all websites using the opt-out mechanism at https://www.hotjar.com/policies/do-not-track/. Further information: https://www.hotjar.com/legal/policies/privacy/.
For the surveys described in Section 7 we use Tally, a form and survey tool provided by Tally BV, August Van Lokerenstraat 71, 9050 Ghent, Belgium (enterprise number 0776.979.007). When you take part in a survey, your responses are transmitted to and stored by Tally on its servers. This applies to all our surveys, whether you reach them from our website or through another channel such as an email invitation or an event.
Tally acts as our processor; we have concluded a data processing agreement in accordance with Art. 28 GDPR. Tally is established in the European Union. Where Tally engages sub-processors outside the European Economic Area, those transfers are based on appropriate safeguards, in particular the EU Standard Contractual Clauses. Further information: https://tally.so/help/privacy-policy.
For sending our newsletter (see Section 5) we use Brevo, an email marketing platform operated by Sendinblue SAS, trading as Brevo, 17 rue Salneuve, 75017 Paris, France, registered in the Paris Trade and Companies Register under number 498 019 298. When you subscribe, your email address and any other data you provide is transmitted to and stored by Brevo in order to send you the newsletter and to analyse opening and click rates for statistical purposes.
Brevo acts as our processor; we have concluded a data processing agreement in accordance with Art. 28 GDPR. Newsletter data is stored on servers within the European Union. Brevo engages sub-processors established outside the European Economic Area, in particular in the United States and India. Where your data is transferred to such a sub-processor, the transfer is based on the safeguards described in Section 10. Further information: https://www.brevo.com/legal/privacypolicy/.
Some pages on our website contain videos hosted on YouTube, a service provided in the European Economic Area by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Embedded videos are not loaded when you open the page. They are loaded only after you have given your consent via our Cookiebot banner (see Section 6). If you do not consent, the video is not loaded and no connection to YouTube is established.
Once a video is loaded, your browser establishes a direct connection to YouTube's servers. This transmits your IP address, information about your browser and device, and the address of the page on which the video is embedded. YouTube may store information on your device or access information already stored there, and processes this data for its own purposes, which may include the delivery and improvement of its services, analysis and advertising. If you are signed in to a Google account at that moment, YouTube can associate the playback with your account. If you do not want this, sign out of your Google account before playing the video.
For the processing that takes place once a video has been loaded, YouTube acts as an independent controller and not as our processor. We have no influence over the scope or purposes of that processing and no access to the data collected.
Legal basis: Art. 6(1)(a) GDPR and the national provisions implementing Art. 5(3) of Directive 2002/58/EC (in Germany, Sec. 25(1) TDDDG). You can withdraw your consent at any time with effect for the future at https://planet2050.earth/cookies. Information on the purposes of YouTube's own processing, and on the settings available to you, can be found in Google's privacy policy at https://policies.google.com/privacy.
Some of the providers named above are established outside the European Economic Area ("EEA"), or transfer data to group companies or sub-processors outside the EEA. A transfer to a third country takes place only where one of the following safeguards applies:
an adequacy decision of the European Commission under Art. 45 GDPR; and/or
the EU Standard Contractual Clauses under Art. 46(2)(c) GDPR, supplemented where necessary by additional technical and organisational measures.
Google Tag Manager, Google Analytics 4, Google Looker Studio and Google Sheets are provided to us by Google Ireland Limited; Google Workspace is provided by Google Cloud EMEA Limited. Where either entity shares data with Google LLC in the United States or other Google group companies outside the EEA in the course of providing these services, we rely primarily on the EU-U.S. Data Privacy Framework, under which the recipient is certified, and in addition and in the alternative on the EU Standard Contractual Clauses. The Data Privacy Framework is currently the subject of proceedings before the Court of Justice of the European Union; should it cease to apply, we will continue to rely on the Standard Contractual Clauses.
Videos embedded from YouTube are also provided by Google Ireland Limited. Because YouTube processes the resulting data as an independent controller rather than on our behalf, any onward transfer to Google LLC or another Google group company outside the EEA is made on Google's own responsibility. Google LLC is certified under the EU-U.S. Data Privacy Framework.
Brevo stores our newsletter data on servers within the European Union but engages sub-processors in third countries, in particular in the United States and India. Transfers to those sub-processors are based on the EU Standard Contractual Clauses under Art. 46(2)(c) GDPR and, as regards Brevo's US group company, additionally on that company's certification under the EU-U.S. Data Privacy Framework.
We would like to point out that, despite these safeguards, a level of data protection equivalent to that in the EU cannot be guaranteed in all third countries, and that access to your data by public authorities in those countries cannot be entirely ruled out. You can prevent transfers connected to non-essential cookies at any time by refusing or withdrawing your consent.
You may request a copy of the Standard Contractual Clauses on which we rely, or details of the other safeguards described above, by writing to hello@planet2050.earth.
We store personal data only for as long as is necessary for the purposes described, or for as long as statutory retention obligations require.
Server log files
Retention period: 7 days
Basis for the period: Security and stability; longer only for a specific incident
Contact form / email enquiries
Retention period: Until the enquiry is conclusively resolved; then for the period of any applicable statutory retention obligation
Basis for the period: Purpose limitation, Art. 5(1)(e) GDPR; company and tax law applicable to us
Newsletter subscription
Retention period: Until you unsubscribe
Basis for the period: Consent, Art. 6(1)(a) GDPR
Newsletter consent and withdrawal records
Retention period: 3 years after the end of the year of withdrawal
Basis for the period: Accountability, Art. 5(2) and 7(1) GDPR; defence of legal claims
Newsletter suppression (blocklist) entry
Retention period: Retained indefinitely, solely to prevent further mailings
Basis for the period: Giving effect to your withdrawal or objection, Art. 6(1)(c) GDPR with Art. 7(3) and Art. 21(3) GDPR
Survey responses
Retention period: 24 months, or anonymised earlier
Basis for the period: Purpose limitation, Art. 5(1)(e) GDPR
GA4 analytics data
Retention period: 2 months
Basis for the period: Retention setting configured in GA4
Hotjar session recordings and heatmaps
Retention period: 365 days from capture
Basis for the period: Hotjar data retention policy
Cookie consent records
Retention period: 12 months, then consent re-requested
Basis for the period: Accountability, Art. 7(1) GDPR
Cookies set by embedded YouTube videos
Retention period: As determined by Google
Basis for the period: Set by a third-party controller; we have no influence over the period
You have the following rights in relation to the personal data we hold about you:
Right of access (Art. 15 GDPR): to request confirmation as to whether we process personal data concerning you and, if so, to obtain access to that data and the information listed in Art. 15(1) GDPR.
Right to rectification (Art. 16 GDPR): to request the immediate correction of inaccurate personal data concerning you, or the completion of incomplete data.
Right to erasure (Art. 17 GDPR): to request the deletion of your personal data, unless processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.
Right to restriction of processing (Art. 18 GDPR): to request that processing of your personal data be restricted in the circumstances set out in that article.
Right to data portability (Art. 20 GDPR): to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to have it transmitted to another controller.
Right to withdraw consent (Art. 7(3) GDPR): to withdraw consent you have given at any time with effect for the future. The lawfulness of processing carried out on the basis of your consent before its withdrawal is not affected.
Right to object (Art. 21 GDPR): see Section 13 below.
Right to lodge a complaint (Art. 77 GDPR): to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement.
To exercise any of these rights, an informal message to hello@planet2050.earth is sufficient.
We will respond without undue delay and in any event within one month of receipt of the request. Where a request is complex or where we have received a number of requests, we may extend this period by up to two further months in accordance with Art. 12(3) GDPR; we will inform you of any such extension and the reasons for it within one month of receipt.
Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to that processing pursuant to Art. 21(1) GDPR on grounds relating to your particular situation. In that case we will no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right to object at any time under Art. 21(2) GDPR without giving reasons. Following such an objection, your data will no longer be processed for those purposes. In order to give effect to your objection, we add your address to an internal suppression list, which is used solely to ensure that you receive no further mailings from us and for no other purpose (see Section 5).
To exercise your right to object, simply send an email to hello@planet2050.earth.
When you visit our website we use TLS (Transport Layer Security) encryption, formerly known as SSL, in combination with the highest level of encryption supported by your browser. You can recognise an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.
We also implement appropriate technical and organisational measures in accordance with Art. 32 GDPR to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are reviewed and improved in line with technological developments.
This privacy policy is currently valid and was last updated on 3 August 2026.
As our website and the services offered through it continue to develop, or as a result of changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version can be viewed at any time at https://planet2050.earth/privacy-policy (English) and https://planet2050.earth/de/privacy-policy (German). You can view, download and print it at any time.
Both language versions are prepared with equal care and are intended to have the same meaning. In the event of any discrepancy between them, the English version prevails.