2HOT 2PAY · Website

Website privacy

Last updated: 16 September 2026

This notice explains what happens to your information when you visit our information websites at 2hot2pay.de or 2hot2pay.com, or contact us through them.

1. Who is responsible

You can also use these contact details for privacy questions and to exercise your rights.

2. When you visit

Your browser sends the web server your IP address and technical information needed for the connection. This includes the page or file requested, the time of the request, and information about your browser and operating system. Depending on your browser settings, the address of the preceding page may also be sent. The server also processes information about the result of the request, such as an error status.

We use this information to serve the website, resolve technical faults and detect attacks or misuse. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in keeping the website available and secure. Technical operating data is not used to build advertising profiles about you.

3. Language, cookies and external content

The website loads its fonts, images and scripts from its own web server. It does not use Google Analytics, AdSense, Ad Manager, advertising pixels or embedded social-media feeds. The map shown on the website is a locally hosted graphic, not an embedded mapping service.

If you choose German or English, we remember that choice in your browser's session storage using the key 2h2p_language. The setting applies to the current tab and is discarded when its session ends normally; a browser's session-restore feature may restore it. It contains neither a user identifier nor a browsing history. No language setting is saved unless you make a choice. If session storage is blocked, you can still switch language on the open page.

This storage is used solely to provide your chosen language (section 25(2), point 2 of Germany's TDDDG). To the extent that personal data is processed, the legal basis is Article 6(1)(f) GDPR and our interest in providing the presentation you requested. Our website code does not set analytics or advertising cookies.

Links to services such as Instagram, Facebook, X or app stores are ordinary links. You access those services only when you follow a link; their own privacy information then applies. Displaying the links does not embed content from those services.

4. When you contact us

The enquiry form processes your first name, last name, company, country, email address and message. You may optionally provide a phone number if you would like a call back. If you email us, we receive your sender address, the message and any attachments you choose to include.

The form sends the information to our web server, which emails your enquiry to our team. Your enquiry is not displayed publicly. We use it to understand your request, respond and prepare any collaboration you have asked about. Please do not send sensitive information that is unnecessary for your enquiry.

If you are taking steps to enter into a contract with us yourself, or we are handling your existing contract, Article 6(1)(b) GDPR applies. Other enquiries, including those from a business's contact person, are handled under Article 6(1)(f) GDPR. Our legitimate interest is answering enquiries and communicating with prospective customers and business partners.

The fields marked as required are needed to identify and handle the business enquiry. Without them the form cannot be submitted; you can email us instead. You have no statutory obligation to use the form or provide this information. Sending an enquiry does not subscribe you to a newsletter or create an app account. Blanket consent to data processing is not required for this.

5. Who receives information

Access within our team is limited to the people handling the website or your enquiry. Web-hosting and email service providers process information as needed to provide and secure those services. Where they act on our behalf, they are engaged under Article 28 GDPR. The form does not automatically forward your enquiry to venues or other advertising partners.

Further disclosure may be necessary in an individual case, for example to legal advisers dealing with a specific claim or to authorities where legally required. The legal basis is then Article 6(1)(f) or (c) GDPR, respectively. Submitting an enquiry does not add your contact details to a third party's marketing list.

6. How long information is needed

Connection data is processed to transmit the pages. Technical logs are needed only for as long as necessary to detect and investigate errors or security incidents. Entries relevant to a specific incident may be kept until it is resolved and, where necessary, to establish or defend legal claims.

We retain an enquiry while handling it and the associated correspondence. Once the matter is closed and no further handling is expected, personal information that is no longer needed is deleted. If a business relationship develops, necessary information may become part of its contractual records. Article 6(1)(c) GDPR applies to records subject to statutory retention duties; Article 6(1)(f) applies where records are necessary for specific legal claims. This does not justify keeping all enquiries indefinitely.

7. Your rights

Subject to the GDPR's conditions, you may request access to and a copy of your personal information, correction of inaccuracies, erasure or restriction of processing. Data portability applies to automated processing based on consent or a contract. If you have given consent for a separate purpose, you may withdraw it at any time for the future.

We normally respond within one month. If a legally permitted extension is necessary, we will tell you within that period. Where there are reasonable doubts about identity, we may need proportionate verification to avoid disclosing information to an unauthorised person.

You may also complain to a data protection supervisory authority, particularly where you live, work or believe an infringement has occurred. The authority for our registered office is the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information: Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, poststelle@ldi.nrw.de, www.ldi.nrw.de.

Visiting these information websites or sending an enquiry does not result in a solely automated decision with legal or similarly significant effects.

8. Website and app

This notice covers the information websites and their enquiry form. Registration for or use of the 2HOT 2PAY app or platform is covered by separate privacy information provided there, including information about profile review, Instagram connections, Deals and check-ins. Visiting this website alone does not activate those functions.

We update this notice when the website's data processing changes. The revision date appears above. An updated notice does not replace consent where a new feature requires it.