Privacy Policy (RGPD)
Last Updated: January 10, 2025
At 2D Media ("we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the General Data Protection Regulation (GDPR/RGPD) and other applicable data protection laws.
1. Information We Collect
1.1 Personal Information
We may collect the following types of personal information:
- Contact Information: Name, email address, phone number, company name, and mailing address
- Professional Information: Job title, company details, industry, and business needs
- Technical Information: IP address, browser type, device information, and website usage data
- Communication Data: Records of your communications with us, including emails, phone calls, and form submissions
- Marketing Preferences: Your preferences for receiving marketing communications
1.2 How We Collect Information
We collect information through:
- Contact forms and lead generation forms on our website
- Email communications and phone conversations
- Cookies and similar tracking technologies
- Social media interactions
- Business meetings and consultations
2. How We Use Your Information
We use your personal information for the following purposes:
- Service Delivery: To provide our digital marketing, web development, and lead generation services
- Communication: To respond to your inquiries, provide customer support, and send service-related notifications
- Marketing: To send you promotional materials, newsletters, and updates about our services (with your consent)
- Analytics: To analyze website usage, improve our services, and optimize user experience
- Legal Compliance: To comply with legal obligations and protect our legal rights
- Contract Performance: To fulfill our contractual obligations to you
3. Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal grounds:
- Consent: You have given explicit consent for specific processing activities
- Contract Performance: Processing is necessary to fulfill our contract with you
- Legitimate Interests: Processing is necessary for our legitimate business interests
- Legal Obligation: Processing is required to comply with legal requirements
4. Data Sharing and Disclosure
We may share your personal information with:
- Service Providers: Third-party vendors who assist us in providing our services (e.g., hosting providers, email services, analytics tools)
- Business Partners: Partners who help us deliver services to you
- Legal Authorities: When required by law or to protect our legal rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We ensure that all third parties are contractually obligated to protect your data and use it only for specified purposes.
5. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by the European Commission
- Other legally approved transfer mechanisms
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Typically:
- Client data is retained for the duration of our business relationship plus 7 years for legal and accounting purposes
- Marketing data is retained until you withdraw consent or request deletion
- Website analytics data is retained for 26 months
7. Your Rights Under GDPR
Under GDPR, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restriction: Request limitation of processing of your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing of your data for specific purposes
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
- Right to Lodge a Complaint: File a complaint with your local data protection authority
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about our cookie usage, please see our Cookie Policy.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments and audits
- Access controls and authentication procedures
- Employee training on data protection
- Secure backup and disaster recovery procedures
10. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.
12. Contact Us
13. Supervisory Authority
If you are located in the EEA and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.
