GDPR
Privacy.
Your privacy is not optional. Here, in plain terms, is what this website collects — and above all, what it doesn't.
This English version is provided for information purposes only. In case of discrepancy, the French version prevails.
In short
- This website does not ask you for any personal data. Only the information you choose to enter in the contact form is sent to us.
- The form goes through our service provider Formspree, in the United States: you give your explicit agreement before sending. You can also simply email us.
- No cookies, no analytics, no advertising trackers, no content loaded from third-party websites.
- As with any website, our hosting provider records technical connection logs, for the security of the service.
- Your data is never sold, rented or used for advertising.
- To exercise your rights: privacy@2glabs.fr.
This policy applies only to the 2glabs.fr website. The ToGather app has its own privacy policy.
1. Data controller
The data controller is 2G Labs (registered name: 2G LABS), a SASU incorporated under French law, registered under SIREN number 101 862 951, whose registered office is at 58 rue de Monceau, CS 48756, 75380 Paris Cedex 08, France.
For any question about your personal data: privacy@2glabs.fr, or by post to the registered office.
2. Data processed
If you write to us through the contact form
| Data | Required | Use |
|---|---|---|
| First and last name | Yes | To identify you and personalise our reply |
| Email address | Yes | To reply to you |
| Subject (chosen from a list) | Yes | To route your request |
| Message | Yes | To handle your request |
| Agreement to the transfer to the United States | Yes | To keep proof of your consent (see section 6) |
This information is needed to handle your request: without it, the form cannot be sent. Please do not include any sensitive data (health, opinions, etc.): we do not need it to reply to you.
When you send the form, our service provider Formspree also receives technical data about your connection, including your IP address, browser type, the time of sending and the address of the page you came from, which it processes under its own privacy policy. If JavaScript is disabled in your browser, sending the form takes you to a page on Formspree's website, which may show you an anti-spam test and is covered by that same policy.
If you email us directly
Messages sent to our @2glabs.fr addresses are received by our email service, hosted by LWS, without going through Formspree. They are processed for the same purposes and kept for the same periods as messages sent through the form.
When you browse the website
Our hosting provider's server, run by LWS, automatically records technical connection logs, including the IP address, the date and time of the connection, the page requested and technical information about the browser. They are used solely to keep the website secure and working properly.
No other data is collected: no account, no analytics, no browsing tracking, no profiling.
Mini-games
The mini-games run entirely in your browser: your answers and results are neither transmitted nor recorded. The quiz's “Share” button uses your device's sharing feature or the clipboard: you decide whether, and where, to share your result.
3. Purposes and legal bases
- Messages (form or email): to respond to your request and follow up on our correspondence. Legal basis: 2G Labs' legitimate interest in responding to people who contact it (Article 6(1)(f) GDPR); where your request concerns entering into a contract (partnership, services…), steps taken at your request prior to entering into a contract (Article 6(1)(b)).
- Transfer of form messages to Formspree, in the United States: to deliver your message to 2G Labs. Legal basis: your explicit consent, given before sending (Article 49(1)(a) GDPR).
- Technical logs: to keep the website secure (preventing abuse and attacks, diagnosing incidents). Legal basis: 2G Labs' legitimate interest in securing its website (Article 6(1)(f) GDPR).
Your data is never used for marketing or profiling, and is not subject to any automated decision-making.
4. Retention periods
- Messages: 12 months from our last exchange, then deleted, including the copy kept by Formspree. If your request leads to a contractual relationship, the relevant data is kept for the duration of that relationship and then for the applicable statutory limitation periods.
- Technical logs: 12 months at most, then deleted.
5. Recipients and service providers
Your messages are read only by authorised members of the 2G Labs team. Two service providers are involved, strictly within the scope of their services:
- LWS — Ligne Web Services (France): hosting of the website and of 2G Labs' email;
- Formspree, Inc. (San Antonio, Texas, United States): receiving the messages sent through the form and forwarding them to our email.
Your data is never sold, rented or transferred. It may be disclosed to an authority only where required by law.
6. Transfer outside the European Union
Messages sent through the form are received by Formspree, Inc., a company established in the United States that provides its service from that country: your data is therefore transferred there.
As of the date this policy was last updated, Formspree is not certified under the EU–US Data Privacy Framework. This transfer therefore does not benefit from an adequacy decision of the European Commission, and it is not covered by standard contractual clauses. Your data may enjoy a lower level of protection there than within the European Union: in particular, it could be accessed by US authorities, and your rights could be harder to enforce.
That is why this transfer is based on your explicit consent, collected through a checkbox before the form is sent (Article 49(1)(a) GDPR). You can withdraw this consent at any time by writing to privacy@2glabs.fr: we will then delete the copy of your message kept by Formspree. Withdrawal does not affect the transfer already made.
To avoid any transfer, email us directly at contact@2glabs.fr: your message will be received by our email service, hosted by LWS, without going through Formspree.
7. Cookies and local storage
The 2glabs.fr website sets no cookies and uses no other trackers: no analytics, no advertising, no social media buttons. It loads no fonts, scripts or images from third-party websites. No consent banner is therefore needed.
The only exception, and only when you act: if you choose the light or dark theme with the dedicated button, your choice is saved in your browser's local storage (key 2gl-theme, value “light” or “dark”). It stays on your device, is never transmitted, and is used solely to display the website the way you asked. As it is strictly necessary for a feature you request, this storage is exempt from consent (Article 82 of the French Data Protection Act). You can clear it at any time from your browser settings.
8. Links to other websites
The website contains links to other websites (togatherapp.fr, the App Store, Google Play, Instagram, the CNIL…). No data is sent to them unless you click. If you follow a link, the website you visit only receives the address of our website (2glabs.fr), not that of the exact page, and then applies its own privacy policy.
9. Your rights
Under the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:
| Right | What it allows you to do |
|---|---|
| Access | Find out whether data about you is processed and obtain a copy of it |
| Rectification | Correct inaccurate or incomplete data |
| Erasure | Request the deletion of your data |
| Restriction | Request that processing be temporarily suspended |
| Objection | Object, on grounds relating to your particular situation, to processing based on our legitimate interest |
| Portability | Receive your data in a structured, machine-readable format, where processing is based on pre-contractual steps |
| Withdrawal of consent | Withdraw at any time your agreement to the transfer to the United States (see section 6) |
| Instructions after death | Give instructions on what happens to your data after your death (Article 85 of the French Data Protection Act) |
To exercise them, write to privacy@2glabs.fr (suggested subject: “GDPR request”) or by post to the registered office. If we have reasonable doubts about your identity, we may ask you to confirm it. We reply within one month, which may be extended by two months for complex requests (Article 12 GDPR).
You can lodge a complaint at any time with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France).
10. Security
2G Labs implements appropriate technical and organisational measures: encrypted connections (HTTPS) for browsing the website and sending the form, strict security headers, a static website with no database or user accounts, and access to messages restricted to authorised persons.
11. Changes
This policy may change, in particular if our service providers change. Any change is indicated by an update to the date shown at the top of this page.