Privacy policy

This policy explains how Solid Consent, S.L. processes the personal data of people who visit 2yes.life and join the 2YES · Con·Sent waitlist, and what rights they have. It is governed by the General Data Protection Regulation (GDPR), the Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD) and the Spanish Law 34/2002 on Information Society Services (LSSI).

The 2YES app is not available yet. Before you use it, the app will inform you about the data it processes. These include the consent records, which reveal data about your sex life and will only be processed with your explicit consent.

Solid Consent, S.L. · NIF B05604525 · Carrer Tuset 5, planta 5, puerta D, 08006 Barcelona (Spain) · hello@2yes.life

• Waitlist. We process your email address, the website language, the country you choose, your invitation code and that of the person who invited you (if someone did), your position and the dates on which you joined and confirmed. We send you an email so that you can confirm your address. When you confirm it, you see your position and your link to invite other people, which moves you up the list. If you join again with the same address, we send you a new link to check your position. When we open the beta, we will use your email address to invite you.
• News from 2YES by email, only if you tick the corresponding box.
• Knowing whether you open our emails, only if you tick the corresponding box and have confirmed your address. This is done by our email provider, Brevo, with a tracking pixel: an invisible image that, when it loads, tells Brevo that you have opened the email. It records the date and time and the technical data of the request, such as the IP address or the browser. If you do not tick the box, our emails reach you as plain text only, without a pixel. The confirmation email never includes one.
• Protecting the website against abuse. We limit how many requests arrive from the same IP address and for the same email address. The IP address is only used for that count, in memory, and is not stored.
• Replying to you, if you write to us at hello@2yes.life.

Your email address and country are required to join. Both boxes are optional, and not ticking them does not change your position. We do not make automated decisions that produce legal effects concerning you or significantly affect you.

• Waitlist: your own request to join (Art. 6(1)(b) GDPR, pre-contractual steps taken at your request).
• News and email opens: your consent. For news, Art. 6(1)(a) GDPR and Art. 21 LSSI. For the pixel, also Art. 22(2) LSSI. You can withdraw it at any time by writing to hello@2yes.life, without affecting what was done before.
• Protection against abuse: our legitimate interest in keeping the website available and secure (Art. 6(1)(f) GDPR).
• Replying to you: your request and our legitimate interest in dealing with it (Art. 6(1)(f) GDPR).

We do not sell your data or pass it on to anyone. It is processed on our behalf, under a data processing agreement, by:

• Brevo (Sendinblue SAS, France): sends our emails and, if you agree to it, records email opens. It deletes its records of sent and opened emails after one month and does not keep the content of the messages.
• Hetzner Online GmbH (Germany): hosts the website and the databases, on servers in Germany.
• EuroDNS S.A. (Luxembourg): hosts the hello@2yes.life mailbox.

All three store the data in the European Union. If any of them had to process it outside the European Economic Area, it would do so under the safeguards of the GDPR, such as an adequacy decision or the European Commission's standard contractual clauses.

We will only disclose data to judges, courts or other authorities when the law requires us to.

• Waitlist: until you ask to be removed or we close the waitlist.
• Requests that are not confirmed: 30 days.
• News: if you agreed to receive it, until you withdraw your consent.
• Date of each consent: for as long as we keep your data, so that we can demonstrate that you gave it.
• Email opens: one month, at Brevo.
• Emails you send us: as long as necessary to assist you.

After that, the data is blocked and only kept for the limitation periods of the liabilities that may arise from the processing (Art. 32 LOPDGDD). Once those periods have passed, it is deleted.

You can, free of charge and at any time, exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent. Write to us at hello@2yes.life from the email address you joined with. If necessary, we will ask you for the minimum needed to check that it is you. We will reply within one month at the latest.

If you believe we have not handled your request properly, you can lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, or with the data protection authority of your country.

The waitlist is only for people aged 16 or over. We do not knowingly collect data from anyone under that age. If we find out that someone under that age has joined, we delete their data.

Your email address is stored encrypted (AES-256-GCM). The servers are in the European Union and access is restricted. The technical logs of the website and the API do not store personal data, not even the IP address.

Our cookie policy explains them.

If we change this policy, we will publish the new version here with its date. If the change is significant, we will let you know by email.