1. 2N8life GmbH
Germeringer Straße 32
82152 Planegg
Phone: +49 (0) 157 7381 5430
Fax: +49 (0) 89 8569 6671
Email: info@2n8life.com
Website: www.2n8life.com

2. Collection and Storage of Personal Data as well as the Nature and Purpose of Their Use

2a) When visiting the website

When you access our website www.2n8life.com, the browser used on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:

• IP address of the requesting device,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• Browser used and, if applicable, your device’s operating system as well as the name of your access provider.

The aforementioned data will be processed by us for the following purposes:

• Ensuring a smooth connection setup of the website,
• Ensuring comfortable use of our website,
• Evaluation of system security and stability, and
• for further administrative purposes.

The legal basis for data processing is Art. 6 Para. 1 Sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. Furthermore, we use cookies and analysis services when you visit our website. Further explanations can be found under sections 4 and 5 of this privacy policy.

2b) When registering for our newsletter

If you have given your express consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR, we will use your email address to send you our newsletter on a regular basis. Providing an email address is sufficient to receive the newsletter.

Unsubscribing is possible at any time, for example via a link at the end of each newsletter. Alternatively, you are welcome to send your unsubscribe request at any time to info@2n8life.com by email.

2c) When using our contact form

For questions of any kind, we offer you the opportunity to contact us using a form provided on the website. A valid email address is required so that we know who the inquiry is from and can answer it. Further information can be provided voluntarily. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR on the basis of your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after your inquiry has been processed.

3. Processing and Storage of Health Data

3a) Purpose and Subject of Data Processing and Storage

Health data regarding nocturnal erections is processed and stored. This serves to prepare and visualize the recorded values in the app as well as to categorize your own results. The legal basis is your consent in accordance with GDPR Art. 6 Para. 1 lit. a and Art. 9 Para. 2 lit. a, as per the opt-in when setting up the app.

3b) Data Minimization

Only the data necessary for visualization and categorization is processed and stored in pseudonymized form.

3c) Retention Periods

Your data will be kept for 10 years from the time of collection. After the period has expired or if your consent is revoked, your data will be deleted or pseudonymized, as far as legally permissible.

3d) Data Security

Transmission, processing, and storage are encrypted. Only authorized persons have access to the anonymized data. We conduct regular security audits and pseudonymize your data when necessary.

3e) Rights of the Data Subject

You have the right to information, rectification, and deletion of your data. You also have the right to restriction of processing as well as the right to object to data processing, transmission, and storage. A revocation of your consent is possible at any time; after revocation, access to your data will be restricted and existing data will be deleted or anonymized, as far as legally permissible.

3f) Privacy by Design/Default

Data protection is implemented by default through privacy-friendly presets. We only collect, process, and store strictly necessary data.

3g) Opt-in

The checkbox in the app for the declaration of consent is visible, clearly formulated, and not pre-filled.

3h) Revocation

You can revoke your consent at any time. Please write us an email at datenschutz@2n8life.com.

3i) Data Recipients and Disclosure

Only authorized employees can view your data in anonymized form. Backend providers or analytics providers process and store data only with a clear purpose. International transfer of data only takes place if necessary and only to countries with an adequate level of data protection.

3j) Rights of the Data Subject

You have the right to:

• Information about your stored data
• Rectification of incorrect data
• Deletion or restriction of processing
• Objection to data transfer to third parties
• Objection to processing (unless legal reasons prevent this)

3k) Responsible Body and Contact Person

Responsible body: 2N8life GmbH, Germeringer Str. 32, 82152 Planegg, Email Data Protection: datenschutz@2n8life.com

Data Protection Officer: Andreas Wagner; Email: datenschutz@2n8life.com

4. Disclosure of Data

A transfer of your personal data to third parties for purposes other than those listed below does not take place. We only share your personal data with third parties if:

• You have given your express consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR,
• disclosure is necessary in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR for the assertion, exercise, or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
• in the event that there is a legal obligation for disclosure in accordance with Art. 6 Para. 1 Sentence 1 lit. c GDPR, and this is legally permissible and required in accordance with Art. 6 Para. 1 Sentence 1 lit. b GDPR for the processing of contractual relationships with you.

5. Cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware. Information is stored in the cookie that arises in connection with the specific device used. However, this does not mean that we gain direct knowledge of your identity as a result.

The use of cookies serves, on the one hand, to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

Furthermore, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific fixed period. If you visit our site again to use our services, it is automatically recognized that you have already been with us and what entries and settings you have made so that you do not have to enter them again. On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see Section 5). These cookies enable us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined period of time. The data processed by cookies is required for the aforementioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

6. Analysis Tools

6a) Tracking Tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 Para. 1 Sentence 1 lit. f GDPR. With the tracking measures used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision. The respective data processing purposes and data categories can be found in the corresponding tracking tools.

i) Google Analytics

For the purpose of needs-based design and continuous optimization of our pages, we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymized usage profiles are created and cookies (see Section 4) are used. The information generated by the cookie about your use of this website, such as

• Browser type/version,
• Operating system used,
• Referrer URL (the previously visited page),
• Hostname of the accessing computer (IP address),
• Time of the server request

is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity, and to provide further services related to website and internet use for the purposes of market research and needs-based design of these internet pages. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking). You can prevent the installation of cookies by setting your browser software accordingly. However, we would like to point out that in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).

ii) Google Ads Conversion Tracking

In order to statistically record the use of our website and to evaluate it for the purpose of optimizing our website for you, we also use Google Conversion Tracking. In doing so, Google Ads sets a cookie (see Section 4) on your device if you reached our website via a Google advertisement. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Ads customer’s website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.

Each Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Ads customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in the tracking process, you can also refuse the setting of a cookie required for this – for example, via a browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”. Google’s privacy policy on conversion tracking can be found here (https://services.google.com/sitestats/en.html).

iii) Google Tag Manager

We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and allows us to control the precise integration of services on our website. This allows us to flexibly integrate additional services to evaluate user access to our website.

The use of Google Tag Manager is based on your consent in accordance with Art. 6 Para. 1 lit. a. GDPR and § 25 Para. 1 TTDSG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision by the European Commission exists (e.g., in the USA), we have agreed on other suitable guarantees with the recipients of the data within the meaning of Art. 44 ff. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914&from=EN.

In addition, we obtain your consent in accordance with Art. 49 Para. 1 Sentence 1 lit. a. GDPR before such a third-country transfer, which you grant via the consent in the Consent Manager (or other forms, registrations, etc.). We point out that in the case of third-country transfers, unknown risks in detail (e.g., data processing by security authorities of the third country, the exact scope and consequences of which we do not know, over which we have no influence, and of which you may not become aware) may exist.

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

7. Social Media Plugins:

We use social media plugins from the social networks Facebook, Twitter, and Instagram on our website on the basis of Art. 6 Para. 1 Sentence 1 lit. f GDPR in order to make our company better known through them. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation is to be guaranteed by their respective providers. The integration of these plugins by us takes place by means of the so-called two-click method in order to protect visitors to our website in the best possible way.

i) Facebook

Social media plugins from Facebook are used on our website to make their use more personal. For this purpose, we use the “LIKE” or “SHARE” button. This is an offer from Facebook. When you access a page of our website that contains such a plugin, your browser establishes a direct connection with Facebook’s servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the website by it. By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can assign the visit to our website directly to your Facebook account. If you interact with the plugins, for example by pressing the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends. Facebook can use this information for the purpose of advertising, market research, and needs-based design of Facebook pages. For this purpose, usage, interest, and relationship profiles are created by Facebook, e.g., to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide further services associated with the use of Facebook. If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website. The purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, can be found in Facebook’s privacy policy (https://www.facebook.com/about/privacy/).

ii) Twitter

Plugins of the short message network Twitter Inc. (Twitter) are integrated on our website. You can recognize the Twitter plugins (“Tweet” button) by the Twitter logo on our site. An overview of “Tweet” buttons can be found here (https://about.twitter.com/resources/buttons). When you access a page of our website that contains such a plugin, a direct connection is established between your browser and the Twitter server.

Twitter thereby receives the information that you have visited our website with your IP address. If you click the Twitter “Tweet button” while you are logged in to your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to assign the visit to our pages to your user account. We point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Twitter. If you do not want Twitter to be able to assign the visit to our pages, please log out of your Twitter user account. Further information on this can be found in Twitter’s privacy policy (https://twitter.com/privacy).

iii) Instagram

So-called social plugins (“plugins”) from Instagram, operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”), are also used on our website. The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera”. When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Instagram’s servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign the visit to our website to your Instagram account. If you interact with the plugins, for example by pressing the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram

account and displayed to your contacts there. If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. Further information on this can be found in Instagram’s privacy policy (https://help.instagram.com/155833707900388).

8. Rights of the Data Subject

You have the right:

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• to immediately request the rectification of incorrect or completion of your personal data stored by us in accordance with Art. 16 GDPR;
• to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR;
• to receive your personal data that you have provided to us in a structured, common, and machine-readable format or to request transmission to another controller in accordance with Art. 20 GDPR;
• to revoke your consent once given to us at any time in accordance with Art. 7 Para. 3 GDPR. As a result, we may no longer continue the data processing based on this consent for the future and
• to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

9. Right to Object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation. If you wish to make use of your right of revocation or objection, an email to info@2n8life.com is sufficient.

10. Data Security

We use the common SSL (Secure Socket Layer) method during the website visit in connection with the highest encryption level supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser. We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

11. Integration of Third-Party Services and Content

It may happen that content or services from third-party providers, such as city maps or fonts from other websites, are integrated within our online offer. The integration of content from third-party providers always requires that the third-party providers perceive the IP address of the users, as they could not send the content to the user’s browser without the IP address. The IP address is therefore required for the display of this content. Furthermore, the providers of third-party content can set their own cookies and process user data for their own purposes. In doing so, usage profiles of the users can be created from the processed data. We will use this content as sparingly as possible in terms of data and will choose reliable third-party providers with regard to data security.

The following presentation provides an overview of third-party providers and their content, along with links to their privacy policies, which contain further information on the processing of data and, in some cases already mentioned here, objection options (so-called opt-out):

• External fonts from Google, Inc., https://www.google.com/fonts (“Google Fonts”). The integration of Google Fonts takes place by a server call at Google (usually in the USA). Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
• Maps of the “Google Maps” service of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
• Videos of the “YouTube” platform of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

12. Timeliness and Amendment of This Privacy Policy

This privacy policy is currently valid and is dated June 2025.