Privacy Policy

1. Data Controller

T2T teams2tech GmbH
Siedlungsstrasse 3
63607 Wachtersbach
Germany
Email: kontakt@teams2tech.com
Website: www.teams2tech.com

2. What Data We Collect and How We Use It

We collect information about you when you provide it to us, when you use our Services, and from other sources. Depending on how you interact with us, we collect the following:

• Website Visitors: Technical data (IP address, browser type, device information, timestamps) to ensure IT security, system stability, and optimized website performance.
• Customers and Inquirers: Name, email, company, job role, and project context (e.g., Atlassian license tiers, architecture setup) collected via contact forms, assessments, or direct communication.
• Solution Partners and Experts: Company details, certifications, capabilities, and contact information collected when you apply to our Partner Network or use the Expert Portal.
• Support and Communication Channels: Inquiries, summaries of problems, support tickets, and helpful documentation or screenshots.
• Billing and Payment Information: Billing representative contact details and billing address when you register for paid services or purchase Atlassian licenses through us.
• Marketing and Insights: Email addresses and communication preferences if you subscribe to our blog, newsletters, or case studies.

3. Legal Basis for Processing (Art. 6 GDPR)

We process your data strictly based on the following legal grounds:

• Art. 6 (1)(b) GDPR (Contractual/Pre-contractual): Delivering consulting services, executing the Partner Matching process, and managing vendor/license relationships.
• Art. 6 (1)(f) GDPR (Legitimate Interests): Ensuring efficient business operations, network security, and preventing fraud.
• Art. 6 (1)(a) GDPR (Consent): Setting non-essential cookies and sending promotional newsletters or marketing materials.
• Art. 6 (1)(c) GDPR (Legal Obligations): Storing commercial and tax-relevant documentation.

4. How We Disclose Your Information

To deliver our specialized services as an independent Atlassian broker, we share information with selected third parties under strict data protection standards:

A. Atlassian Implementation Partners (Matchmaking)
We work with a global network of partners who provide consulting, implementation, and training services around Atlassian products. When you use our Partner Matching or License Marketplace services, we share relevant project requirements and contact details with pre-vetted Atlassian Solution Partners. This is done exclusively to obtain quotes or to fulfill your direct request for a partner connection.

B. Service Providers and Subprocessors
Infrastructure and Security: STRATO GmbH
Collaboration and Support: Google Workspace, Atlassian Cloud (hosted on AWS)
Business and Finance: Sparkasse Gelnhausen, Haufe-Lexware GmbH and Co. KG
AI and Automation: Anthropic PBC (See Section 6)

C. Business Transfers and Legal Requests
We may disclose information if required by law, regulation, or legal process, or in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

5. Use of Atlassian Tooling and Managed Accounts

We use Atlassian Cloud products (e.g., Jira, Confluence) to manage project lifecycles, conduct health checks, and oversee Quality Gate operations.

Managed Accounts and Administrators: If you access our collaborative Services using an email address with a domain owned by your employer, or if we are integrated into your organization's Atlassian instance, certain information about you may become accessible to your organization's administrator and to our consulting team.

If we access your Atlassian instance for audits or migrations, we operate under strict confidentiality agreements and limit access strictly to necessary personnel.

6. AI Services and Automation (Google AI, Anthropic and Atlassian Rovo)

We leverage AI to enhance operational efficiency, data analysis, and documentation.

• Providers: We utilize services by Anthropic PBC and Atlassian's native AI solutions (Atlassian Rovo).
• Data Handling: Processing may include text-based inputs (e.g., anonymized ticket data, migration documentation). We do not use personal data to train public AI models.
• Safeguards: AI usage is limited to controlled, GDPR-compliant enterprise environments with Standard Contractual Clauses (SCCs) in place where applicable.

7. Cookies and Tracking (TTDSG / GDPR)

Our website utilizes cookies and similar technologies to function properly and understand user behavior.

• Essential Cookies: Required for core site functionality, security, and network management (Art. 6 (1)(f) GDPR).
• Analytics and Performance Cookies: Used only with your explicit consent (Art. 6 (1)(a) GDPR).
• Management: You can withdraw or adjust your consent at any time via the cookie settings banner on our website.

8. International Data Transfers

Some of our service providers (e.g., Cloudflare, Google, Anthropic, Atlassian) may process data outside the European Economic Area (EEA). We ensure protection through:

• EU Standard Contractual Clauses (SCCs)
• EU-U.S. Data Privacy Framework (where certified)
• Adequacy decisions issued by the European Commission

9. Data Retention

How long we keep data depends on the type of information, purpose, and legal requirements:

• Financial and Legal Records: up to 10 years (statutory requirement)
• Project and Communication Data: retained for business relationship duration and standard liability periods thereafter
• Marketing Data: retained until consent withdrawal or unsubscribe

10. Your Rights (GDPR)

As a data subject, you have the following rights regarding personal information:

• Access (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction (Art. 18)
• Data Portability (Art. 20)
• Objection and Withdrawal (Art. 21 and Art. 7)

To exercise your rights, contact: kontakt@teams2tech.com

11. Data Security

We implement industry-standard technical and organizational measures (TOMs), including SSL/TLS encryption, role-based access controls (RBAC), multi-factor authentication (MFA), and continuous cloud security reviews.

12. Hosting and Website Operation

Our website is hosted by STRATO GmbH. Technical requests may be logged to prevent DDoS attacks, distribute traffic efficiently, and ensure high availability.

13. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect changes in service offerings, technical integrations, or legal requirements. The most current version will always be posted with the updated effective date.