Last updated: Sept 25, 2025
2 MIN MAX, a simplified joint-stock company (SAS) with a capital of €30,000, registered with the Lyon Trade and Companies Register under number 987 618 659 and headquartered at 11 Rue du 8 Mai, 69110 Sainte-Foy-lès-Lyon, France, is the controller of the personal data collected via its website www.2minutesmax.com and its application app.2minmax.com.
1. What data do we collect?
We only collect the data strictly necessary for the proper operation of the service:
For candidates:
-
First name, last name, email address, objective (.g. internship, full-time job, competition, admission…)
-
Pitch video, profile title, access key, generated PDF, QR code
-
Profile history (creation, sharing, deactivation, deletion)
-
A thumbnail can be selected by the candidate from their video to serve as the profile preview. It is not a personal photo.
- and, if provided, your phone number (optional), used only in case of technical issues.
For professionals:
-
First name, last name, company, email, phone number
-
Billing details (via Stripe)
-
Viewing history of shared profiles
For profile visitors:
-
Professional email address entered to access a profile
-
Only the domain name is extracted (e.g., @company.com) and used anonymously for statistical purposes
2. Why do we process this data?
| Purpose | Legal Basis |
|---|---|
| Account creation and user management | Contract |
| Secure hosting and storage of videos | Legitimate interest |
| Secured access to profiles (via URL + key or pro account) | Legitimate interest |
| Viewing statistics and weekly reports for premium users | Legitimate interest |
| Transactional or follow-up emails | Legitimate interest / consent |
| Payment and billing via Stripe | Contract / legal obligation |
3. Who has access to your data?
-
Internal teams of 2 MIN MAX
-
Trusted third-party processors:
-
Hosting: OVH (France)
-
Email delivery: Brevo (EU)
-
Payments: Stripe (outside the EU, covered by standard contractual clauses)
-
We never sell, rent, or share your data with unauthorized third parties.
4. How long is your data stored?
-
Account data: 2 years after last activity
-
Videos: deleted after 12 months of inactivity by the user (no login, edit, or share)
-
Visitor emails: 3 months max
-
Visitor domain names: 6 months max
-
Billing data: 10 years (legal requirement)
5. What are your rights?
You may request at any time:
-
Access to your data,
-
Correction or deletion,
-
Data portability,
-
Objection or restriction,
-
Withdrawal of your consent (if applicable)
To exercise your rights, email us at hello@2minutesmax.com
You may also file a complaint with the French Data Protection Authority (CNIL) at www.cnil.fr.
6. Data security
-
Videos are securely encrypted in storage
-
Passwords are stored in hashed form
-
Only authorized users have access to personal data
-
Profile access is secured via a private access key or a validated professional account
-
The profile thumbnail is selected by the user from their video
7. Cookies
Our site uses only cookies strictly necessary for navigation and the proper functioning of the service.
We do not use any third-party tracking or advertising cookies.
