Privacy policy

1. Responsible for this website

The responsible body for data processing on this website is the operator:

GREAN GmbH
An der Universitaet 2, 30823 Garbsen, Germany

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

2. General information on data collection

The collection of data is based on

• 6 para 1 lit. a GDPR (consent),
• 6 para. 1 lit. b GDPR (performance of contract),
• 6 para. 1 lit. c GDPR (legal obligation) or
• 6 para. 1 lit. f GDPR (legitimate interest).

Data collection (purpose)

Your data is on the one hand collected by the fact that you communicate it to us (Request by form, e-mail, telephone, fax or letter).

Other data is collected automatically by our IT systems or after your consent when you visit the website (Server LogFiles) This is mainly technical data. The collection of this data takes place automatically as soon as you enter this website.

Data processing

Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyze user behavior.

Storage period

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you assert or revoke a legitimate request for deletion, your data will be deleted unless we have other legally permissible reasons for storing your personal data; in the latter case, the deletion will take place after these reasons have ceased to exist.

3. Rights of data subjects

You have the right to receive information about your stored personal data free of charge at any time. If you have given your consent to data processing, you can revoke this consent at any time for the future. As a data subject, you have the following rights under the EU General Data Protection Regulation (EU GDPR) in connection with the processing of your personal data:

• Right of revocation at any time according to Art. 7 para. 3 EU DSGVO
• Information rights according to Art. 13 and Art. 14 EU GDPR
• Right to information according to Art. 15 EU DSGVO
• Right of rectification according to Art. 16 EU DSGVO
• Right to deletion according to Art. 17 EU DSGVO
• Right to restriction of processing according to Art. 18 EU DSGVO
• Data portability according to Art. 20 EU GDPR
• Right to object at any time according to Art. 21 EU DSGVO
• Right to complain to a supervisory authority according to Art. 77 EU GDPR

4. Revocation and applications

Please send your revocation or requests regarding the rights in writing to:

GREAN GmbH, An der Universitaet 2, 30823 Garbsen, Germany

Or by email to: info@grean.de

5. Hosting: service providers and order processing

This website is hosted by an external service provider:

IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany

The personal data collected on this website may be stored on the servers of the service provider. Our service provider will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions in relation to such data.

The service provider is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO).

Order processing

The service provider collects and processes your personal data on our behalf. We have concluded an data processing agreement (DPA) with the above-mentioned provider.

6. Protection of data on this website

The service provider uses technical and organizational security measures in order to protect the personal data you have made available to us from manipulation, loss, destruction or access by unauthorized persons. The security measures are continuously improved and adapted according to state-of-the-art technology.

SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

7. Data collection on this website

Server LogFiles

To maintain secure server operation, information is automatically collected and stored in so-called LogFiles. Your browser transmits this information automatically. These are:

• Date and time at the time of access
• IP address used
• Browser used
• Operating system used
• Amount of data sent in bytes

This data is not merged with other data sources. The collected data will not be used for the purpose of drawing conclusions about your person. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.

Request by form, e-mail, telephone, fax or letter

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up enquiries.

If you contact us by e-mail, telephone or fax, your enquiry including all personal data resulting from it (name, enquiry) will be stored and processed by us for the purpose of processing your request.

We do not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested.

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after processing your request has been completed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Job Application

We collect and process the personal data of applicants for the purpose of handling the application process. The processing may also take place electronically. This is particularly the case if an applicant submits corresponding application documents to us electronically.

The data processing helps to carry out the application procedure, in particular to establish an employment relationship. The legal basis for this is Article 6(1) b) of the DSGVO in conjunction with Section 26 (1) sentence 1 of the German Federal Data Protection Act (BDSG) or the corresponding national law.

If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.

If the applicant concerned gives his/her consent to this, the data will be stored in the event of non-employment for the consideration of the applicant for future job offers for a period of 12 months (or until any prior revocation of consent) after the conclusion of the application process.

If the controller does not conclude an employment contract with the applicant, the application documents will be deleted two months after notification of the rejection decision, provided that no other legitimate interests of the controller prevent deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

Provision of information – Newsletter

On this website a free newsletter subscription is offered.

For the purpose of processing the newsletter, personal data (entry data: first name, last name, email address and date and time of registration) are used. A processing and use of the data takes place exclusively for the registration and the sending of the newsletter.

After entering the e-mail address, users receive an e-mail with a confirmation link to confirm the authenticity of the address and the subscription (“double opt-in”). As far as you do not confirm the registration by the link in this e-mail, the data will not be actively included in the distribution list.

The legal basis for the processing of data in connection with the dispatch of newsletters is their consent in accordance with Article 6 (1) a GDPR. The newsletter subscription can be cancelled at any time, for example via the “unsubscribe” link in each newsletter. If the subscription is cancelled, all personal data is deleted from our database.

E-Mail Marketing Online Service: Brevo

This website uses the Brevo online service of Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany for e-mail marketing.

Brevo is a service with which we organize and analyze the registration process and newsletter distribution. The data you enter for the purpose of registration is stored on Brevo’s servers. Brevo is prohibited from selling your data and using it for purposes other than sending newsletters.

Brevo products are DSGVO-compliant and certified. Your data is hosted on ISO-certified servers in Germany. For more information for newsletter recipients, click here: https://www.brevo.com/information-for-email-recipients

With the help of Brevo, it is possible for us to analyze the newsletter campaigns. Here it can be analyzed how many recipients have opened the newsletter and how often which link in the newsletter was clicked. All links in the e-mail are so-called tracking links, with which your clicks can be counted.

The data you provide to us for the purpose of the registration process and newsletter dispatch will be stored until you revoke it and then deleted. The other personal data collected during the registration process is usually deleted after a period of seven days.

For more information, see Brevo’s privacy policy at: https://www.brevo.com/legal/privacypolicy

8. Online services and cookies

This website does not use external online services for the purpose of measurement and performance.

Cookies

When you visit our website, information may be stored on your computer in the form of a so-called cookie (small text files). Technically necessary cookies are only used to ensure the operation of the websites.

Furthermore, you can also set the acceptance of cookies via your browser settings. However, we would like to point out that deactivating cookies may limit the functionality of this website.

Sharing in social networks

Sharing takes place exclusively from links to social networks on our website:

If you share content on our website with your personal profile, we have no control over the content and scope of the data collected by the networks. In this respect, the terms of use and privacy policy of the respective social network apply.

On this website, our company profiles of the following social networks are linked:

LinkedIn

For information on the LinkedIn business network, of LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA, (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) please visit: https://www.linkedin.com/legal/privacy-policy

XING

For information on the XING business network, of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, please visit: https://privacy.xing.com/en/privacy-policy

YouTube

For information on the YouTube video portal, of YouTube, LLC, belonging to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, (a subsidiary of Google LLC and Alphabet Inc.) please visit: https://policies.google.com/privacy?hl=de

9. Status privacy policy

This privacy policy has the processing status of May 1, 2023.