With this Privacy Policy We inform you about our policies regarding collection, storage And use of personal data that we receive B. from users of our website, or in other forms in the case of business cooperation. We use all information and data collected to provide and improve our services and our website. By choosing to interact with us or continue to use our website, you agree to the collection and use of your personal data in accordance with this policy.
When collecting, storing and using your personal data (in whatever form), we take into account General EU Regulation on the protection of personal data (hereinafter "GDPR").
Types of personal data collected by the controller
The Controller may collect the following personal data in accordance with this Privacy and Data Protection Policy:
- basic information about the user that we need to provide services and issue invoices (first and last name, home address);
- Contact information and information about your communication with us (email address, telephone number);
- Data on the user's use of our website (date and time of website visits, pages or URLs visited, time spent on each page, number of pages visited, total time spent on the website, etc.);
- Data from completed inquiry forms on our website (first name, last name, email address);
- Data provided when registering for e-news (first name, last name, e-mail address);
- other data that the user voluntarily communicates to the controller
The controller of personal data does not collect or process your personal data unless necessary You activate this or you agree to this, i.e. when you sign up to receive e-news, when you fill in a form on the website or when there is an appropriate legal basis for collecting personal data.
Legal basis for the processing of personal data
The controller collects and processes your personal data on the following legal bases:
- processing based on the law,
- processing based on a contract,
- processing based on the consent of the individual,
- Processing based on legitimate interest.
processing based on the law
We process your personal data if such processing is required by law (e.g. tax legislation requires the retention of issued invoices). We process this personal data in accordance with the legal requirements.
processing based on a contract
We need your data to the extent that it is necessary for the conclusion of the contract and the fulfillment of contractual obligations. The provision of personal data in this case is voluntary. If the person does not provide personal data, the company will not be able to conclude a contract with him and will not be able to provide the service or deliver goods or other products in accordance with the concluded contract, since it does not have the data necessary for its implementation.
processing based on individual consent
We process your data if you give us your explicit consent. Typical examples are: registering for e-news, sending inquiries via online forms, participating in a competition, etc. If a person gives their consent to the processing of personal data and at some point no longer wants it, they can withdraw this consent at any time.
processing based on legitimate interest
The legitimate interest of the controller may be a permissible basis for processing personal data, unless such interests override the interests or fundamental rights and freedoms of the individual to whom the personal data relate. The implementation of legitimate interests often takes place without the individual actively influencing the processing itself.
access to social networks
About our website You can access GreenUp Facebook And Linkedin:
As social networks, Facebook and Instagram act in accordance with their terms of use and privacy policies when providing their services. Questions and the exercise of rights should therefore be directed directly to the respective social network.
time of storage of personal data
The duration of storage of your personal data depends on the legal requirements and the purpose of data collection and storage. We will store your personal data for as long as determined by the GDPR regulations or as long as it is necessary to achieve the purpose for which certain personal data were collected. After the expiry of the storage period, the administrator of the personal data is efficiently and permanently entitled delete but anonymize, so that an assignment to a specific person is no longer possible.
Weitergabe personsbezogener Daten an Dritte
As a user of our website, you are aware and agree that the controller of personal data can trust the personal data collected to authorized third parties (Processors). Processors may only process confidential data on behalf of the Controller and in accordance with the purposes set out in this Privacy and Personal Data Protection Policy.
The contract processors with whom the controller cooperates for personal data are:
- IT system administrators,
- website administrator,
- email provider,
- providers of online advertising solutions,
- accounting service providers.
The controller of personal data will not disclose your personal data to unauthorized third parties.
protection and protection of personal data
The controller of personal data always endeavours Our preview of Ensuring the security of your personal data through organizational and technical measures such as:
- Protection of information systems with antivirus programs and a firewall;
- employee training;
- careful selection and control of data processors;
- Preventing unauthorized persons from accessing personal data;
- Securing electronically stored data;
- regular maintenance and updating of computer equipment;
- Providing an effective way to block, destroy, delete or anonymize personal data;
- Adoption of relevant internal rules and instructions on the protection of personal data;
- etc.
With the measures mentioned, we try to protect the personal data collected from loss, destruction, falsification, manipulation and unauthorized access or disclosure. However, we must not forget that no form of data transmission over the Internet and no method of electronic storage is 100% secure. Consequently, We cannot guarantee complete security your personal data.
individual rights
According to the GDPR, you have the right:
- access to your personal data,
- Changes to your personal data,
- deletion of your personal data,
- transmission of your personal data,
- restrict the processing of your personal data,
- Revocation of consent to the processing of your personal data.
If you wish to exercise any of your rights, please contact our data protection officer, as previously stated in this Privacy Policy.
Notification to the supervisory authority of a breach of the protection of personal data
In case of violations of the protection of personal data The controller of the personal data is obliged to do so notify the competent supervisory authority, unless it is likely that the rights and freedoms of the individual were not jeopardized by the breach. If at the time of the breach there is a suspicion that a criminal offence has been committed, the controller of personal data is obliged to inform the police and/or the competent public prosecutor's office about the breach.
Where the breach is likely to pose a high risk to the rights and freedoms of natural persons, the controller shall be obliged to notify the breach without undue delay or, if that is not possible, without undue delay. Notify individualsto which the personal data relate. The communication to the individual must be made using intelligible and clear language.
Announcement of Changes to the Privacy Policy
This Privacy and Personal Data Protection Policy may be change or add at any time, without prior warning or notification, so it is recommended to monitor it regularly. Any changes will be posted on this website.
By using the website, the person confirms that accepts and agrees to the entire content this Privacy and Data Protection Policy. If you have any questions or concerns, please contact our Data Protection Officer listed at the top of this Privacy Policy.