Greenpertise takes the protection of your personal data very seriously. We treat your personal data with confidentiality in accordance with the statutory data protection regulations and this privacy policy. When using Greenpertise services and participating in Greenpertise related activities, you hereby agree to the following:
When using Greenpertise services, personal data is collected and processed. Personal data is data with which you can be personally identified. This privacy policy clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within the activities of Greenpertise. The online offering includes related websites, and external online presences, such as social media profiles (collectively referred to as “online offering”). With regard to the terminology used, e.g., “Processing” or “Responsible Officer,” we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
1. Data Collection at Greenpertise
The party responsible for data processing on this website and related sites is: [Jacqueline Kressner and Darshini Waibel].
For questions regarding the handling of your personal data, you can contact our Data Protection Coordinator at [info@greenpertise.com]
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.2. How do we collect your data?
Your data is collected by communicating it to us, including by:
1.3. What do we use your data for?
We need your data to be able to create your user account in order to provide our services, as well as to pair you with the ideal candidate. Users decide whether their profile will be publicly accessible via the privacy configuration in your account. Please keep in mind that if you publish your profile for public access, your profile information could appear in a Google search. Some of the data is collected in order to ensure an error-free provision of Greenpertise.
In this case, the processing takes place on the legal basis of contract performance according to Art. 6 Para. 1 lit.b GDPR).
1.4. Automated data collection
Other data is collected automatically when accessing our website for technical reasons by our IT systems. These are mainly technical data (e.g., IP address, Internet browser, operating system, or time of the page view). This data is collected automatically as soon as you enter our website, and is only used to provide you with our online services.
In this case, the processing takes place on the basis of our predominantly legitimate interests mentioned above (Art. 6 Para. 1 lit.f GDPR).
1.5. What rights do you have regarding your data?
You are the owner of your data. Thus, you have the right at any time to request information free of charge about the origin, recipient, and purpose of your stored personal data. You also have a right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time in the future. In addition, you have the right to request the restriction of the processing of your personal data in certain circumstances. You also have the right to lodge a complaint with us or the competent supervisory authority. You can find a more detailed list of your rights in point [5] of this privacy policy.
2. Web Hosting
To provide our online services, we use storage space, computing capacity and software that we rent or otherwise obtain from a corresponding server provider (also known as a "web hosting provider"). We use the company PythonAnywhere as a web hosting provider.
3. Retention period
Your personal data will remain with us until the purpose for data processing no longer applies. If you make a subject request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (for example, retention periods under tax or commercial law); in the latter case, the deletion takes place after these reasons have ceased.
4. International Data Transfers
We may use tools from companies based in the USA or other third countries that might not count with an EU adequacy decision. If these tools are active, your personal data might be transferred to these third countries and processed there. Although the level of data protection in these countries is not comparable to the EU, all companies that Greenpertise contracts with are previously assessed through a Transfer Impact Assessment (TIA) to ensure that they implement good privacy practices. In countries such as the US, companies might be required to disclose personal data to governmental authorities without you, as a data subject, being able to take legal action against this. It can, therefore, not be excluded that US authorities (such as secret services) process, evaluate, and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.
However, we refer to these services below and implement the standard data protection clauses approved by the EU Commission in accordance with Art. 46 para 2 lit. c GDPR.
5. Rights of Data Subjects
5.1. Right to information
As a Data Subject, you have the right to request information from us at any time about the personal data processed by us in the scope and under the conditions of Art. 15 GDPR and § 44 DSG. To do this, you can submit your request through [email] or postal service to the address specified in our imprint.
5.2. Revocation of consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. The legality of the data processing carried out before the revocation remains unaffected by the revocation.
5.3. Right to rectification and erasure
As a Data Subject, you have the right to request Greenpertise for the immediate correction of your personal data if it is incorrect. You also have the right to request the erasure of your data in the scope and under the conditions of Art. 17 GDPR and § 45 DSG. For this, please get in touch with the contact addresses given above.
5.4. Right to object (Article 21 GDPR)
Suppose the data processing is based on Article 6 para 1 lit. e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling, legitimate reasons for the processing that are your interests, Rights and freedoms predominate or the processing serves to assert, exercise or defend legal claims (objection pursuant to Article 21 paragraph 1 GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, as far as it is connected with such direct advertising. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Article 21 paragraph 2 GDPR).
5.5. Right to lodge complaints
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right of appeal is without prejudice to other administrative or judicial remedies.
5.6. Right to data portability
You have the right to have data that we process on the basis of your consent or in fulfilment of a contract automatically handed over to you or to a third party in a commonly used, machine-readable format. If you require the direct transfer of the data to another person responsible, this will only be done as far as it is technically feasible.
5.7. Right to restriction of processing
You have the right to request the restriction of the processing of your personal data by contacting us at any time. The right to restriction of processing exists in the following cases:
If you have restricted the processing of your personal data, this data – apart from its storage – may only be used with your consent or for asserting, the exercise or defence of legal claims or the protection of the rights of another natural or legal person or on the grounds of an important public interest of the European Union or of a Member State.
7. Inquiries
When contacting us with inquiries, your request, including anything related to personal data (name, request type, etc.), will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
These data are processed on the basis of Article 6 Paragraph 1 lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Article 6 paragraph 1 lit. f GDPR) or on your consent (Article 6 paragraph 1 lit. a GDPR) if this has been requested.
The data sent by you to us via contact requests will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (for example, after the complete processing of your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
8. Third-party tools and plug-ins
8.1. Google Suite
We use Google Suite, the provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland as a processor. This allows us to store information, create forms, surveys, among many other activities. This processing is necessary to ensure the smooth operation of our contractual services (Art. 6 para. 1 lit. b GDPR). The consent can be revoked at any time.
8.2. Notion
We use Notion, the provider Notion Labs inc, 2300 Harrison Street, Floor 2, San Francisco, CA 94110 USA as a processor. This allows us to store information, create forms, surveys, among many other activities. This processing is necessary to ensure the smooth operation of our contractual services (Art. 6 para. 1 lit. b GDPR). The consent can be revoked at any time. Data may be processed in the United States. For more information please see Notion’s privacy policy.
8.3. Brevo
We use Brevo, the provider Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France, as a processor. This allows us to store information, use cloud-based marketing communication software suite with email marketing, transactional email, marketing automation, customer-relationship management, landing pages, Facebook ads, retargeting ads, SMS marketing, and more.This processing is necessary to ensure the smooth operation of our contractual services (Art. 6 para. 1 lit. b GDPR). The consent can be revoked at any time. For more information please see Brevo’s privacy policy.
Subscribe now to stay informed and be part of the positive change.
