We appreciate your interest in our company and your visit to our website. Data privacy and security in the use of our website are very important for us. We therefore like to inform you which kind of personal data is collected while visiting our website and for what kind of purposes it is used.
1. Data Controller and Scope
2. Name and Address of the Party Responsible
The responsible party and service provider is
(hereafter called ”GreenPocket”).
3. Data Protection Officer
If you have any questions or suggestions regarding GreenPocket’s privacy, please contact our external Data Protection Officer:
Dr. Karsten Kinast, LL.M.
KINAST Rechtsanwaltsgesellschaft mbH
Phone: +49 221 222183-0
4. General Data Processing Information
We only collect and use personal data of our users to the extent to which this is necessary to provide a fully functional website and our contents and services.
4.1. Personal Data
Personal data are all information relating to an identified or identifiable natural person. This includes information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior. Information that cannot (or only with a disproportionate effort) be referred to your person, e.g. by anonymizing the information, is not personal data.
4.2. Principles of Processing Personal Data
The processing of personal data is any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Personal data is collected via this website if you provide it to us of your own accord, e.g. as part of the application process or by completing the contact form. We use this data for the purpose as stated in each case or resulting from the inquiry, for example your e-mail address in order to be able to contact you. A disclosure to third parties only takes place if expressly permitted by law or with your prior consent. Moreover, you can use most of our website’s content without providing any personal data.
In particular, personal data is processed as follows:
4.2.1 Contact Form
If you take the opportunity to send us enquiries via our contact form, we will ask you for your first and last name and your e-mail address. Moreover, you can send us an individual message by entering your text in the message box. It is your free decision whether or not to provide us with this data. However, without this information we cannot comply with your contact request.
The purpose of entering your e-mail address is to assign your request and to be able to reply to you. When using the contact form, your personal data will not be forwarded to third parties.
The data processing described above for the purpose of establishing contact is carried out in accordance with Article 6 Paragraph 1 Littera b, Article 6 Paragraph 1 Littera f GDPR.
4.2.2. Application management
In case you want to apply with us via our website, for handling your application we need your first and last name, your email-address and your phone number, a text in the provided text box as well as your application documents, which you can upload to our website. The provision of this data is voluntary, however, without the provision we may not be able to consider your application. We assure you that we will only process the personal data you provide for the purpose of carrying out the application process. There will be no disclosure to a third party. Your data will be stored for 6 months after the end of the application process (positive or negative answer).
The legal basis for the processing of this data is article 6 paragraph 1 lit. b GDPR, as the processing is necessary for the execution of pre-contractual measures.
4.3 Legal Basis for the Processing of Personal Data
The collection and use of personal data of our users takes place regularly only with the user's consent. Insofar as we obtain the consent of the person concerned for processing operations of personal data, Article 6 Paragraph 1 Littera a GDPR serves as the legal basis for the processing of personal data.
An exception applies to those cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law. In the processing of personal data required for the fulfillment of a contract to which the person concerned is a contracting party, Article 6 Paragraph 1 Littera b GDPR serves as the legal basis. This also applies to processing operations which are necessary to perform pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation to which we are subject, Article 6 Paragraph 1 Littera c GDPR serves as the legal basis.
If processing is necessary to ensure a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the person concerned do not outweigh the first-mentioned interest, Article 6 Paragraph 1 Littera f GDPR serves as the legal basis for the processing.
5. Security measures for the protection of the data stored with us
Personal data you entrust to us via our website and in e-mail traffic are secure. We commit ourselves to protect your privacy and to treat your personal data confidentially.
In order to prevent the loss or misuse of data stored by us, we take extensive technical and operational security precautions, which are regularly checked and adapted to technological progress.
However, we would like to point out that due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions for which we are not responsible. In particular, data which is divulged in an unencrypted form - even if this is done by e-mail - can be read by third parties. We have no technical influence on this. It is the responsibility of the user to protect the data provided by him against misuse by encryption or in any other way.
6.1. Anonymous Usage Data / Usage of Cookies
We do not create user profiles. Information from your visit to our website is stored on our servers only in anonymous form in order to support our various services, or for evaluation purposes. This general information is recorded for example when and which information you read or which pages are visited most frequently.
For these purposes, we use „cookies“ (small text files containing configuration information). The cookies are used in particular in order to collect information about the frequency of use and the number of users on our websites. That way we can know which areas of our websites our users visit and how often corresponding sites are viewed.
The most browsers accept cookies automatically. You can deactivate the saving of cookies or set your browser to notify you before accepting cookies. Users that do not accept cookies may not be able to access certain areas of our site.
The use of our site is generally possible without accepting cookies.
6.2 Tools for Tracking and Analysis
We use tracking and analysis tools to ensure continuous optimization and user-oriented design of our website. With the help of tracking measures it is also possible for us to statistically record the use of our website by visitors and to further develop our online offer for you with the help of the knowledge gained.
On the basis of these interests, the use of the tracking and analysis tools described below is justified in accordance with Art. 6 para. 1 s. 1 lit. f GDPR. The following description of the tracking and analysis tools also shows the respective processing purposes and the processed data.
6.2.1 Google Analytics
The information generated by these cookies, for example about the time, place and frequency of your use of this website, is usually transferred to a Google server in the USA and stored there. When using Google Analytics, it is not excluded that cookies set by Google Analytics may collect other personal data in addition to the IP address. We would like to point out that Google may transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.
Google will use the information generated by cookies on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services associated with website and internet use. The IP address transmitted by your browser within the framework of Google Analytics is not merged by Google with other data according to its own statements.
You can generally prevent cookies from being saved by adjusting your browser settings accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
To prevent information about your use of the website from being collected by Google Analytics and transmitted to Google Analytics, you can download and install a plug-in for your browser under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
This plug-in prevents information about your visit to the website from being transmitted to Google Analytics. This plug-in does not prevent any other analysis.
By clicking on this link, an opt-out cookie is placed in your browser. This prevents information about your visit to the website from being transmitted to Google Analytics. Please note that the opt-out cookie is only valid for this browser and only for this domain. If you delete the cookies in the browser, the opt-out cookie will also be deleted. To further prevent the collection by Google Analytics, you have to click the link again. The use of the opt-out cookie is also possible as an alternative to the above plug-in when using the browser on your computer.
To ensure the best possible protection of your personal data, Google Analytics has been extended on this website by the code "anonymizeIp". This code has the effect that the last 8 bits of the IP addresses are deleted and your IP address is thus recorded anonymously (so-called IP masking). As a matter of principle, Google shortens your IP address even before the transmission within member states of the European Union or in other Member States to the Agreement on the European Economic Area and thus makes it anonymous. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
6.2.2 Google AdWords
We use the Google AdWords technology, especially conversion tracking. Google conversion tracking is an analysis service of Google Inc., 1600 Amphitheatre Parkways, Mountain View, CA 94043, USA. If you click on a Google ad, a conversion tracking cookie will be placed on your computer. The cookies are valid for 30 days and are not for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and GreenPocket can also detect that you clicked on a particular ad and were redirected to that page. Google AdWords customers each receive a different cookie. This prohibits to track cookies by the websites of AdWords customers.
The data collected using the conversion cookie are used to create conversion statistics for AdWords customers who use conversion tracking. Customers will see the number of users who clicked on their ad and were then redirected to a conversion tracking tag page. However, they do not receive any information that can be used to personally identify themselves.
If you do not want to participate in conversion tracking, you can prevent this by using a corresponding setting in your browser, for example in the form that a cookie installation is generally prevented. You can also turn off cookies for conversion tracking by setting your browser to block only cookies from the web address “googleadservices.com”.
6.3. Social Plug-Ins
6.3.1. Facebook, Twitter und Youtube
Our website contains social plug-ins of the social networks "Facebook"( Facebook Inc., 1601 S. California Ave, Palo Alto, California 94304, USA), "Twitter" (Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA) and “YouTube” (YouTube LLC., 901 Cherry Ave., San Bruno, CA 94066, USA).
These services are provided by the respective companies ("providers"). As part of our online presence, the social plug-ins are identified by the respective buttons belonging to the service. On the basis of the data transmitted to the respective service via the social plug-ins, the service can assign you to your account with it, if necessary. In order to increase the protection of your data on our website, the social plug-ins are integrated on our website by means of the so-called "2-click solution". This ensures that no automatic connection to the servers is established by the respective providers when a page of our website containing such social plug-ins is called up.
The activation of the function of the respective social plug-in takes place in two steps. To activate a social plug-in, you must first click on the link on our website. This first activates the social plug-in and your browser establishes a connection to the servers of the respective provider. With a second click you can now interact with the social plug-in and, for example, submit your recommendation. If you are already logged in to one of the social networks of the providers, the providers can immediately assign the visit to this website to your profile. If you interact with the social plug-ins by clicking on them, the corresponding information is also transmitted directly to a server of the providers and stored there. The information may also be published on the social network and displayed there under your contacts. If you wish to prevent such immediate assignment of your data collected via our website to your profile, you must log out of your account of the respective provider before visiting our websites.
The scope and purpose of the data collection by the respective service as well as further processing and use of your data there can be found in the data protection information directly from the website of the service. There you will also receive further information about your corresponding data protection rights and setting options for the protection of your privacy:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
b) Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA
c) YouTube LLC., 901 Cherry Ave., San Bruno, CA 94066, USA
Https://www.xing.com/app/share?op=data_protection and www.xing.com/privacy.
6.4. Right to Object
In case the processing of your personal data is based on legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR insofar as there are reasons which arise from your particular situation or if the objection refers to direct marketing. In the case of direct marketing, you have a general right to objection which will be considered without mentioning any particular situation.
Our website contains hyperlinks to websites of other providers. When you activate these hyperlinks, you will be directed directly to the other providers' website. You will recognize this when the URL is changed. Please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. This is especially applicable for facebook.com. Please check these policies before you submit any personal information to these websites.
8. Use of Service Providers for the Processing of Personal Data / Processing of Data in Countries Outside the European Economic Area
We use service providers to provide services and to process your data relating to our services and products. The service providers process the data exclusively in accordance with our instructions and have been obliged to comply with the applicable data protection regulations. All contractors have been carefully selected and will only have access to your data to the extent and for the time required to provide the services or to the extent to which you have consented to the processing and use of your data.
Service providers in countries such as the USA or in countries outside the European Economic Area are subject to data protection that does not generally protect personal data to the same extent as in the member states of the European Union. If your data is processed in a country which does not have a level of data protection which is recognized as being congruent to the one of the European Union, we use contractual regulations or other recognized instruments to ensure that your personal data is adequately protected.
9. Storage Time
We only store your personal data for as long as is permitted by law. Stored personal data will be deleted if the user withdraws his consent to its storage or if knowledge of this data is no longer necessary to fulfil the purpose for which it was stored, in particular if its storage is inadmissible for other legal reasons. Relevant legal retention periods from the German Commercial Code or the Tax Code remain unaffected by this. During the legal retention period, your personal data will be blocked and not used for any other data processing.
10. Your Rights as a Data Subject
If your personal data are processed, you are a data subject within the meaning of the General Data Protection Regulation (GDPR) and the following rights apply to you:
- Pursuant to Art. 15 GDPR you can request information about your personal data processed by us.
In particular, you may obtain information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the right to lodge a complaint with a supervisory authority, the origin of your data, if not collected from us, about transfer to third countries or international organisations, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about the logic involved.
- Pursuant to Art. 7 para. 3 GDPR you can withdraw your consent at any time. As a consequence, we are no longer allowed to continue the data processing based on this consent for the future.
- Pursuant to Art. 16 GDPR you can immediately demand the correction of incorrect data or the completion of your personal data stored with us.
- Pursuant to Art. 17 GDPR, you may request the deletion of your personal data stored by us, provided that the processing is not necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
- Pursuant to Art. 20 GDPR, you may request that the personal data you have provided us with be received in a structured, current and machine-readable format or you may request that it be transmitted to another person responsible.
- Pursuant to Art. 18 GDPR, you can request the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful, if we no longer need the data and if you refuse their deletion because you need to establish, exercise or defend legal claims. You are also entitled to the right under Art. 18 GDPR if you have objected to the processing in accordance with Art. 21 GDPR.
- Pursuant to Art. 77 GDPR, you have the right to complain to a supervisory authority. You can contact the supervisory authority of your habitual residence, place of work or our company headquarters.