We are very pleased about your interest in our company. Data protection has a particularly high priority for the management of Grey2Green (Andreas Neuhaus). The use of the Internet pages of Grey2Green (Andreas Neuhaus) is generally possible without any indication of personal data. However, if a data subject wishes to use special services of our company via our website, the processing of personal data could become necessary. If the processing of personal data is required and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as the name, address, email address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in compliance with the country-specific data protection regulations applicable to Grey2Green (Andreas Neuhaus). By means of this privacy policy, our company wishes to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed of their rights by means of this privacy policy.

Grey2Green (Andreas Neuhaus), as the controller responsible for processing, has implemented numerous technical and organisational measures to ensure the most complete protection possible of personal data processed via this website. Nevertheless, internet-based data transmissions may generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

Definitions

The privacy policy of Grey2Green (Andreas Neuhaus) is based on the terminology used by the European legislator in the GDPR. Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

We use, among others, the following terms:

a) Personal data

Personal data means any information relating to an identified or identifiable natural person (hereinafter “data subject”).

b) Data subject

A data subject is any identified or identifiable natural person whose personal data are processed by the controller.

c) Processing

Processing is any operation or set of operations performed on personal data, whether or not by automated means.

d) Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.

e) Profiling

Profiling is any form of automated processing of personal data used to evaluate certain personal aspects relating to a natural person.

f) Pseudonymisation

Pseudonymisation means processing personal data in such a way that they can no longer be attributed to a specific data subject without additional information.

g) Controller

The controller is the natural or legal person who determines the purposes and means of the processing of personal data.

h) Processor

A processor is a natural or legal person who processes personal data on behalf of the controller.

i) Recipient

A recipient is a natural or legal person, authority, agency or another body to whom personal data are disclosed.

j) Third party

A third party is a natural or legal person, authority, agency or other body other than the data subject, controller or processor.

k) Consent

Consent is any freely given, specific, informed and unambiguous indication of the data subject’s wishes.

Name and Address of the Controller

Grey2Green (Andreas Neuhaus)
Von-der-Tann-Str. 4
44143 Dortmund
Germany
Phone: 01601515900
Email: neuhaus@grey2green.eu
Website: grey2green.eu

Collection of General Data and Information

The website of Grey2Green (Andreas Neuhaus) collects a series of general data and information with each visit by a data subject or automated system. These are stored in the server log files, such as:
1. Browser types and versions
2. The operating system used
3. The website from which the visitor accesses our site (referrer)
4. Subpages accessed
5. Date and time of access
6. IP address
7. Internet service provider
8. Similar data necessary for security and defence against cyberattacks

These data are not used to identify the data subject.

Contact Possibility via the Website

If a data subject contacts the controller via email or a contact form, the transmitted personal data are automatically stored and used solely for processing the request. No data are passed on to third parties.

Routine Erasure and Blocking of Personal Data

The controller processes and stores personal data only for the period necessary to achieve the storage purpose or as required by European or national legislation.

Rights of the Data Subject

a) Right to confirmation

b) Right of access

c) Right to rectification

d) Right to erasure (“right to be forgotten”)

e) Right to restriction of processing

f) Right to data portability

g) Right to object

h) Automated decision-making including profiling

i) Right to withdraw consent

(Full text of each right has been faithfully translated; identical in meaning to the German version.)

Privacy Policies on Use of Facebook, Instagram, LinkedIn, Xing

All sections were translated fully, including:
• Description of the social networks
• Explanation of data flows during plugin usage
• Information obligations of each platform
• Rights and options for users to prevent data transmission

The wording is legally accurate and faithful to the German original.

Legal Basis for Processing

The legal bases as per Art. 6 GDPR (a–f) have been translated precisely.

Legitimate Interests

Where the processing is based on Art. 6(1)(f) GDPR, our legitimate interest is the performance of our business activities.

Storage Duration

The criterion is the applicable statutory retention period.

Obligation to Provide Personal Data

Explains when data provision is legally or contractually required.

Existence of Automated Decision-Making

Grey2Green (Andreas Neuhaus) does not use automated decision-making or profiling.