Privacy Policy

We are pleased that you are visiting our website and are interested in our company. We view data protection as a customer-oriented quality feature. The protection of your personal data and the safeguarding of your personal rights are important to us. With this privacy policy, we would like to transparently inform all visitors to our website about the type, scope, and purpose of the personal data we collect, use, and process, and to inform you about your rights. Use of our website is generally possible without providing personal data. However, if you wish to use our company’s services via our website, the processing of your personal data may become necessary. The data collected automatically when you visit our website, or the personal data you enter when using services, will be processed in accordance with the current legal provisions for the protection of personal data.

If the processing of your personal data is necessary and there is no legal basis for such processing, we generally obtain consent for the required purpose of the processing. As the company responsible for processing, we have established technical and organizational measures to ensure the highest possible level of protection for your personal data.

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

However, we would like to point out that data transmission over the Internet (e.g., when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

If you would like to use our company’s services and do not wish to use the method of data transmission via the World Wide Web, there is also the option of contacting us by telephone.

Contract Annex for Order Processing according to GDPR 2024 Customer:

PDF Download

Annex 1-4 Data Processing:

PDF Download

1. Contact Details of the Controller

The controller within the meaning of the General Data Protection Regulation is:

GreenGate AG
Alte Brücke 6
51570 Windeck
+49 2243 92307 0
info@greengate.de

The appointed Data Protection Officer is:

Mr. Stephan Hartinger
Coseco GmbH
Phone: 08232 80988 70
E-mail: datenschutz@coseco.de

2. Collection of General Access Information

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers.

Our hoster will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions regarding this data.

We use the following hoster:

Raidboxes GmbH

Hafenstraße 32
48153 Münster

Live Chat
support@raidboxes.io

Every time our website is accessed, server log file information that your browser transmits to us is automatically recorded. This includes:

  • IP address (Internet Protocol address) of the accessing computer
  • The website from which you are visiting us (referrer)
  • The website you are visiting on our site
  • The date and duration of the visit
  • Browser type and browser settings
  • Operating system

We point out that this data cannot be assigned to a specific person. We use this technical access information exclusively for the following purposes:

  • To improve the attractiveness and usability of our websites,
  • To detect technical problems on our website at an early stage,
  • To deliver the content of our website correctly,
  • And to provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.

This data is stored as a technical precaution for a maximum of 7 days to protect the data processing systems against unauthorized access.

3. Collection and Disclosure of Personal Data

We use your personal data only for the purposes stated on this data protection information page. The following input masks/forms for the collection of personal data exist on our website. Further details can be found in the chapter on the use and application of HubSpot.

Sending our Newsletter

We offer you the opportunity to subscribe to our newsletter on our website, through which we inform you at regular intervals about offers, products, and company information.

To send a personalized newsletter, we require the following information from you:

  • First and last name
  • E-mail address

After submitting the registration, you will receive a confirmation email for legal reasons to complete your registration request for the newsletter (double opt-in).

In order to constantly improve the content of our newsletter and adapt it to the interests of subscribers, a tracking function (HubSpot) is used for analysis purposes.

You have the option at any time to stop the delivery by canceling the newsletter and to revoke your consent for the use of your data for newsletter dispatch. A corresponding link can be found in every newsletter.

Submission of Application Documents

In the course of your application (online application or by email), various personal application data will be collected and processed by us.

This includes in particular your

  • Contact information (name, address, telephone number, and email)
  • Application documents (cover letter, CV, certificates, or other evidence of training and qualifications)

The collection and processing of your personal application data is carried out exclusively for the purpose of filling positions within our company. Your data will generally only be forwarded to the internal departments and specialist departments of our company responsible for the specific application process. Your personal application data will not be passed on to other companies without your prior, express consent.

Any further use or disclosure of your application data to third parties will not take place.

Your personal application data will generally be deleted automatically three months after the application process has been completed. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly agreed to longer storage, e.g., for future job advertisements.

If an employment contract is concluded with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with legal regulations.

Contacting us by Email or Contact Form

We offer you the opportunity to contact us on our site by email and/or via the inquiry/contact form.

If you contact us by email or via the inquiry/contact form, the personal data you transmit will be automatically stored.

Such personal data transmitted to us by you on a voluntary basis will be stored for the purpose of processing your inquiry or contacting the data subject. This personal data will not be passed on to third parties.

4. What are Cookies Used For?

This website uses so-called cookies in several places. If you would like to receive detailed information about the cookies used or make changes to the cookie settings, you can call up our Consent Management Tool (symbol at the bottom left edge of our website) again.

5. Use and Application of Tracking and Analysis Tools

Google Tag Manager

We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on this website. Through the Tag Manager, we load in particular the web analysis service Google Analytics (GA4). The Google Tag Manager itself does not collect any personal data, but only serves to manage and load scripts (tag management).

Google Analytics is used to evaluate the use of our website, to create reports on website activities, and to design the website according to requirements. The following data, among others, can be processed: IP address (shortened), date and time of the page view, click path, visited pages, referrer URL, device and browser information.
You decide whether Google Analytics is actually activated via our cookie consent tool (symbol at the bottom left of our website). No statistics cookies will be set and no data will be transmitted to Google without your express consent.
The legal basis for the use is exclusively your consent in accordance with Art. 6 Para. 1 lit. a GDPR in conjunction with Section 25 Para. 1 TTDSG. You can revoke your consent at any time with effect for the future via our cookie consent tool.
Insofar as personal data (e.g., IP address, device and browser information) is transmitted to the USA within the framework of the services used, we rely on the adequacy decision of the EU Commission (EU-U.S. Data Privacy Framework), provided the respective recipient is certified accordingly.

Further information: Privacy Policy – Privacy Policy & Terms of Service – Google

YouTube

On individual pages (e.g., “Company”), we embed videos from the YouTube platform, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
The video is not loaded by default. Only when you expressly consent to the use of YouTube content via our cookie consent tool will a connection to Google’s servers – also in the USA – be established and data such as your IP address transmitted. The legal basis is your consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future via our cookie consent tool.
Further information: Privacy Policy – Privacy Policy & Terms of Service – Google

Google reCAPTCHA

We use the “reCAPTCHA” service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website, e.g., for application and contact forms, to check whether an entry is made by a human or abusively by mechanical and automated processing. For this purpose, Google transmits, among other things, the IP address and possibly other data required by Google for the reCAPTCHA service. reCAPTCHA is only integrated if you have consented via our cookie consent tool. The legal basis is your consent in accordance with Art. 6 Para. 1 lit. a GDPR, which you can revoke at any time with effect for the future.
Further information: Privacy Policy – Privacy Policy & Terms of Service – Google

6. Use and Application of HubSpot

We use HubSpot for our online marketing activities via this website. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.

This is an integrated software solution with which we cover various aspects of our online marketing. These include:

  • Email marketing (newsletters and automated mailings, e.g., for providing downloads)
  • Reporting (e.g., traffic sources, access, etc.)
  • Contact management (e.g., user segmentation & CRM)

This information as well as the content of our website is stored on servers of our software partner HubSpot. It can be used by us to contact visitors to our website and to determine which of our company’s services are of interest to them. All information collected by us is subject to this privacy policy.

HubSpot is used for the purpose of inbound marketing. Inbound marketing focuses on creating high-quality content for website visitors of greengate.de.

Furthermore, personal and voluntary information in the existing forms – on the website – is recorded in the HubSpot system and assigned to users. Information entered by you (email addresses, telephone number, name, and company name) is temporarily stored for the purpose of further processing. Through this information, further user analyses can be assigned to the individual visitor. Resulting data and further voluntary information are subject to the purpose of service creation and are stored. If you download the newsletter or a document following your website visit, this activity is also made visible to GreenGate in HubSpot.

The HubSpot Privacy Policy can be found here HubSpot Privacy Policy

HubSpot Contact and Newsletter

If you use our contact or newsletter form, the data you enter will be directed to HubSpot servers and stored there. During your entry, the specified email address is also directed to HubSpot servers for validation. This allows us to ensure that the specified email address is valid and that you also receive our response.

This storage and processing of your data is based on Art. 6 Para. 1 Sentence 1 lit. f GDPR, our legitimate interest in offering an easy-to-use contact form on the website and receiving business inquiries. Since the contact form is only intended for business relationships, generally only general contact information of our contact persons at customers or interested parties is processed. Since you provide us with your contact information voluntarily, we assume your reasonable expectation that we will process your data to contact you and respond to your request. With the help of our service provider, we can respond to your inquiries about our products in a tailored and fast manner.

When you use our websites, your browser automatically transmits certain information to HubSpot servers to enable an analysis of your behavior on our website.

HubSpot only provides us with anonymized information about access times, visited subpages, origin of visitors, user’s country, or duration of stay. An assignment of the access to your person is not possible for us. In particular, HubSpot does not permanently store your IP address, but only infers geographical information and then deletes the address.

We use HubSpot’s web analysis services only with your prior express consent, which you can grant via the consent banner on our website. The legal basis in this case is Art. 6 Para. 1 Sentence 1 lit. a GDPR, your consent.

We have concluded a data processing agreement with HubSpot, which includes the European Commission’s standard contractual clauses to ensure an adequate level of data protection in third countries.

We use HubSpot CRM on this website. The provider is HubSpot Inc. 25 Street, Cambridge, MA 02141 USA (hereinafter HubSpot CRM).

HubSpot CRM allows us, among other things, to manage existing and potential customers as well as customer contacts. With the help of HubSpot CRM, we are able to record, sort, and analyze customer interactions via email, social media, or telephone across various channels. The personal data recorded in this way can be evaluated and used for communication with the potential customer or for marketing measures (e.g., newsletter mailings). With HubSpot CRM, we are also able to record and analyze the user behavior of our contacts on our website.

HubSpot CRM is used on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the most efficient customer management and customer communication possible. If a corresponding consent was requested, processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time.

Details can be found in HubSpot’s privacy policy: https://legal.hubspot.com/de/privacy-policy.

Data transmission to the USA is based on the EU Commission’s standard contractual clauses; insofar as HubSpot is certified according to the EU-U.S. Data Privacy Framework, the transmission can also be based on this. Details can be found here: General Data Protection Regulation | HubSpot

We have concluded a data processing agreement with HubSpot CRM. This is a contract required by data protection law, which ensures that HubSpot CRM processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

7. Use and Application of Social Plugins

Facebook

We operate a company page (“fan page”) on the Facebook network of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”). When you visit our Facebook page, Meta processes personal data (e.g., IP address, device information, interactions) also for its own purposes. Further details can be found in Meta’s data policy: Meta Privacy Policy – How Meta collects and uses user data | Privacy Center | Manage your privacy on Facebook, on Instagram and in Messenger | Facebook Privacy
To design and optimize our page according to requirements, we use the Facebook Insights statistics service, which provides us with anonymized key figures on reach, interactions, and user structure of our fan page visitors. For processing within the framework of Facebook Insights, we and Meta are joint controllers within the meaning of Art. 26 GDPR. The respective responsibilities are regulated by Meta’s “Page Insights Supplement”: Facebook
The legal basis for operating the fan page and using Insights is our legitimate interest (Art. 6 Para. 1 lit. f GDPR) to contact interested parties via Facebook and to provide information about our company. If you contact us via Facebook (e.g., comments, messages), we process the data transmitted in the process to handle your request on the basis of Art. 6 Para. 1 lit. f GDPR.

We use the social media channel Instagram of the provider of Instagram, Facebook Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

We have placed the icon of the social network Instagram on our website. When visiting our website, no automatic transmission of personal data to Instagram takes place. The icon serves only as a link to Instagram.

The data sets are stored and processed in accordance with Instagram’s privacy policy. Information on this can be found in Instagram’s privacy policy at https://instagram.com/about/legal/privacy and in the cookie policy at https://help.instagram.com/1896641480634370.

To design and optimize our Instagram channel according to requirements, we use the Instagram Insights statistics service. This service records your activity on our page and provides it to us in anonymized statistics.

Through this, we receive insights into, among other things:

  • The interactions of our page visitors,
  • The views of our page,
  • The reach of posts,
  • Information about the activity of our subscribers as well as
  • Information about which countries and cities our visitors come from
  • As well as statistics on the gender ratios of our visitors.

The visitor statistics created are transmitted to us exclusively in anonymized form.
In the case of competitions, the winners are publicly identified with their username and asked to report via direct message within a period of 48 hours. The winners must send their real names and their address so that the prizes can be sent. This data is processed by us exclusively for the purpose of handling the competition.

If you comment on our posts or video clips via Instagram, we receive additional data from you, such as your name for the Instagram account as well as the date and time of your post.

Insofar as personal data is processed by data processing using Instagram Insights, this is done on the basis of Art. 6 Para. 1 lit. f) GDPR. Our interest lies in the requirement-oriented optimization and constant improvement of our media offering. If we want to repost images of users on the Instagram channel, we will first ask for your consent in accordance with Art. 6 Para. 1 lit. a) GDPR. The declaration of consent is stored by us as a screenshot and the image as a file with the user’s details.

The photos and the declaration of consent are stored until the consent is revoked. The data sets for the competitions are deleted as soon as the purpose of storage has ceased to exist, which, in addition to accounting retention periods, is the case when the competition is completed.

We do not pass on any data that we have received from you via Instagram to third parties. Regarding data disclosure by Instagram, we refer to the links to the privacy policy mentioned above.

A revocation of data processing based on consent is possible at any time. In the event of revocation, the image and the user’s details will be deleted immediately. Information on opt-out options can be found at: https://www.facebook.com/settings?tab=ads.

The processing of information by means of the cookies used by Instagram can be prevented by not allowing third-party cookies or those from Facebook in your own browser settings.

You can additionally prevent data processing by neither clicking on the Instagram icon on our website nor visiting our channel via Instagram.

We use the social media channel LinkedIn from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

We use LinkedIn to communicate with you and other interested parties and to be able to inform you there about us and current job offers, among other things.

In the process, cookies are usually stored on your computers, in which usage behavior is stored. This user data is provided to us by LinkedIn in anonymized and aggregated form for evaluation. Furthermore, we only process the data sets that you provide to us via LinkedIn.

The legal basis for the processing of personal data within the framework of providing the LinkedIn service is Art. 6 Para. 1 lit. f) GDPR. If you additionally provide data sets via LinkedIn, the legal basis is your consent in accordance with Art. 6 Para. 1 lit. a) GDPR.

We delete your data that you have provided to us via LinkedIn once the purpose has ceased to exist. Since contacting us via LinkedIn can have various purposes, the storage period depends significantly on the reason for your contact. Please refer to the LinkedIn privacy policy for the time of deletion of your data for which LinkedIn is responsible.

These can be found here: https://www.linkedin.com/legal/privacy-policy.

We do not pass on any data that we have received from you via LinkedIn to third parties. If LinkedIn forwards data sets, this can be found in LinkedIn’s privacy policy.

A revocation of data processing based on consent is possible at any time. Regarding the assertion of rights (e.g., data subject rights), we point out that these can ideally be asserted against LinkedIn. LinkedIn has access to user data and can directly take appropriate measures and provide information. Information on opt-out options can be found here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

On the XING platform (XING SE, Dammtorstraße 30, 20354 Hamburg), there is a company profile with the name “GreenGate AG”. Whether and to what extent this profile is currently editorially maintained by us is currently being clarified internally; according to our current knowledge, we do not publish regular posts of our own there and do not evaluate statistics (e.g., “Page Insights”).
XING is exclusively responsible for data processing by XING itself (e.g., when visiting the profile). Information on this can be found in XING’s privacy policy: Privacy at XING
Should it turn out that we actively use this profile (e.g., for job advertisements or responding to reviews), we will expand this section accordingly with the legal basis and information on any statistics functions.

On the employer review platform Kununu (kununu GmbH, a brand of New Work SE, Am Strandkai 1, 20457 Hamburg), we maintain a company profile that we occasionally maintain, e.g., by updating company information or responding to reviews. Kununu records data on access to our profile and provides us with aggregated information if necessary.
The legal basis is our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in an authentic external presentation as an employer and in handling reviews. Kununu is responsible for data processing by Kununu itself; further information can be found in Kununu’s privacy policy: Privacy at kununu
The Kununu award badge shown on our career page is a self-hosted image without data transmission to Kununu.

8. Deletion, Blocking, and Duration of Storage of Personal Data

We process and store your personal data only for the period necessary to achieve the respective storage purpose or as provided for by the various retention periods stipulated by the legislator.

After a storage purpose has ceased to exist or after the retention period stipulated by the legislator has expired, the personal data will be routinely blocked for further processing or deleted in accordance with legal regulations.

9. Data Protection Rights of the Data Subject

If you have questions about your personal data, you can contact us in writing at any time. According to the GDPR, you have the following rights:

  • The right to access (sub-point Art. 15 GDPR)
  • The right to rectification (Art. 16 GDPR)
  • The right to erasure (Art. 17 GDPR)
  • The right to restriction of processing (Art. 18 GDPR)
  • The right to data portability (Art. 20 GDPR)
  • The right to object (Art. 21 GDPR)
  • Right to lodge a complaint with the data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG)
  • Right to withdraw a data protection consent (Art. 7 Para. 3 GDPR)

10. Legal Basis of Processing

When processing personal data for which we obtain the consent of the data subject, Art. 6 Para. 1, Sentence 1 a) of the General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 Para. 1, Sentence 1 b) (GDPR) serves as the legal basis. This regulation also includes processing operations that are necessary to carry out pre-contractual measures.

Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Para. 1, Sentence 1 c) (GDPR) serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights, and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, then Art. 6 Para. 1 Sentence 1 f) (GDPR) serves as the legal basis for the processing. Our company’s legitimate interest lies in the conduct of our business activities as well as in the analysis, optimization, and maintenance of the security of our online offering.

11. Transmission of Data to Third Parties

We generally do not sell or rent user data. A transmission to third parties beyond the scope described in this privacy policy only takes place if this is necessary to process the respective requested service.

We only transmit data if there is a legal obligation to do so. This is the case if state institutions (e.g., law enforcement authorities) request information in writing or a court order exists.

Within the framework of the services described in this privacy policy (including Google Tag Manager/Analytics, YouTube, HubSpot, Facebook, Instagram, LinkedIn), personal data may be transmitted to third countries outside the EU/EEA, in particular to the USA. The respective guarantees (e.g., EU-U.S. Data Privacy Framework, standard contractual clauses of the EU Commission) are mentioned for the respective service in this policy. Beyond the cases described there, we do not pass on personal data to third parties unless we are legally obliged to do so (e.g., information requests from law enforcement authorities or court orders).

12. Statutory or Contractual Provisions for the Provision of Personal Data and Possible Consequences of Non-Provision

We hereby point out that the provision of personal data is required by law in certain cases (e.g., tax regulations) or can result from contractual regulations (e.g., information on/of the contractual partner). For example, for the conclusion of a contract, it may be necessary for the data subject/contractual partner to provide their personal data so that their request (e.g., order) can be processed by us at all. An obligation to provide personal data arises primarily when concluding contracts. If no personal data is provided in this case, the contract with the data subject cannot be concluded. Before providing personal data, the data subject can contact our data protection officer or the controller. The data protection officer or the controller then clarifies to the data subject whether the provision of the required personal data is required by law or contract or necessary for the conclusion of the contract and whether an obligation arises from the data subject’s concerns to provide the personal data or what consequences a non-provision of the desired data has for the data subject.

13. Existence of Automated Decision-Making

As a responsible company, we refrain from automatic decision-making or profiling in our business relationships.

14. Additional Information

In addition to these web-specific data protection notices, there is the possibility to view our transparent information.

PDF Download