Privacy policy

• Controller: GREENOX GmbH, Vogelsangstraße 18/1, 70176 Stuttgart, Germany
• VAT ID: DE359850328
• Office in Mallorca: Carrer dels Botons, 10, 1A, 07001 Palma (Illes Balears), Spain
• Phone: +34 694 91 56 14
• Email for data protection matters: info@greenox-group.es

We have not appointed a data protection officer because we are not required to. For any question about your data, write to us at the email address above.

If you use the site visit form, we process:

• required details: name, phone number, municipality and type of property;
• optional project details: approximate floor area, when you would like to start and your message;
• optional contact details: email, whether you live in Mallorca, contact language and whether you prefer WhatsApp or a video call.

If you message us on WhatsApp, email us or call us, we process your number or address, the content of your messages and any photos or plans of the property you send. When you visit the website, our server logs technical data such as your IP address, browser and time of access so that the website works and stays secure. For cookies, see our cookie policy.

We do not need special category data, such as health data, so please do not include it in your messages. If you give us another person's details, for example a co-owner or a tenant, please inform them first.

• To handle your request and arrange the free site visit or, if you are not in Mallorca, a video call.
• To contact you by phone, WhatsApp or email, as you prefer, to clarify questions about your project.
• To prepare and send you a quote and follow it up.
• If you hire us, to manage the contract and meet our tax and accounting obligations. You will receive specific information about the works together with the contract.
• To protect the website against abuse and attacks.

We will not send you advertising or newsletters without your express consent. We do not create profiles or make automated decisions about you.

• Your consent (Art. 6(1)(a) GDPR), given by ticking the box on the form, so that we can contact you through the channel you choose.
• Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) for the site visit, the video call and the quote, and performance of the contract if you sign it.
• Compliance with legal obligations (Art. 6(1)(c) GDPR), such as tax and accounting rules, if you become a client.
• Our legitimate interest in keeping the website secure (Art. 6(1)(f) GDPR), for technical server data.

You can withdraw your consent at any time by writing to info@greenox-group.es. This does not affect the lawfulness of processing carried out before. We need the required details to handle your request; without them we cannot contact you.

• Requests that do not lead to a contract: while we handle your request and for no more than 12 months after our last contact. We then delete the data, including WhatsApp chats and photos.
• Clients: for the duration of the contract and afterwards for as long as the law requires, for example 6 years for business records (Article 30 of the Spanish Commercial Code) and 4 years for tax purposes (General Tax Act), or for as long as claims relating to the works can be brought.
• Technical server data: no more than 30 days, unless we need it to investigate a security incident.

When we delete data that courts or authorities might still need, we block it as required by Article 32 of the LOPDGDD: it is kept only at their disposal and is not used for anything else.

We do not sell your data or pass it on to third parties for their own purposes. Only the following have access to it:

• our web hosting and email provider, as a processor under a contract that complies with Article 28 GDPR;
• WhatsApp Ireland Limited (Meta group), if you choose WhatsApp. WhatsApp also processes data under its own privacy policy;
• the video call provider, if you ask for a video call;
• Greenox GmbH (Stuttgart, Germany), only when needed for your project, for example for technical support with planning, and always within the European Union;
• public authorities and courts, when the law requires us to disclose data to them.

As a rule, we process your data within the European Economic Area (EEA). If you use WhatsApp, the Meta group may also process data outside the EEA, especially in the United States. These transfers rely on the safeguards provided for in the GDPR, such as the European Commission's adequacy decision for the EU-US Data Privacy Framework or standard contractual clauses.

If you prefer your data not to leave the EEA, please contact us by phone or email instead of WhatsApp.

You can exercise the following rights at any time:

• access to your data;
• rectification of inaccurate data;
• erasure;
• objection to processing;
• restriction of processing;
• data portability;
• withdrawal of your consent.

Write to us at info@greenox-group.es with the subject “Data protection”. If we have reasonable doubts about your identity, we may ask you to prove it. We reply within one month.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es, or with the supervisory authority of your country of residence in the EU.

Our services are aimed at adults. We do not knowingly process data of children under 14, who cannot give consent themselves under Article 7 of the LOPDGDD. If we find that a minor has sent us data, we delete it.

We protect your data with appropriate technical and organisational measures against loss, unauthorised access and misuse. Only the members of our team who need the data to handle your request can access it.

We may update this policy when our services or the law change. The current version is always published on this page with its date. If a change is significant and we have your contact details, we will let you know.