Privacy Policy
Privacy Policy
Privacy Policy
How we use your data
How we use your data
With the following privacy policy, we want to inform you about the types of your personal data (hereinafter also referred to as "data") that we process, for what purposes, and to what extent. This privacy policy applies to all processing of personal data performed by us, both in the provision of our services and especially on our websites, in mobile applications, and within external online presences, such as our social media profiles (collectively referred to as "online offer").
The terms used are not gender-specific.
As of: August 10, 2024
With the following privacy policy, we would like to inform you about what types of your personal data (hereinafter simply referred to as "data") we process, for what purposes, and to what extent. This privacy policy applies to all personal data processing activities we undertake, both as part of delivering our services and especially on our websites, in mobile applications, as well as within external online presences, such as our social media profiles (collectively referred to as "online offer").
The terms used are not gender-specific.
As of: August 10, 2024
Responsible Person
Green Banana Group GmbH
Hanauer Landstraße 182f
60314 Frankfurt am Main
Phone: +49 69 943409-260
Email: contact@greenbanana.group
Green Banana Group GmbH
Hanauer Landstraße 182f
60314 Frankfurt am Main
Phone: +49 69 943409-260
Email: contact@greenbanana.group
Overview of Processes
The following overview summarizes the types of data processed and their purposes, also indicating the individuals affected.
The following overview summarizes the types of data processed and their purposes, also indicating the individuals affected.
Types of Processed Data
Contact details.
Content data.
Usage data.
Meta, communication, and procedural data.
Contact details.
Content data.
Usage data.
Meta, communication, and procedural data.
Categories of Concerned Individuals
Communication partner.
User.
Communication partner.
User.
Purposes of Processing
Contact inquiries and communication.
Security measures.
Managing and responding to inquiries.
Feedback.
Providing our online services and user-friendliness.
Information technology infrastructure.
Contact inquiries and communication.
Security measures.
Managing and responding to inquiries.
Feedback.
Providing our online services and user-friendliness.
Information technology infrastructure.
Relevant Legal Foundations
The following provides you with an overview of the legal bases of the GDPR, on which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or establishment. Should more specific legal bases be relevant in individual cases, we will inform you of these in the privacy policy.
Performance of a Contract and Pre-Contractual Inquiries (Art. 6(1)(b) GDPR) – The processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.
Legitimate Interests (Art. 6(1)(f) GDPR) – The processing is necessary to protect the legitimate interests of the controller or a third party, provided that these interests are not overridden by the interests or fundamental rights and freedoms of the data subject, which require personal data protection.
The following provides you with an overview of the legal bases of the GDPR, on which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or establishment. Should more specific legal bases be relevant in individual cases, we will inform you of these in the privacy policy.
Performance of a Contract and Pre-Contractual Inquiries (Art. 6(1)(b) GDPR) – The processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.
Legitimate Interests (Art. 6(1)(f) GDPR) – The processing is necessary to protect the legitimate interests of the controller or a third party, provided that these interests are not overridden by the interests or fundamental rights and freedoms of the data subject, which require personal data protection.
Security measures
We implement technical and organizational measures in accordance with legal requirements while considering the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as different probabilities and sizes of threats to the rights and freedoms of natural persons, to ensure a level of protection appropriate to the risk.
These measures particularly include securing the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as access, input, transfer, ensuring availability, and their separation. Furthermore, we have procedures in place to ensure the exercising of data subject rights, the deletion of data, and responses to data threats. Additionally, we consider data protection at the development or selection stage of hardware, software, and procedures in accordance with the principle of data protection by design and by privacy-friendly default settings.
TLS encryption (https): To protect your data transmitted through our online offerings, we use TLS encryption. You can recognize such encrypted connections by the prefix https:// in your browser's address bar.
We implement technical and organizational measures in accordance with legal requirements while considering the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as different probabilities and sizes of threats to the rights and freedoms of natural persons, to ensure a level of protection appropriate to the risk.
These measures particularly include securing the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as access, input, transfer, ensuring availability, and their separation. Furthermore, we have procedures in place to ensure the exercising of data subject rights, the deletion of data, and responses to data threats. Additionally, we consider data protection at the development or selection stage of hardware, software, and procedures in accordance with the principle of data protection by design and by privacy-friendly default settings.
TLS encryption (https): To protect your data transmitted through our online offerings, we use TLS encryption. You can recognize such encrypted connections by the prefix https:// in your browser's address bar.
Transmission of personal data
In the course of processing personal data, it may happen that the data is transmitted to other entities, companies, legally independent organizational units, or individuals, or disclosed to them. Recipients of this data may include service providers tasked with IT responsibilities or providers of services and content integrated into a website. In such cases, we comply with legal requirements and, in particular, enter into contracts or agreements with the recipients of your data to ensure the protection of your information.
In the course of processing personal data, it may happen that the data is transmitted to other entities, companies, legally independent organizational units, or individuals, or disclosed to them. Recipients of this data may include service providers tasked with IT responsibilities or providers of services and content integrated into a website. In such cases, we comply with legal requirements and, in particular, enter into contracts or agreements with the recipients of your data to ensure the protection of your information.
Data processing in third countries
If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)) or the processing takes place within the framework of using third-party services or the disclosure or transfer of data to other persons, authorities or companies, this is done only in accordance with legal requirements.
Subject to explicit consent or contractually or legally required transmission, we only process or allow the processing of data in third countries with a recognized level of data protection, contractual obligations through so-called standard data protection clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations (Art. 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).
If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)) or the processing takes place within the framework of using third-party services or the disclosure or transfer of data to other persons, authorities or companies, this is done only in accordance with legal requirements.
Subject to explicit consent or contractually or legally required transmission, we only process or allow the processing of data in third countries with a recognized level of data protection, contractual obligations through so-called standard data protection clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations (Art. 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).
Data Deletion
The data we process is deleted in accordance with legal regulations as soon as their consent for processing is revoked or other permissions are no longer applicable (e.g., if the purpose for processing this data no longer exists or they are not required for the purpose). If the data is not deleted because it is required for other legally permissible purposes, its processing will be restricted to these purposes. This means the data will be locked and not processed for other purposes. For example, this applies to data that must be retained for commercial or tax law reasons, or whose storage is necessary for asserting, exercising, or defending legal claims or for protecting the rights of another natural or legal person.
Our data protection notices may also include further information on the retention and deletion of data, which primarily apply to the respective processing.
The data we process is deleted in accordance with legal regulations as soon as their consent for processing is revoked or other permissions are no longer applicable (e.g., if the purpose for processing this data no longer exists or they are not required for the purpose). If the data is not deleted because it is required for other legally permissible purposes, its processing will be restricted to these purposes. This means the data will be locked and not processed for other purposes. For example, this applies to data that must be retained for commercial or tax law reasons, or whose storage is necessary for asserting, exercising, or defending legal claims or for protecting the rights of another natural or legal person.
Our data protection notices may also include further information on the retention and deletion of data, which primarily apply to the respective processing.
Use of Cookies
Cookies are small text files or other memory markers that store information on end devices and read information from end devices. For example, to save the login status in a user account, a shopping cart content in an e-shop, the accessed content, or used functions of an online offer. Cookies can also be used for various purposes, such as ensuring functionality, security, and comfort of online offers, as well as generating analyses of visitor flows.
Notes on consent: We use cookies in compliance with legal regulations. Therefore, we obtain prior consent from users, except when it is not legally required. Consent is particularly not necessary when the storage and reading of information, including cookies, is absolutely necessary to provide a telemedia service explicitly requested by the users (i.e., our online offer). The revocable consent is clearly communicated to users and includes information on the respective cookie usage.
Notes on data protection legal bases: The legal basis on which we process users' personal data with the help of cookies depends on whether we ask users for consent. If users consent, the legal basis for processing your data is the declared consent. Otherwise, data processed using cookies is based on our legitimate interests (e.g., business operation of our online offer and improving its usability) or, if it fulfills our contractual obligations, when the use of cookies is necessary to fulfill our contractual obligations. We clarify for which purposes we process cookies within this privacy policy or as part of our consent and processing processes.
Storage duration: Regarding the storage duration, the following types of cookies are distinguished:
Temporary cookies (also: session or session cookies): Temporary cookies are deleted at the latest after a user has left an online offer and closed their device (e.g., browser or mobile application).
Persistent cookies: Persistent cookies remain stored even after the device is closed. For example, the login status can be saved, or preferred content can be displayed directly when the user visits a website again. Likewise, data collected with the help of cookies can be used for reach measurement. Unless we inform users of the type and storage duration of cookies (e.g., as part of obtaining consent), users should assume that cookies are permanent and that the storage duration can be up to two years.
General notes on revocation and objection (Opt-Out): Users can revoke their given consents at any time and also object to processing according to the legal requirements in Art. 21 GDPR. Users can also declare their objection through the settings of their browser, for example, by deactivating the use of cookies (although this may restrict the functionality of our online services). An objection against the use of cookies for online marketing purposes can also be declared via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/.
Further notes on processing processes, procedures, and services:
Processing of cookie data based on consent: We use a cookie consent management procedure through which user consents to the use of cookies or the processes and providers mentioned in the cookie consent management procedure can be obtained, managed, and revoked by users. The consent declaration is stored to avoid the need to repeat its request and to be able to prove consent according to legal obligations. Storage can occur server-side and/or in a cookie (so-called opt-in cookie or using comparable technologies) to assign the consent to a user or their device. Subject to individual information about providers of cookie management services, the following applies: The storage duration of the consent can be up to two years. A pseudonymous user identifier is created and stored with the time of consent, information about the scope of consent (e.g., which categories of cookies and/or service providers), and the browser, system, and used device.
To manage the used cookies and similar technologies (tracking pixels, web beacons, etc.) and the associated consents, we use the consent tool "Real Cookie Banner." Details about the functioning of "Real Cookie Banner" can be found under https://devowl.io/de/wissensdatenbank/real-cookie-banner-datenverarbeitung/
The legal basis for processing personal data in this context is Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest is managing the used cookies and similar technologies and the associated consents.
Providing personal data is neither contractually prescribed nor required for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we cannot manage your consents.
Cookies are small text files or other memory markers that store information on end devices and read information from end devices. For example, to save the login status in a user account, a shopping cart content in an e-shop, the accessed content, or used functions of an online offer. Cookies can also be used for various purposes, such as ensuring functionality, security, and comfort of online offers, as well as generating analyses of visitor flows.
Notes on consent: We use cookies in compliance with legal regulations. Therefore, we obtain prior consent from users, except when it is not legally required. Consent is particularly not necessary when the storage and reading of information, including cookies, is absolutely necessary to provide a telemedia service explicitly requested by the users (i.e., our online offer). The revocable consent is clearly communicated to users and includes information on the respective cookie usage.
Notes on data protection legal bases: The legal basis on which we process users' personal data with the help of cookies depends on whether we ask users for consent. If users consent, the legal basis for processing your data is the declared consent. Otherwise, data processed using cookies is based on our legitimate interests (e.g., business operation of our online offer and improving its usability) or, if it fulfills our contractual obligations, when the use of cookies is necessary to fulfill our contractual obligations. We clarify for which purposes we process cookies within this privacy policy or as part of our consent and processing processes.
Storage duration: Regarding the storage duration, the following types of cookies are distinguished:
Temporary cookies (also: session or session cookies): Temporary cookies are deleted at the latest after a user has left an online offer and closed their device (e.g., browser or mobile application).
Persistent cookies: Persistent cookies remain stored even after the device is closed. For example, the login status can be saved, or preferred content can be displayed directly when the user visits a website again. Likewise, data collected with the help of cookies can be used for reach measurement. Unless we inform users of the type and storage duration of cookies (e.g., as part of obtaining consent), users should assume that cookies are permanent and that the storage duration can be up to two years.
General notes on revocation and objection (Opt-Out): Users can revoke their given consents at any time and also object to processing according to the legal requirements in Art. 21 GDPR. Users can also declare their objection through the settings of their browser, for example, by deactivating the use of cookies (although this may restrict the functionality of our online services). An objection against the use of cookies for online marketing purposes can also be declared via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/.
Further notes on processing processes, procedures, and services:
Processing of cookie data based on consent: We use a cookie consent management procedure through which user consents to the use of cookies or the processes and providers mentioned in the cookie consent management procedure can be obtained, managed, and revoked by users. The consent declaration is stored to avoid the need to repeat its request and to be able to prove consent according to legal obligations. Storage can occur server-side and/or in a cookie (so-called opt-in cookie or using comparable technologies) to assign the consent to a user or their device. Subject to individual information about providers of cookie management services, the following applies: The storage duration of the consent can be up to two years. A pseudonymous user identifier is created and stored with the time of consent, information about the scope of consent (e.g., which categories of cookies and/or service providers), and the browser, system, and used device.
To manage the used cookies and similar technologies (tracking pixels, web beacons, etc.) and the associated consents, we use the consent tool "Real Cookie Banner." Details about the functioning of "Real Cookie Banner" can be found under https://devowl.io/de/wissensdatenbank/real-cookie-banner-datenverarbeitung/
The legal basis for processing personal data in this context is Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest is managing the used cookies and similar technologies and the associated consents.
Providing personal data is neither contractually prescribed nor required for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we cannot manage your consents.
Providing the online offer and web hosting
We process user data to provide them with our online services. For this purpose, we process the user's IP address, which is necessary to deliver the content and functions of our online services to the user's browser or device.
Types of data processed: Usage data (e.g., visited websites, interest in content, access times); Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).
Affected persons: Users (e.g., website visitors, users of online services).
Purposes of processing: Provision of our online offering and user-friendliness; Information technology infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.)); Security measures.
Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Further notes on processing processes, procedures, and services:
Provision of online services on rented storage space: We use storage space, computing capacity, and software from an appropriate server provider (also known as a “web host”) to provide our online offering; Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Collection of access data and log files: Access to our online offering is logged in the form of so-called “server log files.” The server log files can include the address and name of the web pages and files accessed, date and time of access, transferred data volumes, success messages of retrieval, browser types along with versions, the user's operating system, referrer URL (the previously visited page), and typically IP addresses and the requesting provider. The server log files may be used for security purposes, e.g., to prevent server overload (especially in cases of abusive attacks, known as DDoS attacks) and to ensure the servers' load and stability; Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Deletion of data: Log file information is stored for a maximum of 30 days and then deleted or anonymized. Data that must be retained for evidence purposes are excluded from deletion until the respective incident is conclusively resolved.
We process user data to provide them with our online services. For this purpose, we process the user’s IP address, which is necessary to transmit the contents and functions of our online services to the browser or device of the users.
Types of data processed: Usage data (e.g., visited websites, content interest, access times); Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).
Persons affected: Users (e.g., website visitors, users of online services).
Purpose of processing: Provision of our online offer and user-friendliness; Information technology infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.)); Security measures.
Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Further notes on processing procedures, processes, and services:
Provision of online offer on rented storage space: For the provision of our online offer, we use storage space, computing capacity, and software that we rent or otherwise obtain from a corresponding server provider (also known as “web host”); Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Collection of access data and log files: Access to our online offer is logged in the form of so-called “server log files.” The server log files may include the address and name of the accessed websites and files, date and time of access, transmitted data volumes, notification of successful access, browser type along with version, the user’s operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider. The server log files can be used for security purposes, for example, to prevent server overload (especially in cases of abusive attacks, so-called DDoS attacks) and to ensure the load on the servers and their stability; Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Deletion of data: Log file information is stored for a maximum duration of 30 days and is deleted or anonymized thereafter. Data whose further retention is required for evidence purposes is excluded from deletion until the respective incident is finally resolved.
Contact and Inquiry Management
When contacting us (e.g. by mail, contact form, email, phone, or via social media) as well as in the context of existing user and business relationships, the information of the inquiring individuals is processed insofar as this is necessary to respond to the contact inquiries and any requested measures.
Types of data processed: Contact data (e.g. email, phone numbers); content data (e.g. entries in online forms); usage data (e.g. websites visited, interest in content, access times); meta, communication, and procedural data (e.g. IP addresses, time details, identification numbers, consent status).
Affected individuals: Communication partners.
Purposes of processing: Contact inquiries and communication; management and response to inquiries; feedback (e.g. collecting feedback through online forms); providing our online offer and user-friendliness.
Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR).
Further notes on processing procedures, methods, and services:
Contact form: When users contact us via our contact form, email, or other communication methods, we process the data communicated to us in this context to handle the matter communicated; Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
When contacting us (e.g. by mail, contact form, email, phone, or via social media) as well as within the framework of existing user and business relationships, the information of the requesting persons is processed as far as necessary to respond to the contact requests and any requested measures.
Types of data processed: Contact data (e.g. email addresses, phone numbers); content data (e.g. entries in online forms); usage data (e.g. visited websites, interest in content, access times); meta, communication, and procedural data (e.g. IP addresses, timestamps, identification numbers, consent status).
Affected persons: Communication partners.
Purposes of processing: Contact requests and communication; managing and responding to inquiries; feedback (e.g. collecting feedback via online form); providing our online offer and user-friendliness.
Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).
Further notes on processing processes, procedures, and services:
Contact form: When users contact us via our contact form, email, or other means of communication, we process the data provided in this context to handle the stated request; Legal bases: Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Update and Revision of the Privacy Policy
We ask you to regularly review the content of our privacy policy. We will update the privacy policy whenever changes in our data processing activities make it necessary. We will inform you whenever such changes require your participation (e.g., consent) or any other individual notification.
If we provide addresses and contact information for companies and organizations in this privacy policy, please note that these addresses may change over time and we ask you to verify the details before making contact.
We kindly ask you to regularly check the contents of our Privacy Policy. We will update the Privacy Policy as soon as changes in our data processing activities make this necessary. We will inform you whenever changes require any action on your part (e.g., consent) or any other individual notification.
If we provide addresses and contact information for companies and organizations in this Privacy Policy, please note that these addresses may change over time, and we ask you to verify the information before making contact.
Rights of the individuals concerned
You have various rights under the GDPR as an affected individual, particularly those arising from Articles 15 to 21 of the GDPR:
Right to object: You have the right to object at any time to the processing of your personal data based on reasons arising from your particular situation, according to Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
Right to withdraw consent: You have the right to withdraw any given consent at any time.
Right of access: You have the right to request confirmation as to whether or not personal data concerning you is being processed and to access this data and receive further information and a copy of the data as required by law.
Right to rectification: You have the right, as provided by law, to request the completion of incomplete data concerning you or the correction of inaccurate data concerning you.
Right to erasure and restriction of processing: You have the right, as required by law, to request that data concerning you be deleted without delay, or alternatively, to request a restriction on the processing of the data, as provided by law.
Right to data portability: You have the right to receive, in a structured, commonly used, and machine-readable format, the data concerning you that you have provided to us, according to the law, or to request its transmission to another controller.
Right to complain to a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of personal data concerning you is in violation of GDPR requirements.
You have various rights under the GDPR as an affected individual, particularly those arising from Articles 15 to 21 of the GDPR:
Right to object: You have the right to object at any time to the processing of your personal data based on reasons arising from your particular situation, according to Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
Right to withdraw consent: You have the right to withdraw any given consent at any time.
Right of access: You have the right to request confirmation as to whether or not personal data concerning you is being processed and to access this data and receive further information and a copy of the data as required by law.
Right to rectification: You have the right, as provided by law, to request the completion of incomplete data concerning you or the correction of inaccurate data concerning you.
Right to erasure and restriction of processing: You have the right, as required by law, to request that data concerning you be deleted without delay, or alternatively, to request a restriction on the processing of the data, as provided by law.
Right to data portability: You have the right to receive, in a structured, commonly used, and machine-readable format, the data concerning you that you have provided to us, according to the law, or to request its transmission to another controller.
Right to complain to a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of personal data concerning you is in violation of GDPR requirements.
Definitions
In this section, you'll get an overview of the terms used in this privacy policy. Many of the terms are taken from the law and are mainly defined in Art. 4 GDPR. The legal definitions are binding. The following explanations are primarily intended to facilitate understanding. The terms are listed alphabetically.
Personal Data: "Personal data" refers to any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); a natural person is considered identifiable if they can be identified directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie), or one or more special characteristics that express the physical, physiological, genetic, mental, economic, cultural, or social identity of this natural person.
Controller: A "controller" is the natural or legal person, authority, institution, or other body that alone or jointly with others determines the purposes and means of processing personal data.
Processing: "Processing" is any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and encompasses practically any handling of data, whether it is collection, evaluation, storage, transmission, or deletion.
In this section, you'll get an overview of the terms used in this privacy policy. Many of the terms are taken from the law and are mainly defined in Art. 4 GDPR. The legal definitions are binding. The following explanations are primarily intended to facilitate understanding. The terms are listed alphabetically.
Personal Data: "Personal data" refers to any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); a natural person is considered identifiable if they can be identified directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie), or one or more special characteristics that express the physical, physiological, genetic, mental, economic, cultural, or social identity of this natural person.
Controller: A "controller" is the natural or legal person, authority, institution, or other body that alone or jointly with others determines the purposes and means of processing personal data.
Processing: "Processing" is any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and encompasses practically any handling of data, whether it is collection, evaluation, storage, transmission, or deletion.
© Green Banana Group GmbH
Hanauer Landstraße 182f
60314 Frankfurt am Main
Email: contact@greenbanana.group
Phone: +49 69 943409-260
© Green Banana Group GmbH
Hanauer Landstraße 182f
60314 Frankfurt am Main
Email: contact@greenbanana.group
Phone: +49 69 943409-260
© Green Banana Group GmbH
Hanauer Landstrasse 182f
60314 Frankfurt am Main
Email: contact@greenbanana.group
Phone: +49 69 943409-260