Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Grünwerk Profis UG (haftungsbeschränkt)
Marktplatz 10 A
56457 Westerburg
Deutschland
Phone: +49 2663 9790 107
Email: info@gruenwerk-profis.de

No data protection officer has been appointed, as the legal requirements for this are not met. Please contact the address above with any data protection questions.

2. Overview

We only process personal data to the extent necessary to provide a functional website, to answer your enquiries or – with your consent – for cookieless audience measurement. We do not use advertising or tracking cookies, social media plugins or services that transfer data to third parties for advertising purposes. Fonts and all other resources are loaded from our own server.

The legal bases are in particular Art. 6 (1) (a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests) as well as Section 25 TDDDG for access to information on your device.

3. Hosting and server log files

This website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the host. The servers are located in Germany.

When you access the website, the server automatically processes information transmitted by your browser: IP address, date and time of access, requested page or file, amount of data transferred, HTTP status code, referrer URL as well as browser type and operating system. This data is technically necessary to deliver the website and to ensure its stability and security.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and trouble-free operation of the website. Log files are stored for a maximum of 30 days and then deleted unless they are required to investigate a specific security incident.

4. SSL/TLS encryption

For security reasons, this website uses TLS encryption for the transmission of all content. You can recognise an encrypted connection by “https://” in your browser’s address bar.

5. Contact form

If you send us an enquiry via the contact form, we process your name, email address, the selected subject, your message and – if provided – your phone number and company. The details are sent by email to our mailbox and used exclusively to process your enquiry. They are not stored in a database on the web server.

To prevent abuse (spam, overload), we store an irreversible hash of your IP address together with the time of the request for a maximum of 24 hours in order to limit the number of requests per period.

The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to the conclusion of a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries) and your consent pursuant to Art. 6 (1) (a) GDPR, which you can withdraw at any time with effect for the future.

Your data will be deleted once your enquiry has been fully processed, unless statutory retention obligations apply. Business correspondence is subject to retention periods of six or ten years under German commercial and tax law (Section 257 HGB, Section 147 AO).

6. Contact by email, phone or WhatsApp

If you contact us by email or phone, we process the data you provide in order to handle your request on the same legal bases and with the same deletion periods as for the contact form.

If you contact us via WhatsApp, the service is provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp processes, among other things, your phone number, metadata and message content in accordance with its own privacy policy; a transfer to Meta Platforms Inc. in the USA is possible. Meta is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR). Using WhatsApp is voluntary; you can also reach us by email or phone at any time. The legal basis is Art. 6 (1) (b) or (f) GDPR.

7. Cookieless visitor statistics

If you consent to the “Statistics” category in the privacy banner, our own statistics software, operated on our server, records the following for each page view: page visited, language version, domain of the referring website, device category (e.g. desktop or mobile), time and the country of origin derived from your IP address.

The country is determined using a geolocation database stored locally on our server (IP Geolocation by DB-IP, licence CC BY 4.0); your IP address is not transmitted to third parties for this purpose. To count repeated visits by the same visitor on one day only once, an irreversible hash is generated from the IP address and browser identifier together with a random key that changes daily. The key is discarded at the end of the day and the hashes are deleted after 48 hours at the latest. The IP address itself is not stored. No cookies are set, no user profiles are created and no data is passed on to third parties. Evaluations are carried out exclusively in aggregated form.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future via the “Cookie settings” link in the footer of every page. The aggregated statistics (e.g. views per day and country) contain no personal data and are retained for as long as the website is operated.

7a. Automatic language selection

If you open the start address of our website without a language path, our server uses your IP address and the locally stored geolocation database (see section 7) to determine the country you are accessing from and redirects you to the matching language version (German or English). If no country can be determined, your browser’s language setting is taken into account. Your IP address is only processed temporarily in memory and is neither stored nor transmitted to third parties. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is to show you the content directly in a suitable language. You can change the language at any time using the language switch in the header.

8. Cookies and local storage

We do not set any cookies for visitors to this website. We store your choice in the privacy banner in your browser’s local storage under the key “gp-consent” and – if you change the language manually – your language choice under “gp-lang”, so that the banner does not reappear on every page. This storage is strictly necessary (Section 25 (2) no. 2 TDDDG); the legal basis for the subsequent processing is Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR (proof of consent). Details can be found in our cookie policy.

9. External links

Our website may contain simple links to third-party websites. These are not embedded plugins; data is only transferred when you click the link and visit the respective provider’s website, where that provider’s privacy policy applies.

10. Recipients

Recipients of your data are our hosting provider as processor and, where applicable, tax advisers or authorities to the extent we are legally obliged to do so. In connection with the projects presented, we only pass on your contact details to the respective project partner (e.g. the fund manager) with your express consent.

11. Your rights

Subject to the statutory provisions, you have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw any consent given at any time with effect for the future (Art. 7 (3) GDPR). Please contact info@gruenwerk-profis.de.

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany, www.datenschutz.rlp.de.

12. Obligation to provide data and automated decisions

Providing your data is neither legally nor contractually required. However, without your name and email address we cannot answer enquiries made via the contact form. No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

13. Status

This privacy policy was last updated on 10.10.2026. We will update it if the website or the legal requirements change.