Privacy Policy – Green Tech Data Application

Last updated: 02 January 2026

1. Data Controller

The controller of personal data is: SOFTWARE LIMITED, 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom,
Company No.: 08062889,
e-mail: info@greentechdata.com

2. What data we collect

The Green Tech Data application is a B2B application used for documenting environmental installations and creating proof of implementation of environmental projects (ZKP), including for offsetting and ESG reporting purposes.

We process the following categories of data:

a) User data

first and last name
business email address
company name
job title
phone number

b) Installation and project data

installation name
type of installation (e.g. photovoltaic, LED)
installation location (address and/or geolocation data)
technical parameters of the installation

c) Evidence data

photos of installations
photo metadata (date, time, GPS location)
project documentation

d) Technical data

device identifiers
log data
information about the use of the application

Providing data by the User is voluntary; however, it is necessary to use the functionalities of the Application.

3. Purposes of data processing

Data is processed for the purpose of:

providing and operating the Application services
creating and managing environmental evidence (ZKP)
calculating and claiming environmental offsets
fulfilling legal, audit, and reporting obligations (including ESG)
ensuring the security of the Application
handling requests and communication with users
protecting the legitimate interests of the Controller

4. Legal basis for processing

The legal basis for data processing is:

performance of a contract – Article 6(1)(b) GDPR
legal obligations – Article 6(1)(c) GDPR
legitimate interests of the Controller – Article 6(1)(f) GDPR
user consent – Article 6(1)(a) GDPR (where required)

5. Data sharing

Data may be disclosed to:

IT and hosting service providers
auditors and certification bodies
business partners and end clients of the projects
legal and accounting firms
public authorities – where required by law

The Controller does not sell personal data.

6. Data transfers outside the EU

Data is transferred to the United Kingdom, which, pursuant to a decision of the European Commission, ensures an adequate level of protection of personal data.

7. Data retention period

Data is stored for as long as necessary to:

perform contracts and projects
meet certification, audit, and reporting requirements
secure potential claims

8. User rights

The User has the right to:

access their data
rectify their data
delete their data
restrict processing
object to processing
data portability
withdraw consent at any time
lodge a complaint with the President of the Personal Data Protection Office (PUODO)

The User may also lodge a complaint with the competent data protection authority.

9. Data security

The Controller applies appropriate technical and organizational measures to protect personal data, including encryption, access control, and regular security audits.

10. Automated decision-making

The Controller does not use automated decision-making or profiling.

11. 16+

The Application is not intended for persons under 16 years of age, and the Controller does not knowingly collect data from such persons.

12. Contact

In matters related to the protection of personal data, you may contact the Controller at:
info@greentechdata.com