Privacy Policy - GreenActions

This Privacy Policy explains how GreenActions ("we", "our", "us") collects, uses, and protects personal data under the EU General Data Protection Regulation (GDPR).

1. Scope

This Policy applies to all users of the GreenActions platform, website, and related services (the "Service").

2. Data We Collect

a) Data you provide

Account information (name, email, password)
Business and product data entered into the platform
Billing and payment details (handled securely via payment processor)

b) Automatically collected

Device and browser information, IP address, usage logs
Cookies and similar technologies for session management and analytics

c) Business activity data

Users may input operational or environmental data (e.g., electricity use, production volumes). This remains the user's property; we process it solely to provide calculations.

3. Purpose and Legal Bases

Purpose	Legal Basis
Provide and maintain the Service	Contract Art. 6 (1)(b) GDPR
Billing and payments	Contract + Legal obligation
Communications and support	Legitimate interest
Platform analytics and improvement	Legitimate interest
Marketing (optional)	Consent
Compliance with law	Legal obligation

4. Data Sharing

We share data only with:

Hosting, infrastructure, and payment providers;
Professional advisors (if required by law);
Authorities when legally obliged.

All third-party processors are GDPR-bound by Data Processing Agreements.

5. International Transfers

If data is transferred outside the EU/EEA, we use Standard Contractual Clauses (SCCs) or equivalent safeguards.

6. Retention

We keep personal data only as long as necessary for:

Account operation;
Legal retention periods;
Backup and security.

After deletion or termination, data is anonymized or erased within 90 days unless legally required otherwise.

7. Your GDPR Rights

Access your data
Rectify inaccuracies
Request erasure
Restrict processing
Data portability
Object to processing

To exercise rights, email support@greenactions.io. You can also contact the Hellenic Data Protection Authority (https://www.dpa.gr).

8. Security

We employ encryption, access controls, and monitoring to protect data. No system is perfectly secure; users are responsible for maintaining password confidentiality.

9. Information Accuracy and Liability

GreenActions processes user-provided environmental data and third-party emission factors. We do not independently verify them. All results and calculations are estimates for informational purposes only. They must not be represented as externally audited or certified.

10. Cookies

We only use essential session tokens required for secure authentication and functionality of the Service.

11. Changes to This Policy

We may update this Policy periodically. Significant changes will be communicated via email or in-app notice.

12. Contact

📧 support@greenactions.io
🏢 ZITA CH Single Member Private Company
Promitheos 33, 54629 Thessaloniki, Greece