Privacy Notice

Deutsche Version

Constructed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (“GDPR”)and the Austrian data protection act (Datenschutzgesetz).

The current version of this Privacy Notice is: October 2022

About this Privacy Notice (“Privacy Notice”)

When it comes to your personal data, safety and transparency take top priority here at Greentube. We are committed to protecting and respecting your privacy, therefore it is very important to us that you feel safe during your visit to our website and while using our services.

The following Privacy Notice will provide you with an overview of how we guarantee the protection of your privacy, what rights you have, the type of personal data being collected as well as its main purpose of data collection and processing.

Regarding the terms used in this Privacy Notice, such as “Controller”, “Processor”, “Processing”, or “Personal Data”, etc., their GDPR definitions apply.

This Privacy Notice is drafted in English and German. In case of conflict the English version shall be the binding version.

About Greentube Group

Greentube GmbH a company registered at Wiedner Hauptstrasse 94|A-1050, Vienna, Austria, Company Registration no: 197003k (“we”, “us”, “our”), assumes the role of Controller for personal data collected within the processing operations described in this Privacy Notice.

Greentube GmbH is part of the Greentube group, which is made up of different entities. When it comes to your personal data, some sister companies may offer certain services further specified in our Terms and Conditions and, as such, may have the role of Processors. However, such processing will always be subject to a respective data processing agreement.

What personal data we collect about you? Why we process your personal data and what are legal basis for our use of your personal data?

What personal data do we collect and process?

Why do we process your personal data? What is Legal Basis for our use of your personal data?

Contact data: when communicating with us via e-mail, phone, letter, register for newsletter or visiting our office, we may process for example: name, address, e-mail address, telephone number and etc.

Communicate with you: We collect and process this personal data to communicate with you in relation with our services, send marketing communication.

Performance of a contract: when we provide you with products or services or communicate with you about them. Consent: when we ask your consent to process your personal data for specific purpose (e.g. direct marketing). You may withdraw your consent at any time. Therefore, the provision of personal data is mandatory as otherwise our services could not be provided.

Business details: if you use our client space service we might process for example: company name, full name, address, email address, phone number. Provide you our services: We collect your business details to provide you our services and communicate with you. Performance of a contract: when we provide you with products or services or communicate with you about them.Therefore, the provision of personal data is mandatory as otherwise our services could not be provided.
Log data: when you use our website, we may process for example: technical information including the Internet protocol (IP) address used to connect your computer to the Internet, computer or mobile device information, operating system, browser type, device type, unique device identification number, time of access, date of access, language use and etc. Improve our services and fix errors: We process your personal data to improve our services, fix errors and provide you better user experience. Our legitimate Interest: to improve our services and products we are providing to you.

Marketing data: if you visit our website or social media platforms, we might process marketing data, for example: information about your behavior and activity (e.g. clicks, places, actions, amount of time spent on the page, etc.), we use our own and third party cookies (see section ‘How to manage your cookie preferences’). Improve our services and personalize your experience: We process this personal data to improve our services and products, to identify your preferences and personalize your experience with our services. We use our own and third-party cookies for analysis purposes and to show you advertising and personalized content. Our Legitimate Interest: to improve our services and products and personalize your experience.

Consent: where you have agreed to us collecting and processing your personal data for a certain purpose that we communicated to you. You may withdraw your consent at any time.

Hiring data: when applying for vacancies on the careers section of our website or via Linkedin, we may process your personal data for recruitment purpose, for example: contact data, username, password, nationality/citizenship, resume, link to your social media platforms, cover letter, qualification, references, transcripts, criminal record, other academic related information. Recruitment services: We collect your personal data to provide you with recruitment and career services, when you register and make applications for job on our career page. You are under no statutory or contractual obligation to provide data during the recruitment process. However, if you do not provide personal data necessary for us to assess your application, in that case, we may not be able to process your application properly or at all. Performance of a contract with you or in order to take steps at your request prior to entering into a contract.

Consent: where you have agreed to us collecting and processing your personal data for a certain purpose that we communicated to you. You may withdraw your consent at any time.

Video surveillance data: in our offices we use video surveillance cameras therefore when you visit our offices, we will collect your personal data such as videos of you from part of the company premises which are recorded with the cameras. Security: We collect your personal data due to having video surveillance in our offices with digital image recording for the purpose of self-protection. Our legitimate interest and the interests of our visitors: when they are visiting our offices to protect the security of our business and operational secrets, property and protection of employees and the protection of accountability (perception of traffic safety obligations) as well as for the purpose of preventing, containing and clarifying criminally relevant behavior, with exclusive evaluation in the case defined by the purpose.
Photo, video, and audio data: when you attend our organized events we may collect for example: photos, videos or audio recording of you. Marketing: we use audio, video, photo data from public spaces (such as public events) only for marketing purposes on our website or social media platforms. Our legitimate Interest: to promote and represent our services and products on social media platforms or our website.

Do you make automated decisions about me?

We do not use personal data for fully automated decision-making including profiling within the meaning of Art 22 GDPR.

Data subject rights

What data subject rights under GDPR do you have?

Right to be informed:

You have the right to be provided with clear, transparent and easy understandable information about how we use your personal data and your rights. Therefore, we provide this Privacy Notice to explain how we use your personal data.

Right of access:

You have the right to request confirmation from us to whether we are processing personal data concerning you. If we’re processing your personal data, you have the right to obtain access or receive a copy of your personal data within a reasonable time. Please see below in this privacy policy how to submit such a data access request.

Right to rectification:

You have the right to demand the correction of inaccurate personal data and completion of any incomplete information concerned you.

Right to erasure:

You have the right to request us to erase personal data concerning you if:

  • the personal data is no longer necessary in relation to the purpose for which they were collected;
  • you gave us consent to use your personal data and you have now withdrawn the consent;
  • you have objected to the processing of your personal data;
  • the personal data have been unlawfully processed;
  • the law requires us to delete your personal data.

We may not be able to agree to your request if it conflicts with any potential statutory retention periods or other legal obligations, however when mentioned retention periods are over, your personal data will be automatically deleted.

Right to object:

You have the right to object processing of your personal data for direct marketing purposes. If our legal basis for using your personal data is based on legitimate interest, you also have a right to object such processing. However, if we will be able to provide overriding reasons why we need to process your personal data, we will have to decline your request.

Right to restriction of processing:

You have the right to suspend further use of your personal data. When processing of your personal data is suppressed, we will restrict the processing or delete your personal data considering any applicable legal retention periods.

Right to data portability:

You have the right to obtain and reuse your personal data for your own purposes across different services. This is not a general right and there are statutory exceptions.

How do you exercise your rights?

To exercise any of these rights specified above, you can contact us and submit your request via e-mail: or a letter to Greentube GmbH, Wiedner Hauptstrasse 94 | A-1050, Vienna, Austria.

How do you withdraw your consent?

You always have a right to withdraw your consent to Greentube GmbH. Please submit your withdrawal request via e-mail: or a letter to Greentube GmbH, Wiedner Hauptstrasse 94 | A-1050, Vienna, Austria.

Please bear in mind that withdrawal of your consent does not affect the lawfulness of processing personal data based on consent before your withdrawal.

How will we verify your request?

Your request must provide sufficient information that allows our team to verify you are the person or an authorized representative of a person whose personal data we have collected (e.g., name, surname, your e-mail, other information we may request for verification purposes), describe your request with sufficient detail that allows us to properly evaluate, and respond to it.

If your request is submitted by an authorized agent, a written permission and information that verifies the identity of the agent must be enclosed with the request. We cannot provide you with the information or exercise your other right if we cannot verify your identity.

To verify your identity, we may request you to provide additional information about yourself. We will only use this information and information provided in the request to verify your identity or authority to make the request.

Your requests shall be generally handled within one month of receipt. This period may be extended by two further months based on the complexity and number of the requests. We will do our best to respond to your request as quickly as possible, but it may happen that other legal obligations or third-party rights and processes slow down the process. Should this be the case, we will always make sure to notify you about the extension within one month of receipt and inform you on its length and the reasons behind it.

Which Supervisory authority you can file a complaint?

You have the right to file a complaint to the competent supervisory authority, if you believe that your rights have been violated under the GDPR. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde).

Recipients of personal data

The provided personal data shall be processed by Greentube GmbH and only, if necessary, within Greentube Group companies located in the European Economic Area (EEA). We share your personal data only with respective service providers (Processors). These processors are providers of IT service, analytics providers/marketing tools, other tools and software solutions and further providers with similar services.

All data transfers will always be subject to a respective data processing agreement.

We may need to transfer your personal data outside the EEA or UK to our third-party service providers based in the USA, however where your personal data is transferred to a country or territory outside EEA, and to a country which is not subject to an adequacy decision approved by the EU Commission, we will make sure that a contract with strict data protection safeguards (e.g. EU Standard Contractual Clauses) is in place before we transfer your personal data.

If you would like to have more information, please contact us by sending an email to

How do you protect my personal data?

It is important for us to protect your personal data. Any personal data shared with us will be treated with care and appropriate security. We maintain physical, electronic, and procedural safeguards in connection with the collection, storage and disclosure of your personal data.

How long you will keep my personal data

We retain your personal data for as long as necessary to fulfil the purposes mentioned in this Privacy Notice, and in order to demonstrate compliance with our legal obligations.

Unless expressly stated in this Privacy Notice, we will securely delete your personal data or anonymize it so that you cannot be identified anymore once this is no longer needed.

How will you keep me updated about how you use my personal data

We regularly review and update our Privacy Notice. We will alert you about material changes by placing a notice on our website.

You can see when this Privacy Notice was last updated by checking the date at the top of this page. You are responsible for periodically reviewing this Privacy Notice.

Use of cookies

How to manage your cookie preferences?

You can always adjust your cookie settings through cookie consent manager. You can also manage your cookie preferences through the pop-up cookie banner that appears when you first visit our website. Also, it is possible manage your cookie preferences by changing your browser settings on your device to refuse the use of some or all of non-necessary cookies.

Please have in mind that blocking and deleting cookies may have an impact on your user experience.

Our Contact Details

Thank you for reading our Privacy Notice!

If you have any further questions about this Privacy Notice or the processing of your personal data, please contact our Data Protection Officer via email: or phone: +43 1 90 171