GREENSTRATAI acts as data controller for its own processing operations and, depending on the case, as processor for processing carried out on behalf of its customers.
Data controller
GREENSTRATAI, SAS with share capital of €1,500.00, registered with the Lyon Trade and Companies Register under no. 984 233 163, registered office: Immeuble Le Silex 2, 13 rue des Cuirassiers, 69003 Lyon, France.
Personal data contact: dpo.gs@greenstratai.io
This contact handles all personal data requests.
Data collected
Depending on the services used, the data processed may include: identity, role, company, business contact details, account identifiers, connection logs, actions performed in the Solution, contact requests, quotes, contracts, invoices, support exchanges, browsing data and cookie preferences.
The GreenStratAI Solution may also process technical, energy, building or connected-equipment data: consumption, measurements, equipment states, alerts, performance indicators, reports and aggregated data.
GREENSTRATAI does not seek to collect sensitive data. Where technical data could indirectly reveal occupancy or presence patterns, GREENSTRATAI applies minimisation, access restriction, aggregation or pseudonymisation measures where relevant.
Purposes and legal basis
Data is processed to: respond to contact or demonstration requests; create and manage accounts; provide, maintain and secure the Solution; manage contracts, orders, invoices and payments; provide support; produce reports, dashboards or recommendations; improve the services; produce statistics; send business communications; manage GDPR rights; comply with legal, accounting, tax or judicial obligations.
The legal basis is, depending on the processing: performance of a contract, pre-contractual measures, GREENSTRATAI’s legitimate interest, consent for non-essential cookies or certain communications, and applicable legal obligations.
Recipients and processors
Data is accessible to GREENSTRATAI’s authorised teams, to authorised customer administrators and users, as well as to providers strictly necessary for hosting, technical operations, security, maintenance, billing, customer relations and support.
The website is hosted by Opencaps.io on Hetzner Online GmbH infrastructure, located in Germany. Data is not sold to third parties.
If third-party tools involve a transfer outside the European Economic Area, GREENSTRATAI frames such transfers with appropriate safeguards, including adequacy decisions, standard contractual clauses and additional measures where necessary.
Retention periods
Data is retained for the period necessary for the purposes pursued, then archived where law or the defence of GREENSTRATAI’s rights so requires. As an indication:
· Prospects: 3 years from the last active contact.
· Contractual data: duration of the contract then up to 5 years for evidence purposes.
· Billing and accounting: 10 years.
· Security logs: typically 6 to 12 months.
· Cookies: according to their purpose and applicable recommendations.
Security and rights
GREENSTRATAI implements appropriate technical and organisational measures: access control, authentication, authorisations, logging, backups, partitioning, confidentiality and selection of providers offering sufficient guarantees.
Data subjects have the rights to access, rectification, erasure, objection, restriction, portability, withdrawal of consent, as well as the right to define post-mortem instructions. They may exercise their rights at dpo.gs@greenstratai.io, or by post at the registered office. They may also lodge a complaint with the CNIL.
Cookies
The website may use cookies necessary for operation, security, preference memorisation, audience measurement or service improvement. Non-essential cookies are placed only after consent where required. The user may modify their choices via the cookie management module on the website.
This policy may be updated to reflect changes in services, tools or regulatory obligations.