privacy policy

This Privacy Policy explains how personal data are processed when you visit our websites or make general enquiries. It applies to all visitors and enquirers, regardless of whether they have a business relationship with us. We sell exclusively to businesses.
1. Controller and data protection contact
green coco europe marketing und vertriebsgesellschaft mbH
Königstraße 33-37, 90402 Nürnberg, Germany
Represented by Managing Director Stefan Reiß
Telephone: +49 (0) 911 580 5889 0
Email: info@green-coco.com
For questions about data protection or to exercise your rights, please use the contact details above. Please identify your enquiry as a data protection request.
2. Website operation and server data
Our websites are hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. STRATO states that it uses data centres in Germany for web hosting.
When you access our websites, technical connection data are processed, in particular your IP address, the requested web address, the date and time of the request and the information transmitted by your browser. This is necessary to deliver the content and establish the connection. Operational and security logs are used to analyse errors and prevent misuse.
The legal basis is Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest is to provide a functional and secure online service. STRATO is the recipient of the data processed for hosting.
According to STRATO, visitors' IP addresses are stored for a maximum of seven days to detect and prevent attacks. According to STRATO, the access logs provided in the hosting customer area contain anonymised IP addresses or hostnames and are available for the preceding six weeks.
If individual log data are needed to investigate a specific security incident, only the data necessary for that purpose are retained until the investigation or any necessary legal proceedings have been concluded. The right to object is explained in section 7.
3. Cookies and embedded services
Our websites do not use cookies.
4. Contacting us
When you contact us by contact form, email, telephone or post, we process the information you provide to handle your enquiry and for related communication. Depending on the enquiry, this includes your name, email address, telephone number, postal address, company and role where applicable, and the content of your message. Necessary notes may be taken during telephone calls.
When you submit one of our contact forms, the information you enter is sent to us by email. We handle this message as part of our email correspondence. Mandatory fields are marked on the relevant form. Without the information necessary to respond, we may be unable to handle your enquiry. Contacting us is voluntary; information in optional fields is not required for the general handling of your enquiry.
No separate consent under data protection law is required for new enquiries. The collection and processing of general product, press and business enquiries are based on Article 6(1)(f) GDPR. Our legitimate interest is to respond appropriately to enquiries and conduct business communication. This also applies if you act as a contact person for a company. If your enquiry relates to a contract that you personally are entering into or have entered into with us, the legal basis is Article 6(1)(b) GDPR, insofar as the processing is necessary to take steps at your request prior to entering into a contract or to perform that contract.
Access is granted to the persons responsible for your enquiry and to the service providers used for operating the forms, email communication and IT operations. Please do not provide information that is not needed for your enquiry, in particular unnecessary health data.
Enquiry data are deleted once your enquiry has been fully dealt with and the data are no longer needed for specifically anticipated follow-up questions or for the purposes stated in section 5. Section 2 applies to server logs generated in the operation of the websites.
5. Recipients and retention
Where service providers process personal data on our behalf and under our instructions, they act as processors in accordance with Article 28 GDPR. Further disclosures are made insofar as necessary to comply with a legal obligation, in particular to competent authorities, or to legal advisers and courts where necessary to establish or defend legal claims. The legal bases are Article 6(1)(c) GDPR in conjunction with the relevant legal obligation, or Article 6(1)(f) GDPR, as applicable. Our legitimate interest is to protect and enforce our rights.
Where a message is subject to a statutory retention obligation, we retain it for the prescribed period. For commercial and business correspondence, this is generally six years from the end of the year in which it was received or sent (section 257 of the German Commercial Code (HGB), section 147 of the German Fiscal Code (AO)). Not every general enquiry constitutes business correspondence subject to a retention obligation. Statutory retention is based on Article 6(1)(c) GDPR.
In the event of a specific legal dispute, the data required for it are retained until the matter has been resolved. Any further use remains limited to the relevant retention purpose. Once that purpose ceases to apply, the data are deleted unless another legal basis requires continued retention.
6. Processing outside the EU and the EEA
In the course of the processing activities described in this Privacy Policy, no personal data are transferred to recipients outside the European Union (EU) or the European Economic Area (EEA).
7. Your rights
Subject to the applicable legal conditions, you have the right to access the data processed about you and obtain a copy (Article 15 GDPR), to rectification (Article 16 GDPR), to erasure (Article 17 GDPR), to restriction of processing (Article 18 GDPR) and to data portability (Article 20 GDPR). Erasure may, in particular, be excluded where statutory retention obligations or necessary purposes relating to legal claims prevent it.
You have the right to object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR (Article 21(1) GDPR).
Following such an objection, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
If data are processed for direct marketing, you may object to this use at any time without giving any particular reasons. This also applies to related profiling. Use for these purposes will then cease.
If we still process data from earlier contact form enquiries on the basis of your consent (Article 6(1)(a) GDPR), you may withdraw that consent at any time with effect for the future, for example by emailing info@green-coco.com. This does not affect the lawfulness of the processing carried out before withdrawal. We will then stop handling your enquiry on that basis; separate grounds for retention under section 5 remain unaffected.
To exercise your rights, please use the contact details in section 1. We generally handle your request free of charge and inform you within one month. If a legally permitted extension is necessary, we will notify you within that period and explain the reasons.
Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The authority generally responsible for private companies in Bavaria is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach
Email: poststelle@lda.bayern.de
Website and online complaints service: www.lda.bayern.de
8. Updates
We update this Policy if our processing activities or the legal requirements change. We will inform you in advance of any intended processing for other purposes in accordance with the legal requirements.
Last updated: 14 September 2026