1. Controller and scope
GreenArt UG (haftungsbeschränkt), Rathausplatz 8, 71397 Leutenbach, Germany, represented by managing director Luca Osman Akyildiz, is responsible for this website. Contact: info@greenartedu.com, +49 176 24934919. This notice covers greenartedu.com, enquiries, appointment links and the technical application entry points. Contractual AI project access requires additional information specific to the agreed processing.
2. Hosting and technical access data
IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, hosts this website. Page and asset requests involve the requested address, time, transferred volume, browser and operating system, referring page and IP address. Processing serves reliable delivery and protection against errors and abuse. The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in secure website operation. IONOS acts as a technical hosting provider. IONOS describes anonymised IP addresses and storage for up to eight weeks for its standard webhosting access logs; application and security logs are separate. See IONOS hosting information. Connections to this website use HTTPS.
3. Cookies, local storage and analytics
Optional Google Analytics measurement is currently disabled. This website does not load Google Analytics scripts. Previous analytics choices do not reactivate tracking, and accessible existing Analytics cookies are expired when pages load.
Protected applications may use a session cookie for access control, local display settings and a conversation identifier stored as “lum_sid”. The conversation identifier links follow-up requests to a conversation and remains until a new conversation is started or local browser data is deleted. It is separate from server-side conversation records. Session cookies normally last for the browser session; display settings remain until deleted or overwritten.
Access to terminal equipment that is strictly necessary for a function you request is based on section 25(2)(2) TDDDG. Associated personal-data processing relies on Article 6(1)(b) or (f) GDPR, depending on the function. You can delete local data in your browser settings; settings may then need to be selected again.
4. Contact forms and email
We process your name, email address, optional company details and message to answer an enquiry, communicate and, where relevant, prepare a contract. Required fields are marked. Without the required contact information we cannot process a form; email and telephone remain alternatives. The legal basis is Article 6(1)(b) GDPR for contractual enquiries and Article 6(1)(f) for other enquiries, based on our legitimate interest in responding. Hosting and email infrastructure handle transmission. Data is deleted once no longer necessary for the enquiry, communication, contract performance, statutory retention or legal claims. Enquiries resulting in a contract may become business records subject to the applicable retention requirements. A contact enquiry does not subscribe you to a newsletter.
5. Abuse prevention
Forms use self-hosted checks against automated or abusive submissions, including technical validation features, timestamps, short-lived signatures and rate limits. Technical IP information and entered email addresses are used for server-side derived rate-limit identifiers. No external CAPTCHA service is used. Processing relies on Article 6(1)(f) GDPR and our legitimate interest in protecting our forms and mailbox from spam and attacks. Rate-limit windows extend up to 24 hours, depending on the check; form signatures remain valid for no more than two hours. These validation periods are not a blanket deletion period for all server logs.
6. Appointment booking through Cal.com
Appointment buttons are links to an external Cal.com booking page. No Cal.com calendar is automatically embedded. Your browser connects to Cal.com only when you follow that link. You can also arrange an appointment by email or telephone.
Bookings involve your name, email address, appointment details, answers you enter and technical access information. We use booking information to organise appointments and communicate. The legal basis is Article 6(1)(b) GDPR for contract-related bookings or Article 6(1)(f), based on our legitimate interest in efficient scheduling, for other appointments. The provider is Cal.com, Inc., USA. Cal.com describes its own website processing and its processor role for booking data. Processing in the USA or by international subprocessors is possible. See Cal.com’s privacy notice for recipients, safeguards and retention information. We retain booking information while needed for scheduling or the resulting business relationship, subject to statutory retention obligations.
7. Newsletters and existing subscriptions
If you explicitly subscribe to a GreenArt newsletter, we process your email address and voluntary additional details for delivery. Subscription uses double opt-in; registration and confirmation are processed to document consent. Delivery is based on Article 6(1)(a) GDPR. Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, receives the necessary contact and confirmation information for subscriptions and delivery. See Brevo’s privacy notice. Contact forms do not constitute a newsletter subscription.
You can withdraw consent for future delivery using the unsubscribe link or by emailing info@greenartedu.com. Evidence of consent may be retained where necessary for legal obligations or legal claims. Withdrawal does not affect the lawfulness of earlier processing.
8. Locally hosted media and tools
LumEnerg videos, images, fonts and website/BIM libraries are delivered from our own webspace. There are no embedded players from YouTube, ElevenLabs or other video platforms. Requests generate the technical access data described above.
The BIM viewer processes a selected IFC file in its browser-side program; file selection itself does not upload the file to a GreenArt upload endpoint. Opening a model from a URL does retrieve that URL. Use only models and sources you are authorised to process. Browser-side BIM viewing is separate from submitting data to a server-side AI project application.
9. Protected AI applications
Protected LumEnerg applications use an access session. Questions, project details, generated answers and feedback may be processed and logged for quality assurance. You are interacting with an AI system. Enter only data and documents whose processing has been agreed for your access.
Contractual enquiries rely on Article 6(1)(b) GDPR. Necessary security and quality assurance may rely on Article 6(1)(f), based on our legitimate interest in reliable, verifiable operation. Before confidential or personal project information is processed, the permitted data categories, AI providers, international transfers, access permissions and deletion periods must be established for the particular project. This notice does not promise that all project access operates without external AI providers.
Marketing animations illustrate a process. Playing a video does not submit a question to an AI model. These public website functions do not make solely automated decisions about individuals with legal or similarly significant effects under Article 22 GDPR.
10. Your rights
Subject to the legal conditions, you may request access, rectification, erasure, restriction of processing and data portability under Articles 15–20 GDPR. You may withdraw consent prospectively under Article 7(3); earlier lawful processing remains unaffected. Contact info@greenartedu.com to exercise your rights.
Objection: For processing under Article 6(1)(f), you may object on grounds relating to your particular situation under Article 21(1). You may object to processing for direct marketing at any time under Article 21(2). You may complain to a supervisory authority under Article 77. The authority for GreenArt’s location is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg. You may also contact another competent authority.
11. Changes
We update this notice when actual processing changes. Any future activation of optional analytics or additional external embeds requires appropriate information and, where required, prior consent.