Skip to main content
Legal Documents · Green Flow d.o.o.

GDPR — Data Protection

Regulation (EU) 2016/679 · Effective date: 28 May 2026

Privacy PolicyGeneral Terms and ConditionsReturn PolicyGDPRCookiesCompany information

GDPR — Protection of personal data

Regulation (EU) 2016/679 · Effective date: 28 May 2026 · Applies to www.greenflow.ie

Green Flow d.o.o. is committed to protecting your personal data and complying with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"). This page summarises our GDPR position. The full detail is in our Privacy Policy.

1. Data Controller

Green Flow d.o.o., Savska cesta 41, 10000 Zagreb, Croatia · OIB: 92557545052 · Director: Ante Lelas · Email: info@greenflow.ie

2. Personal data we collect
3. Legal basis (Art. 6)
4. Your rights under the GDPR
👁
Right of access (Art. 15)
Request a copy of personal data we process about you.
✏️
Right to rectification (Art. 16)
Have inaccurate or incomplete data corrected.
🗑
Right to erasure (Art. 17)
Request deletion of your data ("right to be forgotten") subject to legal retention obligations.
🚫
Restriction of processing (Art. 18)
Request temporary suspension of processing.
📦
Data portability (Art. 20)
Receive your data in a structured, machine-readable format.
↩️
Withdrawal of consent (Art. 7)
Withdraw consent at any time without affecting prior lawful processing.

To exercise your rights write to info@greenflow.ie.

5. Supervisory authorities

As Green Flow is established in Croatia, our lead supervisory authority is the Croatian Personal Data Protection Agency (AZOP):
Selska cesta 136, 10000 Zagreb · azop.hr

Irish data subjects may also lodge a complaint with the Data Protection Commission (DPC):
6 Pembroke Row, Dublin 2, D02 X963, Ireland · dataprotection.ie

6. International transfers

Where our processors (e.g. Netlify, Google) process data outside the EEA, transfers are protected by European Commission adequacy decisions or Standard Contractual Clauses under Chapter V of the GDPR.

7. Retention

B2B records: up to 7 years post business-relationship for Croatian tax/contract compliance. Marketing-only data: up to 24 months from last interaction or earlier on withdrawal of consent.