Effective date: 28 May 2026
Data Controller (legal entity):
Green Flow d.o.o.
Savska cesta 41, 10000 Zagreb, Republic of Croatia
OIB: 92557545052 · MBS: 06140386
Registered with the Commercial Court of Zagreb (Trgovački sud u Zagrebu)
Director: Ante Lelas
Irish Business Operations:
Green Flow Ireland
51 Bracken Road, Sandyford Business Park, D18 CV48, Dublin, Ireland
For data protection inquiries:
Email: info@greenflow.ie · Phone: +353 83 406 9819
Supervisory authorities: Croatian Personal Data Protection Agency (AZOP) acts as the lead supervisory authority. Irish residents may also lodge complaints with the Irish Data Protection Commission (DPC).
This Policy explains how Green Flow d.o.o. ("Green Flow", "we") collects, uses and protects personal data of visitors and B2B customers of www.greenflow.ie. It applies in addition to the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Croatian data-protection law.
Submitted via forms:
Collected automatically:
We do not sell or rent personal data. We share it only with:
Some of our processors (e.g. Netlify, Google) may process data outside the European Economic Area. Where this occurs, transfers are protected by European Commission adequacy decisions or Standard Contractual Clauses (SCCs) as required under Chapter V GDPR.
We retain B2B contact and transaction data for up to 7 years after the end of the business relationship, as required by Croatian tax and accounting law. Marketing-only data is deleted within 24 months of last interaction or earlier if consent is withdrawn.
Under the GDPR you have the right to:
To exercise these rights write to info@greenflow.ie.
Because Green Flow is established in Croatia, our lead supervisory authority is the:
Croatian Personal Data Protection Agency (AZOP)
Selska cesta 136, 10000 Zagreb, Croatia · azop.hr
Irish data subjects may also file complaints with the:
Data Protection Commission (DPC)
6 Pembroke Row, Dublin 2, D02 X963, Ireland · dataprotection.ie
We implement appropriate technical and organisational measures (encryption in transit, access controls, vendor due-diligence) to protect personal data from unauthorised access, loss or disclosure.
Our website is a B2B platform and is not directed at children under 16. We do not knowingly collect data from children.
See our separate Cookie Policy for opt-in details and a list of cookies used.
We may update this Policy from time to time. The "Effective date" at the top shows the latest revision.