GDPR Policy
Data Subject Access Requests
Green Project is fully compliant with GDPR, and maintains carefully-designed internal policies and controls to ensure that EU and UK persons' data are collected and processed lawfully.
Submitting a Data Subject Access Request (DSAR)
As an EU or UK person, you can notify Green Project that you would like us to delete any data stored about you, or request Green Project provide a copy of any data stored about you, at any time. To submit a DSAR, please use our DSAR form, or contact Green Project or our appointed EU/UK Representatives directly using the contact information listed below.
EU and UK Representatives
As an EU or UK person, you can notify Green Project that you would like us to delete any data stored about you, or request Green Project provide a copy of any data stored about you, at any time. To submit a DSAR, please use the forms above, or contact Green Project or our EU/UK representatives directly.
Green Project Technologies, Inc. +1 888 828 8923 | EU Representative Adam Brogden +353 15 549 700 | UK Representative GDPR Local Ltd +441 772 217 800 |
List of Subprocessors
To support the delivery of our Services, Green Project Technologies, Inc. (“Green Project” “we” or “our”) may engage and use data processors (each, a “Subprocessor“) with access to the Customer Content and personal information (collectively, “Customer Data”) customers may upload, access, process, or transmit to our services. This page provides important information about the identity, location and role of each Subprocessor. Terms used on this page but not defined have the meaning set forth in your agreement with Green Project Technologies, Inc., for the provision of our services (the “Agreement”).
We currently use third-party Subprocessors to provide infrastructure services, data integration services, customer support, and email notifications. Prior to engaging any third-party Subprocessor, we evaluate their privacy, security and confidentiality practices. We also require Subprocessors to be bound by written agreements that require them to provide, to the extent the Subprocessor is providing the same data processing services that are being provided by us, at least the same level of data protection in all material respects as we make available under its data processing addendum.
Subprocessors - account50 and act50
Entity Name | Processing Activities | Location of Servers | Means of lawful data transfer |
|---|---|---|---|
Microsoft Azure | Cloud Service Provider – Infrastructure and Storage | United States | Standard Contractual Clauses |
MongoDB, Inc | Cloud Database Provider – Infrastructure, storage, and architecture | United States | Standard Contractual Clauses |
Twilio, Inc | SMS Services – 2 Factor Authentication | United States | Standard Contractual Clauses |
Mailgun by Sinch, Inc | Transactional Email – Platform notifications | United States | Standard Contractual Clauses |
Hubspot, Inc | Customer support – Knowledgebase, support email, and ticketing system | United States | Standard Contractual Clauses |
Atlassian, Inc: Jira | Internal ticketing, security response | United States | Standard Contractual Clauses |
Google, Inc | Website analytics | United States | Standard Contractual Clauses |
Microsoft, Inc | Internal and customer communication - email, oneDrive | United States | Standard Contractual Clauses |
Slack | Internal and customer-related communications | United States | Standard Contractual Clauses |
Urjanet, Inc | Utility data integrations | United States | Standard Contractual Clauses |
Okta, Inc (Auth0) | Authentication and identity services | United States | Standard Contractual Clauses |
Pendo, Inc | Session replay and analytics | United States | Standard Contractual Clauses |
ACT Group B.V. | Marketing and Analytics | Netherlands | Standard Contractual Clauses |
ACT Digital UK Ltd. | Data processing, application delivery | Germany | Standard Contractual Clauses |
Couchdrop | SFTP Integrations | United States | Standard Contractual Clauses |
Subprocessors - engage50
Entity Name | Processing Activities | Location of Servers | Means of lawful data transfer |
|---|---|---|---|
Amazon Web Services | Cloud Service Provider – Infrastructure and Storage | Germany, Republic of Ireland | Standard Contractual Clauses |
Databee | Data cleaning and analysis | Germany | Standard Contractual Clauses |
Authentication | Germany | Standard Contractual Clauses | |
Snowflake | Data storage and analytics | Germany | Standard Contractual Clauses |
Anthropic, PBC | AI-powered platform functionality | Germany | Standard Contractual Clauses |
OpenAI, Inc | AI-powered platform functionality | Germany | Standard Contractual Clauses |
ACT Group B.V. | Customer marketing, renewable energy data | Netherlands | Standard Contractual Clauses |
ACT Digital UK Ltd. | Data processing, application delivery | Germany | Standard Contractual Clauses |