Privacy Policy

Last updated: 11 June 2026

This policy explains what personal data we process when you visit greenlist.io and when you join our waitlist, on what legal basis, and what rights you have. We keep data collection to a minimum: this site uses no tracking, no advertising pixels and no analytics.

1 · Controller

The controller responsible for data processing on this website is:

2 · Legal bases

We process personal data in accordance with the GDPR. Depending on the case, the legal basis is consent (Art. 6 (1)(a) GDPR), the performance of or steps prior to a contract (Art. 6 (1)(b) GDPR), or our legitimate interest in operating a secure, functioning website (Art. 6 (1)(f) GDPR).

3 · Hosting & server log files

This website is hosted on servers operated by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) within the EU, acting as our processor under a data processing agreement. When you access the site, the server automatically collects and stores log data that your browser transmits:

• anonymised / shortened IP address
• date and time of the request
• requested page / file and HTTP status
• referrer URL and browser / operating system type

This data is required for operation, stability and IT security and is processed on the basis of Art. 6 (1)(f) GDPR. Log data is stored only for as long as necessary and then deleted or anonymised.

4 · Content delivery (Cloudflare)

To deliver the site securely and reliably, we use the content delivery and security network of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Cloudflare processes connection data (including the IP address) to deliver content, defend against attacks and ensure availability, on the basis of Art. 6 (1)(f) GDPR. Where data is transferred to the USA, this is safeguarded by the EU-U.S. Data Privacy Framework and/or the EU Standard Contractual Clauses. More information: cloudflare.com/privacypolicy.

5 · Fonts

All fonts on this site are self-hosted on our own server. No connection to Google Fonts or any other third-party font provider is established, and no IP address is transmitted to such providers when fonts are loaded.

6 · Local storage (language preference)

We store your selected interface language (EN/DE) in your browser's local storage. This is a purely functional setting that stays on your device, is not transmitted to us as a cookie and does not contain personal data. No consent banner is therefore required.

7 · Waitlist form

If you sign up for the waitlist, we process the data you enter:

• email address (required)
• SKU range you select (e.g. "50–250 SKUs")

Purpose: to add you to the waitlist and to contact you about your first pre-import check. Legal basis: your consent (Art. 6 (1)(a) GDPR) and steps taken prior to entering into a contract at your request (Art. 6 (1)(b) GDPR). Your entry is received and stored in the operator's mailbox ([email protected]), hosted by Hetzner Online GmbH (Germany, EU) as our processor — so the waitlist submission itself stays within the EU. Connection data for delivering the form may be processed by Cloudflare as described in section 4. You can withdraw your consent at any time with effect for the future, e.g. by emailing [email protected]; we will then delete your entry. We store waitlist data until you withdraw or until the waitlist purpose no longer applies.

8 · No tracking, no profiling

We use no web analytics, no advertising or social-media pixels, no remarketing and no cross-site tracking. There is no automated decision-making in the sense of Art. 22 GDPR and no profiling of website visitors.

9 · Your rights

Under the GDPR you have the right to:

• access your data (Art. 15)
• rectification (Art. 16) and erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interest (Art. 21)
• withdraw consent at any time (Art. 7 (3))

To exercise these rights, contact [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority.

10 · Data security

This site is delivered exclusively via encrypted TLS/HTTPS connections to protect the data transmitted between your browser and our server.

11 · Changes to this policy

We may update this privacy policy to reflect changes to our service or legal requirements. The current version always applies, with the date of the last update shown above.