Green Vision Planet

Privacy Policy – greenvisionplanet.com

Last updated: 11.06.2026

This Privacy Policy describes how S.C. ASISARTAS S.R.L., as a personal data controller, collects, uses and protects your data when you use the Green Vision Planet platform available at https://greenvisionplanet.com and its associated services.

Please read this document carefully. By using our platform and services, you confirm that you have understood how we process personal data, under the conditions described below.

1. The data controller

The personal data controller is:

S.C. ASISARTAS S.R.L.

  • Registered office: Str. Splaiul Independenței Nr. 202B, Bucharest, Sector 6, Romania
  • Tax ID (CUI): 32760608
  • Trade Register No.: J2014000136023
  • Administrator: Dan Cosmin Ocneanu
  • Phone: 0751 889 849
  • Email: [email protected]

For any request regarding the protection of personal data, you can contact us at the email address [email protected] or by phone at the number above.

The company is not legally required to appoint a Data Protection Officer (DPO) and has not appointed one. All requests regarding personal data are to be sent to the controller's contact details indicated above.

2. Who the data subjects are

The Green Vision Planet platform processes personal data of several categories of persons:

  • Visitors to the greenvisionplanet.com website;
  • Partners (hotels, guesthouses, restaurants and other tourism operators) who create an account and use the platform's services;
  • Contributing customers – persons who, during a transaction at a partner, choose to add a voluntary sustainability contribution (the percentage displayed at the time of the transaction);
  • Raffle participants – persons who, through their contribution, take part in a promotional raffle organized by the operator.

3. The categories of data we process

3.1. Data collected automatically (all visitors)

When you access the website, our servers may automatically record standard technical data transmitted by your browser: the IP address, the type and version of the browser, the pages visited, the date and time of the visit, the time spent on pages, as well as other technical details about the visit. This data may also be collected through cookies or similar technologies (see Section 6).

3.2. Partner data

For partners who create an account, we process: the company name, the tax identification code (CUI), the Trade Register registration number, the VAT code (if any), the type of business, the contact person's details (name, email, phone), the address, the bank details (bank name, IBAN) required for invoicing, as well as platform usage data (API keys, integration statistics).

3.3. Contributing customer data

A customer may choose to add a voluntary sustainability contribution in two ways: either online, through the Green Vision Planet widget on the partner's website, or at the partner's point of sale, by scanning the QR code on the eco badge and registering the fiscal receipt/invoice. In these situations we may process: the name, the email address, the phone number, the country (ISO code), the IP address, the contribution amount, the fiscal receipt/invoice number or the transaction reference at the partner, as well as the consents expressed (GDPR, marketing, raffle).

Important: The actual payment of the transaction and of the contribution takes place at the partner (on their own website or at their point of sale). Green Vision Planet does not process payments and does not collect bank card data from contributing customers. The platform only records the fact that a contribution has been added and the data necessary to issue the confirmation and for participation in the raffle.

3.4. Raffle participant data

For participants in the promotional raffle we process: the name, the email address, the phone number, the country, the entry ticket code, the related contribution amount and the relevant consents. In the event that a winner is designated, we may process additional data necessary for the delivery of the prize.

3.5. Data submitted voluntarily

If you contact us (by email, contact form or other channels) or voluntarily send us information, we process the data included in that communication (name, email, phone, message content) to the extent necessary to handle the request.

We do not request, through public forms, special categories of personal data (data concerning health, ethnic origin, beliefs, etc.), except in situations where there is a clear legal basis and adequate protection measures.

4. Purposes of processing and legal bases

We process your data only when we have a legal basis, for the following purposes:

a) Provision of the platform's services (creation and management of the partner account, widget integration, registration of contributions, issuance of eco certificates, raffle management)
Basis: performance of a contract – Art. 6(1)(b) GDPR.

b) Confirmation of the contribution and communication with contributors (sending the confirmation email with the verification code and the raffle ticket)
Basis: performance of a contract / pre-contractual steps and/or legitimate interest – Art. 6(1)(b) and (f) GDPR.

c) Organization and conduct of the promotional raffle (registration of participation, drawing of the winner, notification and delivery of the prize)
Basis: consent of the data subject – Art. 6(1)(a) GDPR – and/or performance of the raffle rules.

d) Invoicing and management of the relationship with partners
Basis: performance of the contract and fulfilment of legal obligations (tax, accounting) – Art. 6(1)(b) and (c) GDPR.

e) Marketing communications (newsletter, service updates), only if you have given your consent
Basis: consent – Art. 6(1)(a) GDPR. You can withdraw your consent at any time.

f) Security of the platform, fraud prevention and proper functioning of the website
Basis: the operator's legitimate interest – Art. 6(1)(f) GDPR.

g) Website traffic analysis (usage statistics, through Google Analytics)
Basis: consent – Art. 6(1)(a) GDPR (analytics cookies activated only after accepting the banner).

h) Compliance with legal obligations (tax, accounting, responding to requests from authorities)
Basis: legal obligation – Art. 6(1)(c) GDPR.

5. Recipients of the data

Personal data may be accessed or processed by:

  • Technical providers who ensure the operation of the platform: hosting and server providers, email service providers, IT maintenance and cybersecurity providers;
  • Partners (in the case of contribution data, to the extent necessary for the reconciliation of their own transactions);
  • Professional advisors (accountants, auditors, legal advisors), where necessary;
  • Public authorities and competent institutions, where there is a legal obligation or a well-founded request.

We ensure that the providers who process data on our behalf offer adequate guarantees regarding the confidentiality and security of the data and that, where necessary, there are data processing agreements compliant with the GDPR.

We do not sell your personal data to third parties.

The technical providers currently used for the operation of the platform include:

  • xCloud – management of the hosting infrastructure;
  • Romarg – hosting and email services;
  • Cloudflare – security, DNS and website delivery optimization services;
  • Google (Google Analytics) – website traffic analysis services, activated only with your consent.

6. Cookies and similar technologies

The website uses strictly necessary cookies for technical operation, session security, account authentication and management of basic preferences. These cookies do not require consent, being essential for the operation of the platform.

We also use Google Analytics to analyze traffic and improve the website. Analytics cookies are optional and are activated only after obtaining your consent, expressed through the cookie banner. You can withdraw your consent at any time (for example, by refusing through the banner or deleting cookies from your browser), in which case Google Analytics will no longer be loaded.

We do not use advertising or targeting cookies.

7. International data transfers

The data is, in principle, stored and processed in Romania and/or in the European Economic Area (EEA).

Since the promotional raffle may be international in nature, it is possible that data of participants from outside the EEA may be processed in the context of organizing the raffle. To the extent that our technical providers store or access data from outside the EEA, we ensure that any transfer is covered by an adequate legal mechanism (for example, an adequacy decision of the European Commission or standard contractual clauses).

Also, in the case of using Google Analytics (only with your consent), certain data may be processed by Google and may involve transfers outside the EEA; these transfers are covered by adequate legal mechanisms (adequacy decisions and/or standard contractual clauses).

8. Data retention period

We keep personal data only for as long as necessary for the purposes for which it was collected:

  • Partner account data: for the duration of the account's existence and, subsequently, in accordance with legal obligations (in particular tax and accounting);
  • Financial documents and invoices: for the period provided by the applicable tax and accounting legislation (generally 10 years);
  • Contribution and raffle participation data: for the duration of the raffle and a reasonable subsequent period (approximately 6 months), necessary for resolving any complaints, claiming prizes and fulfilling legal obligations;
  • Contact messages: approximately 12 months from the last interaction, unless a contractual relationship or a legal obligation for longer retention results;
  • Technical data and security logs: for short or medium periods, depending on security needs.

9. Your rights

In accordance with the GDPR, you benefit from the following rights:

  • The right of access to the data we hold about you;
  • The right to rectification of inaccurate or incomplete data;
  • The right to erasure ("the right to be forgotten"), under the conditions provided by law;
  • The right to restriction of processing;
  • The right to object to processing based on legitimate interest or for direct marketing;
  • The right to data portability;
  • The right to withdraw your consent at any time, where the processing is based on consent (withdrawal does not affect the lawfulness of processing carried out previously).

To exercise these rights, you can contact us at [email protected]. We will respond to your request within the time limits provided by law.

If you consider that the processing of your data does not comply with applicable legislation, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP):

  • Address: B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest
  • Email: [email protected]
  • Web: www.dataprotection.ro

If you reside in another European Union state, you may also contact the supervisory authority in your country.

10. Data security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, accidental or unlawful loss, destruction, disclosure or alteration. These measures include, without being limited to: the use of secure connections (HTTPS/SSL), control of access to systems and accounts, updating the infrastructure and careful selection of technical providers.

However, no method of electronic transmission or storage is 100% secure. You are responsible for keeping confidential the passwords associated with your accounts.

In the event of a security incident affecting personal data, we will act in accordance with the applicable legal obligations.

11. Protection of minors

Our services are not intended for persons under the age of 16 and we do not knowingly collect their personal data. If processing is based on consent and the person is under 16, we will request the consent of the parent or legal guardian.

Participation in the promotional raffle is permitted exclusively to persons who have reached the age of 18, in accordance with the Raffle Rules.

12. Changes to this policy

We may periodically update this Privacy Policy to reflect legislative changes, changes to the platform's features or to the way data is processed. The updated version will be published on the website, together with the date of the last revision. If the changes are significant or if the law requires it, we will inform you accordingly.

13. Contact

For any questions or requests regarding this Privacy Policy or the processing of your personal data, you can contact us:

S.C. ASISARTAS S.R.L.

  • Email: [email protected]
  • Phone: 0751 889 849
  • Address: Str. Splaiul Independenței Nr. 202B, Bucharest, Sector 6, Romania