Privacy Policy

1. Data controller

The controller of your data is Bernhard Mike Petrovic, sole trader, with address at Av. Octavio Paz 12, Portal 1, Esc. 1, 4ºE, 29190 Málaga (Spain). NIF: ESX2101427D, email bmp@greenplanvision.com.

No Data Protection Officer (DPO) has been appointed, as this is not legally required under Article 37 GDPR or Article 34 of the Spanish LOPDGDD. For any matter regarding your data you may contact bmp@greenplanvision.com.

2. Data we process and its source

This website is informational and requires no registration. We only process:

• The data you voluntarily provide when writing to us by email at bmp@greenplanvision.com: name, company, email, phone and the content of your enquiry.
• The IP address and technical access data (time, requested page, browser) your browser sends to our server when you visit; used only to serve and secure the site.
• Only if you accept statistics: the data your browser sends when loading each page (page visited, referring page, title, IP address and browser), from which Umami, hosted on our own server at Hetzner in Germany (EU), builds aggregate statistics using a pseudonymous identifier that changes every month. The IP address is not stored, no cookies are used, and the statistics are deleted automatically after 25 months.
• This site's contact form has no server or backend: the data you enter is not sent or stored on the site. Contact takes place by email.

3. Purpose of processing

We use your data to handle and manage your enquiry or business request (B2B relationship), prepare a service proposal where applicable and maintain the commercial or pre-contractual relationship, as well as for the technical and secure operation of the website.

No profiling and no automated decisions with legal or similar effects take place.

4. Legal basis

The legitimate interest in handling and managing the B2B business communication you initiate and in providing the website in a functional and secure way (Art. 6.1.f GDPR).

Where your enquiry is directed at the possible contracting of our services, pre-contractual measures taken at your request (Art. 6.1.b GDPR).

Your consent for web statistics: the access to your device under Art. 5(3) of Directive 2002/58/EC (in Spain Art. 22.2 LSSI, in Romania Art. 4 Legea 506/2004, in Germany § 25 TDDDG) and the subsequent processing on our server under Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future (Art. 7(3) GDPR).

5. Retention period

We keep your enquiry data for as long as necessary to handle it and, where applicable, for the duration of the resulting business relationship. Afterwards it is deleted or anonymised, unless it must be kept to meet legal obligations (e.g. commercial or tax) or potential liabilities during the applicable limitation periods.

6. Recipients and processors

We do not disclose your data to third parties except where legally required. Technology providers processing data on behalf of Bernhard Mike Petrovic act as processors under an Art. 28 GDPR agreement:

• Hetzner Online GmbH, website hosting, with servers in the European Union (Germany).
• Google (Google Workspace), the email service through which we handle your enquiry.

7. Third-party resources and international transfers

This site loads no third-party resources when you open it: typefaces, code libraries and images are served from our own server in the EU (Germany). We use no Google Fonts, external CDNs or external image libraries.

Only exception: if you open the product origin map in the demo, your browser downloads map tiles from OpenStreetMap (OpenStreetMap Foundation, United Kingdom), which receives your IP address as an independent controller. The United Kingdom has an adequacy decision from the European Commission. If you do not open the map, no such connection is made.

8. Email and transfers outside the EU

Email is handled with Google Workspace (Google Ireland Ltd.). Any transfers to the USA rely on the EU-US Data Privacy Framework adequacy decision and/or the European Commission's standard contractual clauses (Arts. 45 and 46 GDPR). You can request details and a copy of the safeguards at bmp@greenplanvision.com.

9. Your rights

You have the right to access, rectify or erase your data, object to its processing, request its restriction and portability. You may exercise them by writing to bmp@greenplanvision.com. If you believe your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es). If you live in Romania, you may also lodge a complaint with the Romanian supervisory authority (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal, ANSPDCP, www.dataprotection.ro) under Art. 77 GDPR.

You can withdraw your consent to web statistics at any time via the “Statistics settings” link at the foot of every page or via the Cookie Policy, without affecting the lawfulness of processing carried out before withdrawal. From then on, no data is sent.

Providing your data is voluntary; the only consequence of not doing so is that we cannot handle your enquiry. For cookies, see our Cookie Policy.

10. Data of guests of venues using Hurtia

When a bar or restaurant uses Hurtia (QR menu, orders, bookings, messages by email or WhatsApp), the venue itself is the controller of its guests' data. Bernhard Mike Petrovic (Hurtia) acts only as a processor on the venue's behalf and instructions, with servers in the EU.

The venue informs its guests when collecting data. News is only sent with express consent confirmed by the guest (confirmation link); every message has an unsubscribe link that needs no login.

If a guest asks for erasure, their contact data are deleted; the proof of consent is kept blocked and pseudonymised (Art. 32 LOPDGDD) only to handle possible claims, for at most 3 years, and then destroyed. To exercise your rights, contact the venue or bmp@greenplanvision.com and we will pass it on to the venue.

11. Hurtia MDM: venue devices and location

The venue's work devices (POS, tablets, phones) may be managed with Hurtia MDM. The venue, as employer, is the controller; Hurtia is the processor.

If the venue enables the location check (geofencing), the device checks its position only during the configured service hours and only to know whether it is inside the venue: yes or no. Outside the venue the app locks. No location history is stored and no movement profile is built; outside service hours the location is not queried.

Legal basis: Arts. 87 and 90 LOPDGDD and Art. 20.3 of the Spanish Workers' Statute. Under Art. 87.3 LOPDGDD, the venue must set out in writing the criteria for using the digital devices, with the participation of the workers' representatives where they exist. Before enabling it, the venue must inform its employees (and, where applicable, their representatives) expressly, clearly and unambiguously about this function, its purpose and their rights. The MDM does not access messages, photos or personal browsing.