Privacy Policy

Green Plank® is a brand operated by Compocentra AB, a Swedish company.

For the processing described in this Privacy Policy, the data controller is:

In this Privacy Policy, "Green Plank", "we", "us" and "our" refer to Compocentra AB.

Compocentra AB determines the purposes and means of the personal data processing described in this Policy and is therefore the data controller under Regulation (EU) 2016/679, the General Data Protection Regulation ("GDPR").

This Privacy Policy explains how we collect, use, store, disclose and protect personal data in connection with:

our website greenplank.eu; enquiries and contact requests; quotation requests; product and project enquiries; sample requests; customers and prospective customers; architects, designers, consultants, contractors, installers and developers; distributors, resellers and suppliers; municipalities and other public-sector organisations; professional business contacts; warranty or product-support matters; events, exhibitions and meetings; recruitment where applicable; and other business relationships.

Green Plank does not operate an online shop or sell products through online checkout on greenplank.eu. The Website is primarily an information, product-support, sample-request and business-contact platform.

This Policy applies to personal data relating to natural persons. Information relating solely to a legal entity is not personal data, although information relating to an identifiable employee, director, representative or contact person of a company is personal data.

Depending on how you interact with us, we may process the following categories of personal data.

Contact and professional information

This may include your name, company or organisation, job title, professional role, email address, telephone number, country, city and other business contact details.

Enquiry and correspondence information

This may include information contained in emails, contact forms, telephone conversations, meeting notes and other correspondence with us.

Sample-request information

Where you request Green Plank product samples, we may process information such as your name, company, customer type, email address, telephone number, country, city, delivery address, requested product, profile, colour, surface finish, number of samples, preferred timeframe, intended use, project type, estimated project size, project start date and any comments you provide.

Quotation, customer and project information

This may include project information, requested products, quantities, specifications, delivery locations, quotation history, orders, contractual information, invoicing information, delivery information and correspondence relating to a project or commercial relationship.

Supplier, reseller and business-partner information

We may process names, professional contact details, company information, commercial correspondence, contractual information and information necessary to administer our relationship with distributors, resellers, installers, suppliers, logistics providers and other partners.

Website and technical information

When you use our Website, certain technical information may be processed, including IP address, browser type, device type, operating system, language, referring pages, pages visited, date and time of access, cookie identifiers and similar technical information.

Marketing and communication information

We may process information about your professional interests, products or projects you have enquired about, communications sent to you, and whether you have asked us not to receive further marketing.

Recruitment information

If you apply for a position with us, we may process your name, contact information, CV, employment history, education, qualifications and other information that you voluntarily provide in connection with your application.

We do not normally require special categories of personal data such as information concerning health, ethnic origin, political opinions, religious beliefs, trade-union membership, biometric data or sexual orientation.

Please do not include such information in free-text fields, emails or other communications unless it is genuinely necessary and we have requested it.

If sensitive information is provided to us unnecessarily, we may delete it.

We also do not intentionally collect information relating to criminal convictions or offences unless permitted and necessary under applicable law.

We normally obtain personal data directly from you when you:

contact us; request information; request a quotation; request product samples; communicate with our sales or technical teams; attend a meeting, exhibition or event; become a customer, supplier or business partner; submit a warranty or support request; or apply for a position.

For professional and B2B activities, we may also obtain business contact information from other sources, including:

company and organisation websites; professional directories; publicly available business registers; professional networking platforms; industry publications; exhibitions and trade fairs; architects, contractors, distributors, resellers and other business partners; referrals and introductions; public procurement or project information; and other legitimate publicly available professional sources.

Where we obtain your personal data indirectly, we process only information that is reasonably relevant to our business relationship or legitimate commercial activities.

We process personal data only where we have a lawful basis under the GDPR.

Enquiries, product information and sample requests

We process your contact details, request information, project information and delivery information to respond to enquiries, provide technical information, arrange product samples and prepare quotations.

Depending on the circumstances, our lawful basis is:

Article 6(1)(b) GDPR – taking steps at your request before entering into a contract; or

Article 6(1)(f) GDPR – our legitimate interest in responding to professional enquiries, providing product information and developing business relationships.

Submitting a contact or sample-request form is therefore not treated as consent to receive unrelated marketing.

Quotations, orders, contracts and deliveries

We process information necessary to prepare quotations, administer commercial relationships, process confirmed orders, organise production and delivery, issue invoices and provide after-sales service.

The lawful basis may be:

Article 6(1)(b) GDPR – performance of a contract or pre-contractual measures where the individual is personally a party to the contract;

Article 6(1)(f) GDPR – our legitimate interest in administering contracts and commercial relationships with companies and organisations represented by individual contact persons; and

Article 6(1)(c) GDPR – compliance with legal obligations such as accounting, taxation and regulatory requirements.

Customer service, warranty and technical support

We process relevant contact, Product and project information to investigate questions, complaints, warranty matters and technical issues.

Our lawful basis is contractual necessity where applicable and otherwise our legitimate interests in providing customer support, protecting our business and resolving disputes.

B2B relationship management and business development

We may process professional contact information in order to establish and maintain relationships with architects, consultants, developers, contractors, municipalities, distributors, resellers and other businesses relevant to Green Plank products.

Our lawful basis is normally Article 6(1)(f) GDPR, based on our legitimate interest in developing and maintaining relevant professional business relationships.

We consider the nature of the information, the professional context, the reasonable expectations of the individual and the potential impact on the individual's privacy before relying on legitimate interests.

Direct marketing

Where permitted by applicable law, we may contact existing or prospective professional business contacts about Green Plank products, technical information, projects, product developments, events or similar matters relevant to their professional role.

The GDPR lawful basis may be our legitimate interests under Article 6(1)(f) or consent under Article 6(1)(a) where consent is required.

Electronic marketing is also subject to applicable electronic communications and marketing legislation.

You have the right to object to direct marketing at any time.

Once you object or unsubscribe, we will stop using your personal data for direct marketing. We may retain limited information on a suppression list so that we can respect your preference in the future.

Website operation and security

We process technical information where necessary to operate, secure and maintain the Website, prevent misuse, diagnose technical problems and protect our IT systems.

Our lawful basis is our legitimate interest in maintaining a secure and functional Website.

Website analytics and non-essential cookies

Where analytics or other non-essential cookies or similar technologies require consent, they are used only after the required consent has been obtained.

The lawful basis for related personal-data processing is Article 6(1)(a) GDPR – consent.

You can withdraw or change your cookie consent through Cookie Settings on the Website.

Further information is available in our Cookie Policy.

Legal compliance and legal claims

We may process personal data where necessary to comply with legal requirements, respond to authorities, maintain accounting records, prevent or investigate fraud or misuse, establish or defend legal claims or protect our legal rights.

The lawful basis is legal obligation under Article 6(1)(c) and/or legitimate interests under Article 6(1)(f), depending on the circumstances.

Certain information is necessary for us to provide a requested service.

For example, we normally require your name and contact information to respond to an enquiry, and we require a delivery address to send physical samples.

Fields marked as mandatory on our forms must normally be completed in order for us to process the request.

If required information is not provided, we may be unable to respond, prepare a quotation, send requested samples, enter into a contract or provide the requested service.

Providing information for optional marketing purposes is voluntary.

Green Plank operates primarily in professional and B2B markets. We may therefore identify relevant professional contacts such as architects, consultants, contractors, developers, purchasing managers, distributors, resellers and public-sector professionals through legitimate professional sources.

The personal data involved will generally be limited to information such as:

name, employer or organisation, professional title or role, professional email address, professional telephone number and information concerning professional responsibilities or business interests.

We may use this information to make relevant professional contact where we reasonably believe that Green Plank products or information may be relevant to the person's professional responsibilities.

The lawful basis is normally our legitimate interest in conducting proportionate B2B business development.

Recipients can object to such processing or to direct marketing at any time.

Our Website uses cookies and similar technologies.

Some cookies are strictly necessary for the Website to function and cannot reasonably be disabled through our consent system.

Other technologies, including analytics cookies, are used only where the required consent has been provided.

Our Cookie Policy provides further information about the cookies and technologies used, their purposes, providers and storage periods.

You may review or change your preferences at any time through the Cookie Settings option available on the Website.

Refusing non-essential cookies does not prevent you from accessing the main content of the Website.

We do not sell personal data.

Where necessary for the purposes described in this Policy, personal data may be disclosed to or processed by service providers and business partners such as website hosting and IT providers, cloud and email providers, CRM and business-software providers, analytics providers, production and warehouse partners, delivery and logistics companies, sample-delivery providers, distributors or local commercial partners where appropriate, accounting and auditing providers, legal and professional advisers, insurers, banks and payment-service providers, debt-collection providers, cybersecurity providers and public authorities where disclosure is legally required.

We may also share relevant information with Green Plank-associated companies or operational partners where they are involved in manufacturing, logistics, customer service or execution of a particular project.

Processors that process personal data on our behalf are required to process it only in accordance with our instructions and applicable data-protection requirements.

We may disclose information where required by law, court order or competent authority, or where reasonably necessary to establish, exercise or defend legal claims.

If our business or relevant assets are reorganised, sold, merged or transferred, relevant personal data may be disclosed to professional advisers and prospective or actual acquiring parties subject to appropriate confidentiality and data-protection safeguards.

We seek to process personal data within the European Economic Area ("EEA") wherever reasonably possible.

Some suppliers of IT, cloud, communications, analytics or other services may process personal data in countries outside the EEA.

Where personal data is transferred outside the EEA, we ensure that an appropriate transfer mechanism is used where required by the GDPR.

Depending on the destination and recipient, this may include:

an adequacy decision adopted by the European Commission; the EU-U.S. Data Privacy Framework where the relevant U.S. recipient is validly certified and the framework is applicable; the European Commission's Standard Contractual Clauses; or another legally permitted transfer mechanism together with supplementary safeguards where required.

You may contact us if you would like further information about the safeguards applying to an international transfer concerning your personal data.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and thereafter where retention is required by law or necessary to protect legitimate legal interests.

Our normal retention principles are:

Website and technical logs: normally retained for up to 12 months unless longer retention is necessary to investigate a security incident or technical problem.

General enquiries and sample requests: normally retained for up to 3 years after the last meaningful interaction, unless the enquiry develops into an ongoing customer, project or business relationship.

Quotations and prospective projects: normally retained for up to 3 years after the quotation or last project-related contact, unless continued retention is justified by an active or recurring project or commercial relationship.

Customer, order and contractual records: retained for the duration of the relationship and thereafter for the period reasonably required for warranty, contractual, limitation and legal-claim purposes.

Accounting records: retained for the period required by Swedish accounting and tax legislation.

Business-development contacts: retained while there is a reasonable professional relevance and reviewed periodically. Data used for direct marketing will no longer be used for that purpose after you object or unsubscribe.

Suppression records: limited information may be retained for as long as necessary to ensure that a marketing objection or unsubscribe request continues to be respected.

Recruitment information: unsuccessful applications are normally deleted within two years after completion of the recruitment process unless a longer period is required for legal claims or you have agreed to longer retention for future opportunities.

Where personal data is required in connection with legal proceedings, disputes, warranty matters, regulatory investigations or legal obligations, relevant information may be retained for the duration of the matter and any applicable legal limitation period.

When information is no longer required, it is deleted, anonymised or otherwise securely disposed of.

Subject to the conditions and exceptions in applicable law, you may exercise the following rights.

Right of access: You may ask whether we process personal data about you and request a copy of relevant personal data and information about the processing.

Right to rectification: You may ask us to correct inaccurate personal data or complete incomplete information.

Right to erasure: In certain circumstances, you may request deletion of your personal data.

Right to restriction: In certain circumstances, you may ask us to restrict the processing of your personal data.

Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may have the right to receive personal data you provided to us in a structured, commonly used and machine-readable format and, where technically feasible, have it transmitted to another controller.

Right to object: Where processing is based on our legitimate interests, you may object on grounds relating to your particular situation.

Absolute right to object to direct marketing: You may object to the use of your personal data for direct marketing at any time. If you object, we will stop processing your personal data for that purpose.

Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Right to complain: You may lodge a complaint with a competent data-protection supervisory authority.

To exercise your rights, contact:

[email protected]

Please state that your request concerns personal data or GDPR.

We may request reasonable information to verify your identity before responding to a request.

We normally respond to valid requests within one month, subject to the extensions permitted by the GDPR for complex or numerous requests.

Exercising your GDPR rights is normally free of charge.

We encourage you to contact us first if you have questions or concerns regarding how we process your personal data.

You also have the right to lodge a complaint with a data-protection supervisory authority.

For Compocentra AB in Sweden, the relevant supervisory authority is:

You may also have the right to contact the data-protection authority in the EEA country where you live, work or believe an infringement has occurred.

We do not currently use personal data to make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

We may use ordinary analytical or administrative tools to organise business information, but these do not replace human decision-making in matters that produce such significant effects.

If this changes in the future, this Privacy Policy will be updated and the information required by the GDPR will be provided.

The Website and Green Plank's commercial services are not directed at children.

We do not knowingly seek to collect personal data from children through the Website.

If we become aware that personal data concerning a child has been collected unnecessarily, we will take appropriate steps to delete it.

We use appropriate technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access or misuse.

Depending on the nature of the processing, these measures may include access controls, authentication measures, system and network protections, backups, secure communications, restricted access to business systems, supplier controls and procedures for managing security incidents.

Access to personal data is limited to persons who reasonably require access for their work or the relevant business purpose.

No system connected to the Internet can be guaranteed to be completely secure. We therefore continuously review security measures in proportion to the nature and risks of our processing.

Our Website may contain links to websites, social-media platforms, distributors, resellers or other third-party services.

Those third parties may process personal data independently under their own privacy policies.

Compocentra AB is not responsible for the privacy practices of independent third-party websites or services merely because the Website contains a link to them.

We recommend reviewing the applicable privacy information when visiting an external service.

We may update this Privacy Policy when our processing activities, Website, service providers or legal requirements change.

The latest version will be published on greenplank.eu with the date of the most recent update.

Where a change materially affects how we process personal data, we will take reasonable steps to provide additional notice where required by law.

For questions concerning this Privacy Policy, Green Plank's processing of personal data or your GDPR rights, please contact: