Data protection

Privacy Policy

How GreenRide Vienna AI e.U. processes personal data under the GDPR (EU 2016/679) and the Austrian Data Protection Act (DSG).

Last updated: 2026-08-12

1. Controller

The controller responsible for processing your personal data on this website is:

GreenRide Vienna AI e.U.
Ing. Naeil Alfarraji
Wolfganggasse 46/1/2, 1120 Wien, Österreich
FN 663117 y
info@greenride-vienna.at · +43 660 6169889

2. What we process, and why

We process only the data listed below. Each entry states the legal basis under Article 6 GDPR.

Contact form — name, email address, organisation, your message, IP address, browser user-agent

Purpose: To receive and answer your enquiry, and to send you a confirmation email

Legal basis: Art. 6(1)(b) — steps prior to entering a contract; Art. 6(1)(f) — legitimate interest in answering enquiries and preventing abuse

Offer request — name, email address, company, project type, city size, described challenges, IP address

Purpose: To generate and deliver the proposal you requested

Legal basis: Art. 6(1)(b) — steps prior to entering a contract

Usage analytics — page path, referrer, browser user-agent, browser language, and a salted SHA-256 hash of your IP address

Purpose: To understand which pages are used and improve the platform. We operate our own analytics on our own database. No third-party analytics service, no advertising network, and no tracking cookies are used.

Legal basis: Art. 6(1)(f) — legitimate interest in operating and improving our website. Your IP address is hashed with a secret salt before storage and is not reversible by us.

Account session — a single httpOnly cookie named grv_session holding your access token

Purpose: To keep you signed in to the platform. Strictly necessary; the cookie expires after 60 minutes.

Legal basis: Art. 6(1)(b) — performance of a contract. No consent required for strictly necessary cookies.

AI assistant — the text you type into the chat or proposal generator

Purpose: To generate a response to your request

Legal basis: Art. 6(1)(f) — legitimate interest in providing the requested service. Please do not enter personal or confidential information into the AI assistant.

3. Recipients and transfers outside the EU

We do not sell personal data and we do not share it for advertising. Data is disclosed only to the processors we need in order to run the service:

Hosting — our servers are operated within the EU.
Email dispatch — a transactional email provider sends contact confirmations and notifications on our behalf.
AI processing — text you submit to the AI assistant is transmitted to Google's Gemini API for generation. This can involve processing outside the EU. Where that is the case, the transfer is based on the safeguards in Chapter V GDPR. Do not enter personal or confidential data into the assistant.

4. Your rights

Under the GDPR you have the right to access your data (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). Where processing rests on consent, you may withdraw it at any time with effect for the future.

To exercise any of these rights, write to info@greenride-vienna.at.

5. Right to lodge a complaint

If you believe we process your data unlawfully, you may lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, dsb.gv.at.

6. Security

Traffic to this site is encrypted with TLS. Passwords are hashed, sessions are carried in httpOnly cookies, and analytics IP addresses are hashed with a secret salt before they are written to the database.

7. Changes to this policy

We update this policy when our processing changes. The date above indicates the current version.

See our Cookie Policy for details of the storage used in your browser.Imprint