Last updated: February 2026
1. Data Controller
The data controller responsible for your personal data is:
Green Dell AB
Org.nr: 556936-8425
CEO: Md Mahfozur Rahman Khan
Address: Sparregatan 2, 582 21 Linköping, Sweden
Postal: c/o DIREKTEN LINKÖPING CENTRUM, Sparregatan 2, 582 21 Linköping
Email: support@greenplateguide.com
Website: greenplateguide.com
2. What Data We Collect
We collect personal data that you provide directly to us and data that we obtain automatically when you use our services. This may include:
- Identity data: Name, title, date of birth (where relevant for dietary planning)
- Contact data: Email address, telephone number, postal address, delivery address
- Account data: Username, password (encrypted), account preferences, dietary preferences, allergies, and health-related information you choose to share for meal plan customization
- Transaction data: Payment details, order history, subscription details
- Technical data: IP address, browser type and version, device information, time zone, operating system
- Usage data: How you use our website, pages visited, time spent, navigation paths
- Marketing and communications data: Your preferences for receiving marketing communications
3. How We Use Your Data
We use your personal data for the following purposes:
- To provide, manage, and deliver our meal plan and food delivery services
- To process orders, payments, and subscriptions
- To personalize your meal plans based on your dietary preferences, allergies, and stated goals
- To communicate with you about your orders, account, and customer support inquiries
- To send service-related notifications (e.g., delivery updates, subscription renewals)
- To improve our website, services, and user experience
- To comply with legal obligations and enforce our terms and conditions
- To send marketing communications (only where you have given consent)
4. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (EU) 2016/679, we process your personal data on the following legal bases:
- Contract performance (Art. 6(1)(b)): Processing necessary to perform our contract with you (e.g., delivering meals, managing your subscription)
- Legitimate interests (Art. 6(1)(f)): Processing necessary for our legitimate business interests, such as improving our services, fraud prevention, and website analytics, where these do not override your rights
- Consent (Art. 6(1)(a)): Where you have given clear consent for specific processing (e.g., marketing emails, non-essential cookies)
- Legal obligation (Art. 6(1)(c)): Processing required to comply with applicable law (e.g., tax records, accounting)
5. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
- Account and order data: For the duration of your account plus 7 years for legal and accounting purposes
- Marketing preferences: Until you withdraw consent or unsubscribe
- Technical and usage data: Typically up to 26 months for analytics; may be shorter for essential logs
- Support correspondence: Up to 3 years after resolution of the inquiry
After the retention period, we securely delete or anonymize your data in accordance with our data retention policy.
6. Your Rights Under GDPR
As a data subject in the European Economic Area, you have the following rights:
- Right of access (Art. 15): Request a copy of the personal data we hold about you
- Right to rectification (Art. 16): Request correction of inaccurate or incomplete data
- Right to erasure (Art. 17): Request deletion of your data in certain circumstances (e.g., where it is no longer necessary, or you withdraw consent)
- Right to restriction of processing (Art. 18): Request that we limit how we use your data in certain situations
- Right to data portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format and transfer it to another controller
- Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing purposes
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time
- Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. In Sweden, this is the Integritetsskyddsmyndigheten (IMY).
To exercise any of these rights, please contact us at support@greenplateguide.com. We will respond within one month. We may need to verify your identity before processing your request.
7. Cookies
We use cookies and similar technologies on our website. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
8. Third-Party Sharing
We may share your personal data with the following categories of recipients:
- Service providers: Payment processors, delivery partners, IT and hosting providers, email service providers, and analytics providers who assist us in operating our business. These processors act on our instructions and are bound by data processing agreements.
- Legal and regulatory authorities: Where required by law or to protect our rights
We do not sell your personal data to third parties. We require all processors to implement appropriate technical and organizational measures to protect your data and to process it only in accordance with our instructions and applicable law.
9. International Transfers
Your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or transfers to countries with an adequacy decision.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit and at rest, access controls, secure authentication, and regular security assessments. Despite our efforts, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
11. Children's Privacy
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete such information.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
13. Contact & Data Protection Enquiries
For any questions about this Privacy Policy, to exercise your data protection rights, or to contact our Data Protection Officer (DPO), please write to:
Green Dell AB
Attn: Data Protection / Privacy Enquiries
Email: support@greenplateguide.com
Postal: c/o DIREKTEN LINKÖPING CENTRUM, Sparregatan 2, 582 21 Linköping, Sweden
We will respond to your enquiry as soon as possible and in any event within one month.
