Privacy Policy

Data controller

The data controller is Vivi Bamboo Albania Sh.p.k., NIPT L91515023M, with registered office at Rr. Agolli 00400001, Nd.29, H.1, Maqellarë, Kërcisht i Poshtëm, 8302, Dibër — Albania.

For any request regarding personal data you can write to privacy@marchiogreen.com.

Data we collect

Data provided voluntarily through the contact form: company name, contact person, email, phone, message and any emissions estimate obtained with the calculator.

Data of participating companies needed to manage the programme: company name, VAT number/tax code, address, website, logo, contact person, email and phone.

Technical browsing data (e.g. IP address and server logs) and technical cookies (see the Cookie Policy).

Purposes and legal bases

Responding to contact requests and managing the pre-contractual relationship (pre-contractual measures and legitimate interest).

Managing participation in the programme: allocating Voluntary Environmental Units, issuing, sending and publishing statements of participation (performance of the contract).

Publishing the company’s name and logo in the website showcase (consent, which can be withdrawn at any time).

Legal, accounting and tax obligations (legal obligation).

Website security and spam prevention, including via Google reCAPTCHA (legitimate interest).

Public pages and blockchain recording

Each statement has a public page, reachable through a non-enumerable link, showing the company name, VAT number, reference project, allocated quantity and issue date.

Each allocation is also recorded as a token on the public Polygon blockchain. Only technical data is written on the blockchain (token identifier, allocated quantity and metadata address, which contains the statement number). Information written on-chain is public and, by the nature of the technology, permanent and unalterable.

The descriptive data of the statement (e.g. company name and project) is served by our server and is not written on the blockchain: it can therefore be corrected or removed.

Data recipients

Data may be processed by providers acting as data processors: hosting provider, email service and, for anti-spam protection only, Google (reCAPTCHA).

We do not sell or share personal data with third parties for marketing purposes.

Data transfers

The controller is based in Albania, a country outside the European Union, and some providers (e.g. Google) may process data outside the EU. Such transfers take place in compliance with the safeguards required by the GDPR (e.g. adequacy decisions or standard contractual clauses).

Retention

We retain data for as long as necessary for the stated purposes: contact requests for the duration of the pre-contractual relationship, data of participating companies for the duration of the relationship and thereafter for the periods required by law. Data written on the blockchain cannot, by its nature, be deleted.

Your rights

At any time you may exercise your rights of access, rectification, erasure, restriction, objection and portability, and withdraw any consent given, by writing to privacy@marchiogreen.com. Erasure cannot apply to technical data already written on the blockchain.

You also have the right to lodge a complaint with the competent supervisory authority: in Albania, the Commissioner for the Right to Information and Personal Data Protection (IDP); in the European Union, the authority of the country where you live or work.