Privacy Policy

The use of this website may involve the processing of personal data. Personal data refers to any information relating to you personally, such as your name, address, email address, or user behavior. To ensure transparency, we provide the following information on how your data is processed. Additionally, we inform you of your rights under the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). If you have any questions or suggestions regarding this notice, or if you wish to exercise your rights, please contact us at:

GrantLift GmbH
Große Reichenstr. 27, 20457 Hamburg
info@grantlift.com

The Data Protection Officer can be reached at:
datenschutzbeauftragter@grantlift.com

General Information on Data Processing

We process personal data in compliance with applicable data protection laws, particularly the GDPR and the BDSG. Data processing occurs only when legally permitted. When using this website, we process personal data only with your consent (Article 6(1)(a) GDPR), to fulfill a contract or pre-contractual measures upon your request (Article 6(1)(b) GDPR), to comply with legal obligations (Article 6(1)(c) GDPR), or when processing is necessary for our legitimate interests or those of a third party, provided your interests or fundamental rights and freedoms requiring data protection do not outweigh these interests (Article 6(1)(f) GDPR).

When using the website for informational purposes only, meaning you do not register or otherwise provide us with information, we process the following personal data automatically transmitted by your browser to our server. These data are technically necessary for displaying the website and ensuring stability and security. The legal basis is Article 6(1)(f) GDPR:

IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page visited)
Access status/HTTP status code
Transferred data volume
Referrer URL (previously visited page)
Browser type and version
Operating system
Language and version of the browser software

When you contact us via email or a contact form, we store the data you provide (email address, name, phone number if applicable) to respond to your inquiry. Data related to contracts are stored according to contractual retention periods; otherwise, we delete the data when storage is no longer necessary or restrict processing in case of legal retention obligations.

Data Retention

Unless otherwise stated, we store your data only as long as necessary to fulfill the processing purpose or to comply with contractual or legal obligations. Retention obligations may arise, in particular, from commercial or tax regulations.

Processing of Server Log Files

When you use our website informatively (without registration), general information automatically transmitted by your browser is stored. This includes browser type/version, operating system, accessed page, referrer URL, IP address, date and time of the server request, and HTTP status code. Processing is necessary for our legitimate interest in managing and securing the website and is based on Article 6(1)(f) GDPR. Data are deleted unless there are specific indications of unlawful use requiring further investigation.

Data Processing via User Input

Our website includes a contact form for sending us messages. Your data transfer is encrypted (recognizable by "https" in the browser's address bar). If you request an offer, we require your company name, name, email address, and message text to review and respond to your inquiry. Providing a website and phone number is optional. Alternatively, you can contact us via email. We process the data to respond to your inquiry. If your inquiry relates to a contract, processing is based on Article 6(1)(b) GDPR. Otherwise, processing is based on our legitimate interest in communicating with inquiring individuals under Article 6(1)(f) GDPR. Data related to contracts are stored according to contractual retention periods; otherwise, we delete the data when storage is no longer necessary or restrict processing in case of legal retention obligations.

Cookies

We use cookies on our website. Cookies are small text files stored by your browser when you visit a website. They enable recognition of the browser by our web server. We use persistent cookies for website analysis, which are automatically deleted after a specified period, and session cookies, which are deleted when the browser session ends. If personal data processing occurs through cookies, it is based on Article 6(1)(f) GDPR, serving our legitimate interest in making the website more user-friendly, efficient, and secure. You can delete cookies in your browser settings at any time or generally prevent their use. Further details are available from the Federal Office for Information Security.

Your Rights

As a data subject, you have the following rights:

Right to Access (Article 15 GDPR, Section 34 BDSG): Request information about whether and to what extent we process your personal data.
Right to Rectification (Article 16 GDPR): Request correction of inaccurate data.
Right to Erasure (Article 17 GDPR, Section 35 BDSG): Request deletion of your personal data.
Right to Restriction of Processing (Article 18 GDPR): Request limitation of data processing.
Right to Data Portability (Article 20 GDPR): Receive personal data in a structured, commonly used, and machine-readable format and transfer it to another controller.
Right to Object (Article 21(1) GDPR): Object to data processing based on legitimate interests (Article 6(1)(e) or (f) GDPR). If we process your data for direct marketing purposes, you may object under Article 21(2) and (3) GDPR.

If you have provided explicit consent for data processing, you can withdraw it at any time under Article 7(3) GDPR. Withdrawal does not affect the lawfulness of processing before the withdrawal.

Complaints to a Supervisory Authority

If you believe that processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority under Article 77 GDPR.