Privacy Policy For GRAN Software Solutions GmbH

Effective: 10.10.2024

This privacy policy applies to you if you use any of our services and products (including our websites and blogs).

Data controller

The data controller responsible for processing your information is GRAN Software Solutions GmbH, located at Am Hamburger Bahnhof 3 ℅ Glazewski, 10557 Berlin, Germany.

How to contact GRAN

You can contact us via email hello@gransoftware.de.

Children

Our services and products, including websites and blogs, are not intended for individuals under the age of 18. If we become aware that we have inadvertently collected personal data from such individuals, we will take immediate steps to delete that information. If you believe that we may be in possession of personal data from individuals under 18, please notify us promptly at hello@gransoftware.de.

Data we collect

Personal data we get directly from you

User Information - When you create an account in any of our products or services, we collect certain personal data, including but not limited to your e-mail address, first and last name, timezone. (collectively referred to as “User Information”)

User Created Content - Whenever you use any of our products or services, you may create content such as notes, calendar entries, time entries, contract documentation, client and project information, among others. We collect all of this information (collectively referred to as “User Created Content”).

Communication Information - If you communicate with us via email, telephone, any of our websites, products, or services, or through other channels such as social media or Discord, we collect your contact information, name, and the content of your messages, among other relevant details (collectively referred to as “Communication Information”).

Personal data we get indirectly from your use of our products and services

This includes but it’s not limited to visiting our websites and blogs.

Cookies and Similar Technologies - we use cookies and other technologies (e.g. local storage). We store information on your device like your authentication token required to use private areas of our websites, products and services ( collectively referred to as “Cookies”). We use this technology for tracking and marketing purposes if you granted us consent. Please visit our Cookie Policy for more information.

Device Information - this includes the IP address, device name, operating system, unique device identifiers, and the browser you are using (collectively referred to as “Device Information”).

Usage Data - we may automatically collect information about your use of our websites, products and services such as the features you use and the actions you take (collectively referred to as “Usage Data”).

Log Data - information automatically sent by your browser or device when you access our websites, products and services. This includes but it’s not limited to your IP address and the date and time of your request (collectively referred to as “Log Data”).

How we use your data

To provide, maintain, develop and improve our services, products and websites.
To conduct research.
To communicate with you and to send you information (including marketing) about our services, products and websites.
To protect GRAN, our users, and the public by improving the safety and reliability of our services, including detecting, preventing, and responding to fraud, abuse, security risks, and technical issues.
To comply with legal obligations, including applicable laws, regulations, legal processes, or enforceable governmental requests, and to protect the rights, privacy, safety, or property of our users, affiliates, or any third party.

We may share your personal data with the following parties, when necessary or appropriate:

Vendors and service providers. We work with third-party vendors and service providers to help deliver our products and services, and we may share your personal data with them to facilitate this. Including, but not limited to hosting or cloud providers, payment providers, email and tracking services.
Business transfers. In the event of a merger, acquisition, or other business transfer, your personal data may be shared as part of that transaction.
Government authorities or other third parties. We may disclose your personal data if required by law, or if we believe such action is necessary to comply with legal obligations or protect our rights and our users.
Other users of our products and services. Some features of our services allow you to share information with other users, and in such cases, your personal data may be visible to those users e.g. when inviting others to your organisation.
Third parties you share your information with. : If you voluntarily share your data with third parties (e.g., via integrations, external apps or exporting documents), we may also share your personal data with them as instructed.

Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide our services, comply with legal obligations, resolve disputes, enforce agreements, and protect our legitimate business interests.

The duration of retention depends on various factors, such as the nature of the data, the purpose of its collection, legal or regulatory requirements, and your consent where applicable. Once personal data is no longer necessary for these purposes, we will securely delete or anonymize it in accordance with applicable laws.

Legal bases of processing

The data we collect and the reasons for processing have the following legal bases:

Contractual Necessity. We process your data to fulfil the contract you have with us and to provide the services you asked for e.g. when you buy access to our products and services (“Contractual Necessity”).
Legal Obligations. We process your data if we are legally obliged to it e.g. we need to store the invoices we sent to you for bookkeeping purposes (“Legal Obligations”).
Legitimate Interests. We process your data for legitimate interests of ours and third parties e.g. improving services, maintaining relationships or internal administrative purposes (“Legitimate Interests”).
Vital Interests. We process your data to protect yours and others’ vital interests e.g. if health or life is at stake (“Vital Interests”).
Consent. We process your data for the purposes you gave us consent for e.g. to send you emails (“Consent”).

You will find a recap of what, how and why we collect and process below

Purpose of processing	What data is processed	On what legal basis
To provide and maintain our services, products and features.	User Information User Created Content Communication Information Cookies Log Data Device Information Usage Data	Contractual necessity
To improve and develop our services, products and features. To conduct research.	User Information User Created Content Communication Information Cookies Log Data Device Information Usage Data	Legitimate interests
To communicate with you and to send you information (including marketing) about our services, products and features.	User Information User Created Content Communication Information Cookies Log Data Device Information Usage Data	Contractual necessity Legitimate interests Legal obligations
To protect GRAN, our users, and the public by improving the safety and reliability of our services, including detecting, preventing, and responding to fraud, abuse, security risks, and technical issues.	User Information User Created Content Communication Information Cookies Log Data Device Information Usage Data	Legal obligations Legitimate interests
To comply with legal obligations, including applicable laws, regulations, legal processes, or enforceable governmental requests, and to protect the rights, privacy, safety, or property of our users, affiliates, or any third party.	User Information User Created Content Communication Information Cookies Log Data Device Information Usage Data	Legal obligations Contractual necessity Legitimate interestsVital Interests

Your rights

Right to access your personal data we collect and process.
Right to rectify your personal data if it’s outdated or incorrect.
Right to be forgotten i.e. delete your personal data from our records.
Right to restrict how we process your personal data.
Right to object to our processing of your personal data (e.g. for direct marketing) at any time.
Right to take your personal data with you or transfer it to other providers.
Right not to be a subject to automated decision making.
Right to withdraw your consent at any time if it’s our legal basis for processing.

You can exercise your rights using interfaces of our services and products or by contacting us at hello@gransoftware.de

Data transfers

We may sometimes share your personal data with a third party outside of the EEA for the reasons mentioned in this privacy policy (for example, when you send us an email).

We make sure to work with partners and providers who use Standard Contractual Clauses (SCCs), rely on European Commission Adequacy Decisions or ensure the recipient country has adequate data protection laws.

By using our services, you agree that your personal data will be processed and stored in the servers in the U.S. and may also be shared with our service providers and affiliates in other countries.

Changes to the privacy policy

We may update this Privacy Policy occasionally. When that happens, we will post the updated version on this page, unless the law requires a different type of notice.