Privacy Policy

Introduction

GravityNest GmbH ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or use our services. This policy applies to all personal data we collect through our website, services, and customer interactions.

Data Controller Information

The data controller for your personal data is GravityNest GmbH, a company registered in Germany with registration number HRB745136. Our registered address is Mozartstraße 59, 20221 Hamburg, Germany. For any privacy-related questions or concerns, you can contact us at privacy@gravitynest.top or by telephone at +49 403355909.

Data Collection

We collect and process the following types of personal data:

• Contact Information: When you contact us or request our services, we collect your name, email address, telephone number, and company details.
• Website Usage Data: We automatically collect information about how you use our website, including your IP address, browser type, pages visited, time spent on pages, and referring websites.
• Communication Data: We store records of our communications with you, including emails, phone calls, and support tickets.
• Technical Data: We may collect device information, operating system details, and other technical information to improve our services.
• Marketing Data: With your consent, we may collect data about your preferences and interests for marketing purposes.

How We Use Your Information

We use your personal data for the following purposes, based on legitimate business interests and legal obligations:

• Service Provision: To provide our cash flow projection templates, consulting services, and customer support.
• Communication: To respond to your inquiries, provide customer support, and send service-related communications.
• Business Operations: To manage our business operations, including accounting, invoicing, and legal compliance.
• Website Improvement: To analyse website usage and improve our services and user experience.
• Marketing: With your consent, to send you marketing communications about our services and industry insights.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We may share your personal data with the following categories of recipients:

• Service Providers: We work with trusted third-party service providers who assist us in operating our website, conducting business, and providing services to you.
• Analytics Providers: We use Google Analytics and similar services to understand how our website is used.
• Marketing Platforms: With your consent, we may use marketing platforms like Google Ads for advertising purposes.
• Legal Authorities: We may disclose your data if required by law or to protect our legal rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Contact information and communication records are typically retained for 7 years for business and legal compliance purposes. Website analytics data is retained for 26 months. Marketing data is retained until you withdraw your consent or request deletion.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of Access: You can request information about the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure: You can request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we limit how we use your personal data.
• Right to Data Portability: You can request a copy of your personal data in a structured format.
• Right to Object: You can object to certain types of processing, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

International Data Transfers

As we operate primarily within the European Union, most of your personal data is processed within the EU/EEA. However, some of our service providers may be located outside the EU/EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure server hosting, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us using the following details:

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates applicable data protection laws. In Germany, you can contact the relevant state data protection authority or the Federal Commissioner for Data Protection and Freedom of Information (BfDI).