This Privacy Policy has been drafted in both German and English. In the event of any disputes arising between the two versions the German version shall supersede and replace in its entirety any interpretation or ambiguity.

Thank you for your interest in our website. Protecting your personal data is important to us. Below you will find information about how we handle your personal data that is collected through your use of our website. The processing of your data is carried out in accordance with the legal regulations for data protection. Where links are provided to other websites, we have neither influence nor control over the linked content and the privacy policies there. We recommend that you review the privacy policies on the linked websites. This way, you can determine whether and to what extent personal data is collected, processed, used, or made accessible to third parties

IDR - Sascha Weller
Institut für Datenschutzrecht
Ziegelbräustraße 7,
85049 Ingolstadt
hallo@grid3.io

hallo@grid3.io

When you access our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an active connection for communication between your internet browser and our web server

- Visited Domain
- Date and time of the request
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- Web browser and operating system used
- IP address of the requesting computer
- Transferred data volume

We collect this data to ensure a smooth connection to the website and to enable comfortable use of our website by users. In addition, the log file serves the purpose of evaluating system security and stability as well as administrative purposes. The legal basis for the temporary storage of the data or the log files is Art. 6 para. 1 lit. f GDPR.

If data is stored beyond the respective session, this must be described and the purpose stated.

For technical security reasons, especially to prevent attack attempts on our web server, we store these data for six months. It is not possible to trace these data back to individual persons. After a maximum of seven days, the data is anonymized by shortening the IP address to the domain level, so that it is no longer possible to establish a reference to the individual user. These data are not evaluated in any way except for statistical purposes in anonymous form. We do not combine these data with data from other sources.

Cookies serve various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies are used to evaluate user behavior or display advertising.

Technically necessary cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in storing cookies for the technically error-free and optimized provision of our services. Other cookies are only stored with your consent on the basis of Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time for the future. The legal basis may also result from Art. 6 para. 1 lit. b GDPR, if the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject.
‍
To the extent that cookies are used for analytical purposes, we will inform you separately in the context of this privacy policy and obtain your consent. You can configure your browser to:

- Inform you about the placement of cookies,
Allow cookies only on an individual basis,
- exclude the acceptane of cookies for certain cases in general,
- activate the automatic deletion of cookies when the browser is closed.

The cookie settings can be managed for the respective browsers under the following links:
- Google Chrome ,
- Mozilla Firefox ,
- Edge (Microsoft),
- Safari,
- Opera,

You can also manage cookies from many companies and functions used for advertising individually. To do this, use the corresponding user tools available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices

‍Most browsers also offer a Do Not Track function. When this function is activated, the respective browser informs advertising networks, websites, and applications that you do not want to be tracked for behavior-based advertising and similar purposes. Information and instructions on how to edit this function can be obtained from your browser provider, using the following links:

-Google Chrome: Support Chrome
‍Mozilla Firefox: Support Mozilla
‍Edge (Microsoft): Support Edge
‍Safari (Apple): Support Safari
‍Opera: Support Opera

In addition, you can prevent the loading of so-called scripts by default. NoScript allows the execution of JavaScripts, Java, and other plug-ins only on trusted domains of your choice. Information and instructions on how to modify this function can be obtained from your browser provider (e.g., for Mozilla Firefox at: link ). Please note that deactivating cookies may limit the functionality of our website.

You have the option to request an offer for our services via a web form. In doing so, personal data related to the contact will be transmitted to us. This data will only be used within the scope of the offer request. There is no disclosure to third parties. The legal basis for the processing of this personal data can be found in Article 6 of the GDPR. The personal data will be stored for the purpose of obtaining an offer and deleted after the purpose has been fulfilled, but at least for the purpose of contacting you for the offer request.

If you send us inquiries via the contact form or email, your information from the inquiry form or email, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. In no case will we disclose this data without your consent. The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f of the GDPR, and possibly Art. 6 para. 1 lit. b of the GDPR if your inquiry is aimed at concluding a contract. Your data will be deleted after your inquiry has been conclusively processed, unless there are legal retention obligations. In the case of Art. 6 para. 1 lit. f of the GDPR, you can object to the processing of your personal data at any time with effect for the future.

You can register for certain services offered on our website and create a user profile. In the context of registration and setup, we collect and use the following personal data:
‍
- Salutation, first name, last name
- Email address
- Password

Mandatory information required for registration purposes is clearly identified. By creating a user account, you will have access to additional areas of our website and the services you have acquired. The legal basis for the data processing is Art. 6 para. 1 lit. a GDPR or Art. 6 para. 1 lit. b GDPR, if the processing is necessary for the provision of the requested services. Your data will be deleted as soon as the user account on our website is deleted, and provided there are no legal retention obligations. You can usually change and/or delete your user account, including the data you provided, directly in your user account after logging in or by sending a corresponding message to the responsible party mentioned at the beginning.

User registration is required for the performance of the contract or for pre-contractual measures or for the provision of the requested services. The legal basis for the processing of your data is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it is no longer required for the performance of the contract. Note, however, that it may be necessary to store personal data of our contractual partners even after the contract has been concluded in order to fulfill contractual or legal obligations. As a user, you have the option to terminate your registration at any time. Early deletion of your data is only possible if there are no contractual or legal obligations that oppose it.

When registering on the website of the controller, the IP address assigned by the Internet service provider (ISP) to the data subject, as well as the date and time of registration, are also stored. The storage of this data is necessary in order to prevent misuse of our services and, if necessary, to enable the investigation of committed offenses. Therefore, the storage of this data is necessary to protect the controller. In general, this data will not be disclosed to third parties, unless there is a legal obligation to disclose or the disclosure serves the purpose of criminal prosecution.

To prevent unauthorized access by third parties to your personal data, especially financial data, the connection is encrypted using TLS technology.

This privacy policy describes the processing of personal data in connection with the commenting function on our website. This data processing is based on consent according to Art. 6 para. 1 lit. A GDPR, for the fulfillment or initiation of a contract according to Art. 6 para. 1 lit. B GDPR, or based on a legitimate interest according to Art. 6 para. 1 lit. F GDPR. Email and IP addresses are collected and stored as personal data. These will be deleted after a reasonable period of time unless there is a legal obligation to retain them.

The purpose of the processing is to provide the commenting function on our website. The data will be transferred to third parties if this is necessary for the fulfillment of the contract or if required by law.

We use Google Web Fonts on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). Google Web Fonts allows us to use external fonts, called Google Fonts. When accessing our website, the required Google Fonts are loaded into your browser cache by your web browser. This is necessary for your browser to display an enhanced visual representation of our texts. If your browser does not support this feature, a default font from your computer is used for display. The integration of these web fonts is achieved through a server call, typically a server located in the USA owned by Google. This enables the server to receive information about which page of our website you visited. The IP address of the visitor's browser device is also stored by Google.

We use Google Web Fonts for optimization purposes, particularly to improve the usability of our website for you and to make its design more user-friendly.This is also our legitimate interest under Art. 6 para. 1 lit. f of the GDPR.

As Google is a US company, data transfer to the USA cannot be ruled out. However, in order to ensure GDPR-compliant handling of personal data in third countries, in addition to standard data protection clauses, a data processing agreement (DPA) has been concluded with Google. Furthermore, current (court) decisions are monitored and necessary adjustments are made to ensure GDPR-compliant handling of personal data and possible data transfer to third countries such as the USA at all times.

Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Further information on data protection can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy.

Further information on Google Web Fonts can be found at http://www.google.com/webfonts/, https://developers.google.com/fonts/faq?hl=de-DE&csw=1 , and https://www.google.com/fonts#AboutPlace:about .

As a general rule, we do not transmit your personal data to third parties unless:
‍
- we have explicitly stated in the description of the respective data processing,
- you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
- the transfer is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR or for other reasons of our legitimate interest and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
- there is a legal obligation to disclose the data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, or
- this is necessary for the fulfillment of contractual obligations with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

According to this section, the company may use external service providers for the provision of its services and the execution of its services. These service providers are carefully selected and contracted in writing. They are bound by the company's instructions and regularly monitored. The company signs necessary data processing agreements with its service providers before they are commissioned. The service providers may include web hosting providers, email providers, and IT system maintenance providers.

In addition, the company also shares personal data with Achtzig20 GmbH for the creation and provision of digital assets / NFTs and for general website development. The data shared may include name, first name, email address, and contract data related to purchased products. The company processes personal data only to the extent necessary for the fulfillment and execution of the contract according to Art. 6 para. 1 sentence 1 lit. b GDPR. The company has signed an agreement on commissioned data processing with the service provider for this purpose.

The duration of storage of personal data is determined by the applicable legal retention periods (e.g. from commercial and tax law). After the respective period has expired, the corresponding data will be routinely deleted. If data is necessary for contract fulfillment or initiation or if we have a legitimate interest in continuing to store it, the data will be deleted when it is no longer necessary for these purposes or if you make use of your right of revocation or objection.

The following provides information about your rights as a data subject under applicable data protection law with respect to the processing of your personal data by the data controller:

The right, pursuant to Art. 15 GDPR, to request information about the personal data we process about you. In particular, you may request information about the purposes of processing, the categories of personal data processed, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling, and meaningful information about the details thereof.

The right, pursuant to Art. 16 GDPR, to request without undue delay the rectification of inaccurate or incomplete personal data stored by us. The right, pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

The right, pursuant to Art. 18 GDPR, to request the restriction of processing of your personal data, where the accuracy of the data is contested by you, processing is unlawful but you oppose erasure, and we no longer need the data but you require it for the establishment, exercise, or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR.

InternThe right, pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transmission to another controller. The right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. Generally, you can contact the supervisory authority of the federal state of our registered office or, if applicable, your habitual residence or workplace.

The right to withdraw your consent at any time pursuant to Art. 7 para. 3 GDPR. If you withdraw your consent, we will delete the relevant data immediately, unless further processing can be based on a legal basis for processing without your consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If we process your personal data on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data for reasons arising from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right to object without the need to specify a particular situation.

If you wish to exercise your right to withdraw your consent or object, simply send an email to: hallo@grid3.io.

The data controller collects and processes personal data of job applicants for the purpose of handling the job application process. Processing may also be carried out electronically. This is particularly the case if an applicant submits corresponding application documents electronically, for example by email or through a contact form on the website, to the data controller responsible for processing. If the data controller enters into an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment contract in compliance with legal regulations. If no employment contract is concluded between the data controller and the applicant, the application documents will be automatically deleted, provided that there are no other legitimate interests of the data controller that oppose deletion. Other legitimate interests in this sense may include the obligation to provide evidence in a proceeding under the General Equal Treatment Act (AGG).

The processing of applicant data is carried out to fulfill our pre-contractual obligations within the framework of the job application process in accordance with Art. 6 para. 1 lit. b. GDPR Art. 6 para. 1 lit. f. GDPR, insofar as data processing is necessary for us within the scope of legal proceedings (in Germany, § 26 BDSG additionally applies).

If you have given your consent for the processing of your data, you can revoke it at any time and through any communication channel. Such a revocation will affect the admissibility of the processing of your personal data after you have expressed it to us.

To the extent that we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case, in particular, if the processing is not necessary to fulfill a contract with you, as will be shown in each case in the following description of the functions. If you make such an objection, we ask you to state the reasons why we should not process your personal data as we have done. In the event of your reasoned objection, we will examine the situation and either stop or adjust the data processing, or show you our compelling legitimate reasons for continuing the processing.

Of course, you can also object at any time to the processing of your personal data for advertising and data analysis purposes. You can contact us regarding your objection to advertising at the address given in the legal notice.

We would like to inform you that providing personal data may be required by law or necessary for the performance of a contract. Failure to provide such data would result in the inability to enter into a contract. Our employees are available to answer any questions on a case-by-case basis.

The data processed by us will be deleted or restricted in accordance with Articles 17 and 18 of the GDPR. Unless otherwise stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer necessary for its intended purpose and there are no legal retention obligations preventing its deletion. If the data is not deleted because it is necessary for other legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be kept for commercial or tax reasons.

In accordance with legal requirements, data is stored for 10 years in particular in accordance with §§ 147 para. 1 AO, 257 para. 1 nos. 1 and 4, para. 4 HGB (books, records, management reports, accounting vouchers, commercial books, documents relevant for taxation, etc.) and for 6 years in accordance with § 257 para. 1 nos. 2 and 3, para. 4 HGB (commercial letters).

We reserve the right to update this Privacy Policy as necessary, in compliance with applicable data protection regulations. This allows us to adjust to current legal requirements and changes to our services, such as the introduction of new features. The most current version of the Privacy Policy will apply to your visit.

Social networks are only linked to our website as a link to the corresponding services. After clicking on the embedded text/image link, you will be redirected to the page of the respective provider. Only after the redirection will user information be transmitted to the respective provider. Please refer to the respective privacy policies of the providers you use for information on how they handle your personal data when using these websites.

02.05.2023