Granzer Regulatory Consulting & Services
HomeGet In Touch

Privacy

Privacy Notice

At Granzer Regulatory Consulting & Services (“Granzer”) the protection of your personal data (“data”) is of utmost importance. Hereinafter, we are informing you about the principles of our data protection system, and which personal data from our clients, business partners and interested parties visiting our website, we collect and process.
 

1. Name and contact data of the responsible person, data protection officer:

The responsible person within the meaning of the privacy provisions for the processing of personal data is:

Granzer Regulatory Consulting & Services GmbH
Kistlerhofstrasse 172C
81379 Muenchen
Germany

Phone: +49 89 780 68 98 - 0
E-Mail: contact@granzer.biz
Website: http://www.granzer.biz/index.html

Managing Directors: Dr. Ulrich Granzer, Dr. Jens Schletter

Contact data protection officer:
E-Mail: data-protection@granzer.biz
 

2. Purpose of the processing of personal data, legal basis and storage duration for business reasons

a) Purpose

We process some of your personal data that we receive from you within our business relationship or its initiation. In addition, we process – as far as necessary for the provision of our services – personal data that we admissibly gain from publicly accessible sources (e.g. land registers, trade and association registers, the press, Internet) or that are lawfully transmitted to us by other third parties.

When you commission us, we collect the following information:

  • title, first and last name,
  • valid email address,
  • address,
  • telephone number (fixed-line and/or mobile),
  • data and information about you that are required within our business relationship, such as professional background, curriculum vitae of responsible persons, in case of relevance for regulatory consultancy.

b) Legal basis

The legal basis of the data processing is Art. 6 sec. 1 b GDPR for the appropriate processing of the order and the fulfilment of the resulting obligations. In this context, the data are collected

  • to be able to identify you as our client;
  • for the correspondence with you;
  • for invoicing;
  • to process the order and any potential liability claims and to assert any potential rights.

As far as you have given us your consent to the processing of personal data for certain purposes, the legality of this processing is (also) given on the basis of your consent according to art. 6 sec. 1 a GDPR.

Complementarily, data processing can also be founded on the legal basis of art. 6 sec. 1 c GDPR (legal provisions) because as a company, we are subject to various legal obligations (e.g. tax laws), or on art. 6 sec. 1 f GDPR, as far as the processing is necessary to preserve our justified interests or those of any third parties.

c) Storage duration

Personal data are deleted as soon they are no longer required for the achievement of the purpose of their collection or after expiry of any statutory retention period.

Complementarily, we keep documents from the business relationship as long as we need them to assert, exercise or defend any legal claims. According to the §§ 195 et seq. of the Civil Code (BGB), these limitation periods can last up to 30 years, the regular limitation period being three years from the end of the calendar year in which the right has arisen and the creditor has gained knowledge of the circumstances leading to the claim.
 

3. Purpose of the processing of personal data, legal basis, and storage duration when accessing our websites

Hereafter, we are informing you about the data processing taking place on our website (a), the purposes (b), legal basis (c) and the respective storage duration and, if applicable, concrete possibilities of objection and removal (d).

a) Data processing taking place when accessing our website

When accessing our website, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily saved in a so-called logfile. Within this process, the following information is collected without your input and stored until its automatic deletion:

  • IP address of the requesting computer
  • date and time of access
  • URL of the accessed website
  • browser information
  • operating system and version of the operating system of your computer
  • data volumes transferred and access status (file transferred, file not found etc.)

b) Purposes

The mentioned data are processed by us for the following purposes:

  • establishment of connection and enabling you to use our website and,
  • if necessary, we use the data to prove and assert our and third-party rights in the event of damage or violations of legal regulations, our terms of use and the rights of third parties.

c) Legal Basis

The legal basis for this data processing is Art. 6 par. 1 p. 1 b and f of the GDPR. Our justified interest results from the above-mentioned data processing purposes. In any case, we do not use the collected data to draw any conclusions about your person.

d) Possibilities of objection and removal

The data in the logfiles will be deleted at the latest after one year.
 

4. Cooperation with contract processors and third parties

For the processing of your data, we partially use external service providers (contract processors). They have been carefully selected and commissioned by us, are bound to instructions and regularly controlled. They are external service providers who support us technically (web designers, programmers). This is done on the basis of processing contracts according to Art. 28 GDPR.

We would only forward your data to any third parties if:

  • you have given your explicit consent to that according to Art. 6 par. 1 p. 1 a GDPR,
  • the transmission is necessary according to Art. 6 par. 1 p. 1 f GDPR to assert, exercise or defend legal rights and there is no reason to assume that you have a prevailing interest worthy of protection in the nondisclosure of your data,
  • there is a legal obligation to disclosure according to Art. 6 par. 1 p. 1 c GDPR,
  • this is legally admissible and necessary according to Art. 6 par. 1 p. 1 b GDPR for the fulfilment of contractual relationships with you.

Service providers are only commissioned in a third country if the special preconditions according to Art. 44 et seq. GDPR are fulfilled.
 

5. Deletion of personal data

The data are deleted as soon they are no longer required for the achievement of the purpose of their collection or after expiry of any statutory retention period. As for the data from the input mask of the contact form, this is the case when the respective conversation with you is finished. The conversation is finished when the circumstances indicate that the concerned issue is finally clarified.

Besides, you can revoke your consent to the processing of the data voluntarily provided any time. For this, please simply contact us using the contact information provided in Section 1. In such case, the conversation cannot be continued.
 

6. Rights of the concerned persons

You have the right:

  • to claim information about the personal data processed by us according to Art. 15 GDPR. In particular, you can claim information about the purposes of processing, the category of personal data, the category of receivers to which your data are or have been disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to complaint, the origin of your data, as far as they have not been collected by us, and about the existence of an automatic decision-making including profiling and, if applicable, conclusive information on their details,
  • to claim the immediate correction or the completion of your personal data saved with us according to Art. 16 GDPR,
  • to claim the deletion of your personal data saved with us according to Art. 17 GDPR, unless the processing is necessary to exercise the right to the freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend any legal rights,
  • to demand the restriction of the processing of your personal data according to Art. 18 GDPR, as far as the correctness of the data is contested by you, the processing is unlawful, but you refuse their deletion and we do not need the data anymore, but you need them to assert, exercise or defend any legal rights or you have objected to the processing according to Art. 21 GDPR,
  • to obtain your personal data you have provided to us in a structured, customary and machine-readable format or to demand their transmission to another responsible person according to Art. 20 GDPR,
  • to complain with a supervisory authority according to Art. 77 GDPR. In general, you can contact the supervisory authority of your usual place of residence or job location or of the location of the presumed breach for that.
     
7. Right of refusal

As far as your personal data are processed on the basis of justified interests according to Art. 6 par. 1 p. 1 f GDPR, you are entitled to object to the processing of your personal data according to Art. 21 GDPR, as far as there are reasons for that resulting from your special situation; this also applies to a profiling based on these provisions. We will then no longer process the personal data concerning you, unless we can prove compulsory reasons for the processing worthy of protection which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend any legal rights.

Of course, you can object to the processing of your personal data for purposes of advertising and data analysis anytime. This also applies to the profiling as far as it is connected to such direct advertising.
 

8. Right of revocation of the consent according to privacy law

According to Art. 7 par. 3 GDPR, you have the right to revoke your given consent vis-à-vis us anytime. The consequence of this is that we may not continue the data processing which was based on this consent any longer for the future. The lawfulness of the processing conducted due to the consent until its revocation is not affected thereby.
 

9. Up-to-datedness and changes of this privacy statement

This privacy statement corresponds to the status of May 2023. Due to the further development of our website and offers on it or due to changed legal or official provisions, it can become necessary to change this privacy statement.