Privacy Policy
Controller
GRYN GmbH.
Am Sandtorkai 32,
20457, Hamburg
Germany
help@gryn.com
Questions about privacy and your rights
Incase you have any questions in respect to the processing or protection of your data or if you wish to exercise your rights under the applicable laws, please contact us using the contact details above.
Registration of a gryn.ai account
If you open a gryn.ai account, we utilize the data you provide to set up and manage the account and to enable you to use gryn.com. Legal basis for the processing of your data is Art. 6 para. 1 lit. b) GDPR. We will send an e-mail to the e-mail address you provided when registering with the request to confirm your registration. Hereby we want to prevent for your and our protection that third parties open a customer account under misuse of your e-mail address. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. The data relating to your gryn.ai account will be stored until the deletion of the account. If we are legally obligated to store the data for a longer period of time (e.g. to fulfill accounting obligations or legally required evidence) or if we are legally entitled to store the data for a longer period of time (e.g. due to an ongoing legal dispute against the owner of a customer account), the data will be deleted after the storage obligation or entitlement has expired.
Purchase orders
By ordering a service offered by us, we process the data provided for the conclusion and execution of the corresponding agreement. Legal basis for the processing is Art. 6 para. 1 lit. b) GDPR. The data will be deleted if a legal obligation exists when the storage obligation ceases to exist, unless we are entitled to further processing (e.g. in a legal dispute). Otherwise, we delete the data when they are no longer required to demonstrate the existence or non-existence of a right.
Google Analytics
We utilize Google Analytics, a service of Google Ireland Limited, https://www.google.de/contact/impressum.html , using your anonymized IP address as part of a contract processing agreement. The IP anonymization is carried out by Google within the EEA. By means of Google Analytics, the following data about the use of our website is processed:- approximate location at the level of a region- anonymized IP address- technical information about the browser and device used (e.g. language setting, screen resolution)- Internet provider of the user- which website/advertising medium a user used to access this website- the pages accessed by the user- whether users perform certain actions on our website, so-called conversions, such as the purchase of a product newsletter subscriptions, downloads, purchases)- user behavior (e.g. which links are clicked on, how long a user stays on a website, from which website the user leaves our website).We have deactivated the features in Google Analytics that would allow Google or another third party to use data as the responsible party. No personal profiles are created; the corresponding statistics only contain summarized data that do not allow any conclusions to be drawn about a specific person. There ports created by Google Analytics allow us to understand how our website is utilized and to determine the success of advertising measures. This allows us to optimize our website (in particular its structure, content, features) and advertising measures and thus our business success. The legal basis of the processing is based on your consent Art. 6 para. 1 lit. a) GDPR. In Google Analytics, we have set a storage period of 14 months for the personal data concerned. The deletion of data whose retention period has been reached takes place automatically once a month. You can revoke your consent to the use of Google Analytics anytime and e.g. by clicking here Link to Consent Layer (will add when cookies will be on the website). The withdrawal of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal. As part of the processing of personal data, Google is entitled to commission subcontractors. A list of these subcontractors can be found at https://privacy.google.com/businesses/subprocessors/ .Withinthe scope of the activities of Google Ireland Limited, there may be an export of the data to a third country within the meaning of Art. 44 GDPR. The legal basis for this, pursuant to Art. 46 (2) c), are the so-called standard contractual clauses that we have concluded with Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Please note our warnings regarding third countries, as personal data may be processed for Google Analytics in countries that do not have a level of data protection that meets the standards of the GDPR. Your consent can be revoked at any time here Link to Consent Layer with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until there vocation.
Email newsletter
With your registration for our email newsletter, we process the data you have provided. We process this data for the creation and dispatch of our newsletter. Legal basis for this processing is based on your consent Art. 6 para. 1 lit. a)GDPR. You can revoke your consent at any time with effect for the future. There vocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. To confirm the registration to the newsletter, you must click on the confirmation link in the verification email we send to you after receipt of your registration. With your click on the confirmation link, we process the date and time of the click, the content of the message sent to you and the email address used. This processing is carried out to enable us to demonstrate that you have subscribed to the newsletter and confirmed your consent. The legal basis for this processing is Art. 6 (1) lit. c) GDPR, as we are required by law to be able to demonstrate that you have given your consent. We delete your personal data related to the newsletter subscription upon your subscription. We delete data that we need to demonstrate that you have subscribed to the newsletter after the expiry of the limitation period for corresponding obligations to provide evidence.
Your rights
Under the GDPR, you are entitled to the following rights in particular in connection with your personal data. For details, please refer to the legal regulations (in particular Art. 15 ff. GDPR).
Right of access.
You have the right under Art. 15 of the GDPR to request confirmation from us as to whether personal data relating to you is being processed by us. If this is the case, you have the right to be informed about this personal data and to receive further information, which is mentioned in Art. 15 GDPR.
Right of rectification.
Pursuant to Art. 16 GDPR, you have the right to request us to rectify in accurate personal data concerning you without undue delay. In addition, taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.
Right to erasure ("right to be forgotten").
Within the limits of Art. 17 GDPR, you have the right to demand that we delete personal data relating to you without undue delay. We are obliged to delete personal data without undue delay, provided that the relevant requirements of Art. 17 GDPR are met. For the details, we refer to Art. 17 GDPR.
Right to restriction of processing.
In accordance with Art. 18 GDPR, you have the right, under certain conditions, to demand that we restrict the processing of your personal data. For the details, please refer to Art. 18 GDPR.
Right to data portability
Under the conditions stipulated in Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Pursuant to Art. 20 GDPR, you further have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article6(1)(b) GDPR and the processing is carried out with the help of automated procedures.
Existence of a right of appeal to the supervisory authority.
Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority, without prejudice to any other administrative or judicial remedy. This right exists in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
Right of Appeal.
Under Article 21 of the GDPR, you have the right to object to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling in sofar as it is related to such direct marketing.