1. Data Controller
FirmGrid operates firmgrid.de. For questions about this policy, contact us at privacy@firmgrid.de.
2. Data We Collect
- Usage data: IP address, browser type, pages visited, timestamps — collected automatically for security and analytics.
- Account data: email address and profile information you provide upon registration.
- Search data: search queries and filters you submit, to improve service quality.
- Cookie data: as described in Section 5 below.
3. Legal Basis (GDPR)
- Contract performance (Art. 6(1)(b)) — processing necessary to provide the service.
- Legitimate interests (Art. 6(1)(f)) — security, fraud prevention, service improvement.
- Consent (Art. 6(1)(a)) — analytics and marketing cookies, where applicable.
4. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Search and usage logs are retained for a maximum of 12 months.
5. Cookies
We use the following categories of cookies:
- Necessary: Session cookies required for authentication and basic platform functionality. These cannot be disabled.
- Analytics: Cookies that help us understand how visitors interact with the Platform (only set with your consent).
You can manage cookie preferences at any time by clearing your browser storage or re-visiting this site in a private window.
6. Your Rights (GDPR)
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate personal data.
- Request deletion of your personal data ("right to be forgotten").
- Object to or restrict processing.
- Data portability.
- Lodge a complaint with a supervisory authority.
To exercise these rights, contact privacy@firmgrid.de.
7. Third Parties
We do not sell personal data to third parties. We may share data with trusted service providers (hosting, analytics) under strict data processing agreements in compliance with GDPR.
8. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform. Continued use after changes constitutes acceptance of the revised policy.