
Privacy Policy
Introduction
We (“we,” “us,” “our”) take the protection of the data of users (“user” or “you”) of our website and/or our mobile app (the “website” and the “mobile app,” collectively: the “digital assets”) very seriously and are committed to protecting the information that users provide us in connection with the use of our website and/or our mobile app. We are also committed to protecting and using your data in accordance with applicable law.
​
This privacy policy explains our practices regarding the collection, use, and disclosure of your data through your use of our digital assets (the “services”) when you access the services via your devices.
​
Please read this privacy policy carefully and make sure you fully understand our practices regarding your data before you use our services. If you have read and fully understood this policy and do not agree with our practices, you must discontinue using our digital assets and services. By using our services, you acknowledge the terms of this privacy policy. Continued use of the services constitutes your consent to this privacy policy and any amendments to it.
​
This privacy policy tells you:
-
How we collect data
-
What data we collect
-
Why we collect this data
-
With whom we share the data
-
Where the data is stored
-
How long the data is retained
-
How we protect the data
-
How we deal with minors
-
Updates or changes to the privacy policy
​​​
What data do we collect?
Below is an overview of the data we may collect:
-
Non-identified and non-identifiable information that you provide during the registration process or that is collected through the use of our services (“non-personal data”). Non-personal data does not reveal who it was collected from. The non-personal data we collect mainly consists of technical and aggregated usage information.
-
Individually identifiable information — that is, information by which you can be identified or could reasonably be identified (“personal data”). Personal data that we collect through our services may include information requested from time to time, such as names, email addresses, addresses, phone numbers, IP addresses, and more. When we combine personal data with non-personal data, we treat the combined data as personal data as long as it remains combined.
​
How do we collect data? The main methods we use to collect data are:​
-
We collect data when you use our services. When you visit our digital assets and use services, we may collect, record, and store usage, sessions, and related information.
-
We collect data that you provide to us yourself, for example when you contact us directly via a communication channel (e.g., an email with a comment or feedback).
-
We may collect data from third-party sources, as described below.
-
We collect data you provide when you log in to our services through a third party such as Facebook or Google.
​
Why do we collect this data? We may use your data for the following purposes:​
-
To provide and operate our services;
-
To develop, customize, and improve our services;
-
To respond to your feedback, requests, and inquiries, and to provide support;
-
To analyze demand and usage patterns;
-
For other internal, statistical, and research purposes;
-
To improve our data security and fraud prevention capabilities;
-
To investigate violations and enforce our terms and policies, and to comply with applicable law, regulations, or governmental orders;
​
With whom do we share this data?​
We may share your data with our service providers to operate our services (e.g., data storage via third-party hosting services, technical support).
​
We may also disclose your data under the following circumstances:
(i) to investigate, detect, prevent, or address unlawful activities or other misconduct;
(ii) to establish or exercise our rights of defense;
(iii) to protect our rights, property, or personal safety, as well as the safety of our users or the public;
(iv) in the event of a change of control at us or any of our affiliates (through merger, acquisition, or purchase of substantially all assets, etc.);
(v) to collect, hold, and/or manage your data through authorized third-party providers (e.g., cloud service providers) as appropriate for business purposes;
(vi) to work jointly with third parties to improve your user experience.
​
For clarity, we may transfer, share, or otherwise use non-personal data at our discretion.
​
Cookies and similar technologies
When you visit or access our services, we authorize third parties to use web beacons, cookies, pixel tags, scripts, and other technologies and analytics services (“tracking technologies”). These may allow third parties to automatically collect your data to improve navigation, optimize performance, ensure a tailored user experience, and for security and fraud prevention.
​
See our Cookie Policy for more information.
-
Category: User is NOT linked to an ad service: Without your consent, we will not share your email address or other personal data with advertising companies or ad networks.
-
Category: User is linked to an ad service (e.g., Facebook Ads): We may serve advertising via our services, tailored to you based on recent browsing. This may involve cookies, JavaScript, web beacons, local storage, and third-party advertisers. These third parties are governed by their own privacy policies.
​
Where do we store the data?​
-
Non-personal data: may be stored and processed worldwide by us and trusted partners.
-
Personal data: may be maintained, processed, and stored in the United States, Ireland, South Korea, Taiwan, Israel, and other jurisdictions as required for service provision or legal obligations.
​
How long do we retain data?​
We keep collected data as long as necessary to provide our services, comply with legal and contractual obligations, resolve disputes, and enforce agreements. We may correct, supplement, or delete inaccurate or incomplete data at our discretion.
​
How do we protect data?​
Our hosting provider stores your data on secure servers behind a firewall and provides secure HTTPS access to most areas.
If payments are processed: All payment options offered meet PCI-DSS standards (Visa, MasterCard, AmEx, etc.), ensuring secure handling of credit card data.
​
Despite measures, no method of transmission or storage is 100% secure. Please use secure passwords and avoid sending confidential information via email or instant messaging.
​
How do we handle minors?​
Our services are not directed to users under the legal age of majority. We do not knowingly collect data from children. If we learn that a minor is using our services, we may block access and delete stored data.
If your jurisdiction allows children to use services, parental consent may be required for certain features. Parents can review, delete, or restrict their child’s data by contacting us.
​
Legal bases for processing​
We use personal data only if:
-
necessary to perform or enter into a contract (e.g., providing services or support);
-
necessary to comply with legal obligations;
-
necessary for our legitimate business interests, in a proportionate manner respecting your rights.
​
Your rights (EU residents)​
You may:
-
Request confirmation if we process your data;
-
Request access to your data;
-
Request correction or deletion;
-
Object to processing;
-
Restrict processing;
-
Request portability of the data you provided;
-
File a complaint with a supervisory authority.
​
International transfers​:
We may transfer data outside the EEA. Such transfers occur only where adequate protection is ensured (e.g., contractual safeguards).
​
California Consumer Privacy Act (CCPA) rights​:
-
California residents may request access to or deletion of their data.
-
We do not sell personal data of users.
-
Users under 18 may request deletion of their posted content by emailing us with the subject “California Removal Request.”
​
Updates to this policy​
We may update this policy periodically. The latest version is always posted on our website. If we make significant changes, we will notify you on our website. Continued use of the services constitutes acceptance of changes.
​
Contact​
If you have questions about this policy or our data practices, please contact us at:Gridmetry GmbH
Herzogspitalstraße 24,
C/o Mindspace
80331 Munich, Germany
Email: contact@gridmetry.com
Tel: (+49) 089 / 2153 6730
Disclaimer: The information contained herein does not constitute legal advice. Legal requirements differ across jurisdictions. To ensure compliance, we strongly recommend obtaining professional legal advice.