Privacy Policy

Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on data protection can be found in the Privacy Policy set out below.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section “Information on the Controller” in this Privacy Policy.

How do we collect your data?
Some data is collected when you provide it to us. This may, for example, be data that you enter into a contact form.
Other data is collected automatically or after you have given your consent when you visit the website by our IT systems. This primarily includes technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you visit this website.

What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other service requests.

What rights do you have regarding your data?
You have the right at any time to obtain information free of charge about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may withdraw this consent at any time going forward. You also have the right, under certain circumstances, to request restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding these and any other questions relating to data protection.

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behavior may be statistically evaluated. This is carried out primarily using analytics programs. Detailed information on these analytics programs can be found in the following sections of this Privacy Policy.

General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this Privacy Policy. When you use this website, various personal data is collected. This Privacy Policy explains what data we collect, what we use it for, and for what purpose.

Please note that data transmission over the Internet (e.g., communication by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the Controller

The controller responsible for data processing on this website is:

GR Software Engineering GmbH (GRSE)
Baumenäcker 5,
D-74746 Höpfingen,
Germany
Phone: +49 6283 3031157
Email: info@grse.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Period

Unless a more specific storage period has been stated in this Privacy Policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, deletion will take place once these grounds no longer apply.

General Information on the Legal Bases for Data Processing on This Website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data pursuant to Art. 9(1) GDPR are processed. In the event of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your terminal device (e.g., via device fingerprinting), the data processing is additionally based on Section 25(1) TDDDG. Consent may be withdrawn at any time.

If your data is required for the performance of a contract or for taking steps prior to entering into a contract, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data where this is necessary to comply with a legal obligation on the basis of Art. 6(1)(c) GDPR. Data processing may also be based on our legitimate interests pursuant to Art. 6(1)(f) GDPR. Information on the legal basis applicable in each individual case is provided in the following sections of this Privacy Policy.

Recipients of Personal Data

In the course of our business activities, we work with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only disclose personal data to external parties where this is necessary for the performance of a contract, where we are legally obliged to do so (e.g., disclosure of data to tax authorities), where we have a legitimate interest in the disclosure pursuant to Art. 6(1)(f) GDPR, or where another legal basis permits the disclosure. When using processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement. In the event of joint processing, an agreement on joint processing is concluded.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser address line changes from “http://” to “https://” and by the lock symbol in your browser. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to Promotional Emails

We hereby object to the use of contact details published as part of the legal notice obligation for the purpose of sending unsolicited advertising and informational materials. The website operators expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails.

Rights of the Data Subject (Your Rights under the GDPR)

You have the right at any time, within the scope of the applicable statutory provisions (Arts. 15 to 21 GDPR), to exercise your rights regarding your stored personal data free of charge. To exercise your rights, you may contact us at any time using the contact details provided in the section “Information on the Controller”.

• Right to withdraw your consent (Art. 7(3) GDPR): Many data processing operations are only possible with your explicit consent. You may withdraw consent that you have already given at any time going forward. The lawfulness of data processing carried out before the withdrawal remains unaffected.
• Right of access (Art. 15 GDPR): You have the right to obtain information free of charge about the origin, recipients, storage period, and purpose of your stored personal data.
• Right to rectification (Art. 16 GDPR): You have the right to request the immediate correction of inaccurate personal data or completion of incomplete personal data stored about you.
• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your stored personal data where the statutory requirements are met.
• Right to restriction of processing (Art. 18 GDPR): You have the right to request restriction of the processing of your personal data. This applies for the duration of a review if you contest the accuracy of the data; if the processing was unlawful; if we no longer need the data but you require it for the establishment, exercise, or defense of legal claims; or if an objection pursuant to Art. 21(1) GDPR has been lodged and it has not yet been determined whose interests prevail. Where processing has been restricted, such data may, apart from storage, be processed only with your consent or for the establishment, exercise, or defense of legal claims or for the protection of important public interests.
• Right to data portability (Art. 20 GDPR): You have the right to have data that we process automatically on the basis of your consent or in performance of a contract provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will be carried out only where technically feasible.
• Right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR): In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement.

Right to Object (Art. 21 GDPR)

Hosting

We host the content of our website with the following provider: Microsoft Azure

External Hosting

This website is hosted externally. Personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website access data, and other data generated via a website.

External hosting is used for the purpose of performing contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in our interest in the secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Our host will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions with regard to this data.

Data Processing Agreement

We have concluded a data processing agreement (DPA) for the use of the service mentioned above. This is a contract required under data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Data Collection in Detail

Cookies

Our websites use cookies. Cookies are small data packages and do not cause any damage to your terminal device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your terminal device until you delete them yourself or they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable certain services provided by third-party companies to be integrated into websites (e.g., cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., shopping cart functionality or the display of videos). Other cookies may be used to evaluate user behavior or for advertising purposes.

Cookies that are required to carry out electronic communications, to provide certain functions requested by you (e.g., shopping cart functionality), or to optimize the website (e.g., cookies for measuring the website audience) (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. Where consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG); consent may be withdrawn at any time.

You can configure your browser so that you are informed when cookies are set and allow cookies only in individual cases, exclude the acceptance of cookies in certain cases or generally, and activate automatic deletion of cookies when closing the browser. Disabling cookies may restrict the functionality of this website.

If additional cookies and services are used on this website, details can be found in this Privacy Policy.

Consent Management with Complianz

Our website uses Complianz consent technology to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this consent in compliance with data protection law. The provider of this technology is Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, the Netherlands (hereinafter “Complianz”).

Complianz is hosted on our servers, so no connection is established to the servers of the Complianz provider. Complianz stores a cookie in your browser in order to associate the consents you have given or their withdrawal with you. The data collected in this way is stored until you ask us to delete it, delete the Complianz cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.

Complianz is used to obtain the consents required by law for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.

Google Tag Manager

For the technical management and deployment of website tags, we use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used exclusively for the centralized management, control, and deployment of code interfaces (tags) and scripts on our website. The service itself does not collect, store, or process personal data for analytics or marketing purposes and does not create user profiles.

The legal basis for the use of Google Tag Manager is our legitimate interest pursuant to Art. 6(1)(f) GDPR in the efficient, structured, and secure management of the services integrated into our website. Google Tag Manager technically ensures that third-party services requiring consent (such as Google Analytics) are loaded and executed only after you have given your explicit consent via our consent management system.

Google Analytics 4

If you have given your explicit consent, we use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics 4 enables us to statistically evaluate the use of our website, continuously improve user-friendliness, and analyze the reach and performance of our online offering. For this purpose, Google Analytics 4 processes in particular information about your interaction with the website (e.g., pages viewed, clicks, time spent), technical device and browser information, and approximate location data (at regional or city level).

We use Google Analytics 4 exclusively with automatically activated IP masking. With this privacy-friendly default setting of Google Analytics 4, your IP address is truncated by Google within Member States of the European Union or other states party to the Agreement on the European Economic Area before it is stored or further processed. Direct identification of individual visitors on the basis of the data collected is therefore not possible for us.

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time going forward via the cookie settings on our website.

When Google Analytics 4 is used, personal data may be transferred to Google servers. Processing may also take place in third countries, in particular the United States (USA). For such data transfers, Google relies on the Standard Contractual Clauses (SCCs) recognized by the European Commission and on the EU-U.S. Data Privacy Framework where the service provider is appropriately certified. The data is automatically deleted after the retention period defined in the Google Analytics settings has expired.

Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://business.safety.google/adscontrollerterms/sccs/.

IP Anonymization
Google Analytics IP anonymization is activated. As a result, your IP address is truncated by Google within Member States of the European Union or other states party to the Agreement on the European Economic Area before being transferred to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide the website operator with other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser Plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

More information on how Google Analytics handles user data can be found in Google’s privacy information: https://support.google.com/analytics/answer/6004245?hl=en.

Server Log Files

The provider of these pages automatically collects and stores information in server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version;
• Operating system used;
• Referrer URL;
• Hostname of the accessing computer;
• Time of the server request;
• IP address.

This data is not merged with other data sources.

This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website; for this purpose, server log files must be collected.

Contact Form

If you send us inquiries via the contact form, the information you provide in the inquiry form, including the contact details you enter there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not disclose this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where this has been requested; consent may be withdrawn at any time.

The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been fully processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.

Inquiries by Email, Telephone, or Fax

If you contact us by email, telephone, or fax, your inquiry, including all personal data arising from it (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not disclose this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where this has been requested; consent may be withdrawn at any time.

The data you send us in connection with contact inquiries will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been fully processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Calendly

On our website, you have the option of scheduling appointments with us. We use the “Calendly” tool for appointment booking. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA (hereinafter “Calendly”).

For the purpose of booking an appointment, you enter the requested data and your preferred appointment time in the form provided. The data entered is used for planning, conducting, and, where applicable, following up on the appointment. The appointment data is stored for us on Calendly’s servers. Calendly’s Privacy Policy is available here: https://calendly.com/privacy.

The data you enter will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.

The legal basis for data processing is Art. 6(1)(f) GDPR. The website operator has a legitimate interest in providing the simplest possible appointment scheduling process for prospective and existing customers. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://calendly.com/pages/dpa.

The company is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at: https://www.dataprivacyframework.gov/participant/6050.

Data Processing Agreement
We have concluded a data processing agreement (DPA) for the use of the service mentioned above. This is a contract required under data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

HubSpot CRM

We use HubSpot CRM from HubSpot Ireland Limited, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland, on this website.

HubSpot CRM enables us, among other things, to manage existing and potential customers and customer contacts. With HubSpot CRM, we are able to record, sort, and analyze customer interactions via email, social media, or telephone across various channels. The personal data collected in this way may be evaluated and used for communication with prospective customers or for marketing measures (e.g., newsletter mailings). HubSpot CRM also enables us to record and analyze the behavior of our contacts on our website.

The use of HubSpot CRM is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the most efficient possible customer management and customer communication. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

For details, please refer to HubSpot’s Privacy Policy: https://legal.hubspot.com/privacy-policy.

Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://www.hubspot.de/data-privacy/privacy-shield.

The company is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at: https://www.dataprivacyframework.gov/participant/5812.

Data Processing Agreement
We have concluded a data processing agreement (DPA) for the use of the service mentioned above. This is a contract required under data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Registration on This Website

You can register on this website to use additional functions on the site. We use the data entered for this purpose only for the use of the respective offering or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.

For important changes, for example to the scope of the offering or in the event of technically necessary changes, we use the email address provided during registration to inform you by this means.

The data entered during registration is processed for the purpose of carrying out the user relationship established by the registration and, where applicable, for initiating further contracts (Art. 6(1)(b) GDPR).

The data collected during registration will be stored by us for as long as you are registered on this website and will subsequently be deleted. Statutory retention periods remain unaffected.

Newsletter Data

If you wish to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively to send the requested information and do not disclose it to third parties.

The data entered in the newsletter subscription form is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw your consent to the storage of the data, the email address, and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The lawfulness of data processing operations already carried out remains unaffected by the withdrawal.

The data you provide to us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe or once the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6(1)(f) GDPR. Data stored by us for other purposes remains unaffected.

After you unsubscribe from the newsletter distribution list, your email address may be stored by us or the newsletter service provider on a blacklist if this is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and is not merged with other data. This serves both your interests and our interest in complying with the statutory requirements for sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage on the blacklist is not subject to a time limit. You may object to the storage if your interests outweigh our legitimate interest.

Social Media

LinkedIn

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Each time a page of this website containing LinkedIn elements is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited this website with your IP address. If you click the LinkedIn “Recommend” button while logged in to your LinkedIn account, LinkedIn can associate your visit to this website with you and your user account. We point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it is used by LinkedIn.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://www.linkedin.com/help/linkedin/answer/a1343190/data-transfers-from-the-eu-eea-and-switzerland?lang=en

Further information can be found in LinkedIn’s Privacy Policy at: https://www.linkedin.com/legal/privacy-policy.

The company is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at: https://www.dataprivacyframework.gov/participant/5448.

Current Status of This Privacy Policy

This Privacy Policy is reviewed regularly and updated as necessary to reflect legal, technical, or organizational changes. The current version is available on this website at all times.

August 2026