Privacy Policy

1. Introduction

This Privacy Policy describes how 1Grain.tech ("1Grain," "we," "us," or "our") collects, uses, and protects your personal information when you visit our website at 1grain.tech or use our services.

1Grain is operated by Nuvaya Hendese Technologies GmbH, located in Duisburg, Germany. We are committed to protecting your privacy and ensuring the security of your data in compliance with the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller responsible for your personal data is:

3. What Data We Collect

We collect the following types of personal data when you interact with our website:

• Contact Form Data: Name, email address, company name (optional), and message content submitted through our contact form
• Technical Data: IP address, browser type, device information, and access logs collected automatically when you visit our website
• Communication Data: Messages you send us via email or other communication channels

4. How We Use Your Data

We process your personal data for the following purposes:

• Responding to Inquiries: To answer your questions and respond to messages submitted through our contact form
• Business Communications: To communicate with you about our AI consultancy services, strategy sessions, and engagements
• Website Operation: To operate, maintain, and improve our website
• Legal Compliance: To comply with applicable laws, regulations, and legal obligations

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): When you voluntarily submit the contact form, you provide consent for us to process your data to respond to your inquiry
• Legitimate Interests (Art. 6(1)(f) GDPR): Processing necessary for our legitimate business interests, such as responding to inquiries and improving our website (balanced against your rights)
• Legal Obligation (Art. 6(1)(c) GDPR): Processing required to comply with legal and regulatory requirements

6. Data Retention

We retain your personal data only as long as necessary:

• Contact Form Submissions: Retained for up to 12 months after the last interaction, unless a longer retention period is required by law
• Technical Logs: Retained for up to 6 months for security and troubleshooting purposes
• Legal Records: Retained as required by applicable German and EU laws

After the retention period expires, we securely delete or anonymize your personal data.

7. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15): You can request a copy of all personal data we hold about you
• Right to Rectification (Art. 16): You can request correction of inaccurate or incomplete personal data
• Right to Erasure (Art. 17): You can request deletion of your personal data under certain circumstances ("Right to be Forgotten")
• Right to Restriction of Processing (Art. 18): You can request that we limit how we use your personal data
• Right to Data Portability (Art. 20): You can request your data in a structured, machine-readable format
• Right to Object (Art. 21): You can object to certain types of data processing, including processing based on legitimate interests
• Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, you can withdraw it at any time
• Right to Lodge a Complaint (Art. 77): You can file a complaint with your local data protection authority

To exercise any of these rights, please contact us at contact@1grain.tech. We will respond to your request within 30 days as required by GDPR.

8. Cookies

For detailed information about our use of cookies, please refer to our Cookie Policy.

9. Third Parties

We do not sell, trade, or rent your personal data to third parties. We may share your data only with trusted service providers who assist in operating our website, each bound by data processing agreements and obligated to protect your information.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmitted through our website is encrypted using SSL/TLS protocols.

11. International Data Transfers

Your data is processed within the European Union / European Economic Area. If any data transfer outside the EEA occurs, we ensure appropriate safeguards are in place, such as EU-approved Standard Contractual Clauses (SCCs).

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and notify you via a prominent notice on our website. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: