Privacy Policy

This Privacy Policy explains what personal data Grant Fund collects, why we process it, the legal bases we rely on, how long we keep it, and the rights you have under the GDPR.

1. Who we are

Grant Fund GmbH, Frankfurt am Main, Germany, is the controller responsible for your personal data. Contact details are in our Imprint.

2. Categories of data we process

• Account data — email address, encrypted password, account state and timestamps.
• Consent records — each opt-in/opt-out you make (terms, privacy, marketing, cookies, surveys), with the document version and time.
• Technical & location data — IP address (stored encrypted) and a coarse country/region derived from it at sign-up and sign-in.
• Usage data — survey responses and product interactions where applicable.

3. Purposes & legal bases

• Providing and securing the service — performance of a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).
• Marketing communications — your consent (Art. 6(1)(a)), withdrawable at any time.
• Analytics and marketing cookies — your consent (Art. 6(1)(a)).
• Legal and compliance obligations — Art. 6(1)(c).

4. Retention periods

• IP addresses are deleted after 12 months.
• Audit/security trail and survey session data are kept up to 24 months.
• Inactive accounts are warned at 35 months and anonymised at 36 months.
• On account deletion, data is anonymised immediately and physically purged after 90 days.

5. Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw consent at any time. You can export your data and request deletion from your account page, and lodge a complaint with a supervisory authority.

6. Sub-processors

We use third-party providers (e.g. hosting and email delivery) acting as processors under data processing agreements. A current list of sub-processors will be published here.

7. International transfers

Where data is transferred outside the EU/EEA, we rely on adequacy decisions or Standard Contractual Clauses.

8. Cookies

See our Cookie Policy for details of the cookies we set and how to manage them.