Privacy Policy
At Grade Consulting, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use and protect personal information when you visit our website, contact us or engage with our services.
We process personal data exclusively in accordance with the applicable data protection laws, in particular the European General Data Protection Regulation (GDPR).
1. Data Controller
The controller responsible for the processing of personal data on this website is:
Grade Consulting
Business Owner
Simone Grade
Kemnitzer Straße 59A
14542 Werder (Havel)
Germany
Phone:
+49 15678 337341
E-mail:
Website:
www.gradeconsulting.eu
2. About this Website
Grade Consulting supports companies in the fields of:
- Energy Systems
- Industrial Technology
- Robotics & Automation
- Mobility
- International Business Development
Our services focus on supporting companies in establishing strategic partnerships, expanding into European markets and developing sustainable business opportunities.
This website provides information about our consulting services and enables visitors to contact us regarding potential cooperation.
3. Purpose of Processing
We process personal data only where necessary for the operation of this website and for the initiation or execution of business relationships.
Personal data may be processed for the following purposes:
- responding to enquiries
- preparing quotations
- establishing business relationships
- communication with customers and business partners
- operation and security of this website
- compliance with legal obligations
4. Legal Basis
Where personal data is processed, this is done on one or more of the following legal bases:
- Article 6(1)(a) GDPR – Consent
- Article 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
- Article 6(1)(c) GDPR – Legal obligation
- Article 6(1)(f) GDPR – Legitimate interests
Where consent has been obtained, it may be withdrawn at any time with future effect.
5. Hosting
This website is hosted by DomainFactory GmbH, Germany.
The hosting provider processes personal data on our behalf to ensure the reliable, secure and efficient operation of this website. This includes, in particular, the storage of website data, server log files and technical information required for the provision of the website.
The processing is based on Article 6(1)(f) GDPR.
Where required by law, a Data Processing Agreement (DPA) has been concluded with the hosting provider.
6. Server Log Files
When you visit this website, our hosting provider automatically collects and stores information in server log files.
This information may include:
- IP address
- Date and time of access
- Requested page
- Browser type and version
- Operating system
- Referrer URL
- HTTP status code
- Amount of data transferred
These data are processed exclusively to ensure the secure and reliable operation of the website and to detect, prevent and investigate technical faults or security incidents.
The processing is based on Article 6(1)(f) GDPR.
7. Secure Data Transmission
This website uses SSL/TLS encryption to protect the transmission of confidential information.
You can recognise an encrypted connection by the "https://" prefix in your browser's address bar.
8. Cookies
This website uses only cookies that are technically necessary for the operation and security of the website.
No cookies are used for advertising, behavioural tracking or marketing purposes.
Should additional optional services requiring consent be introduced in the future, they will only be activated after your explicit consent has been obtained.
9. Consent Management
To manage user consent, this website uses a consent management solution.
Visitors can review, modify or withdraw their consent at any time with future effect.
Currently, only technically necessary cookies are used.
10. Contact Form
If you contact us using the contact form, the information you provide will be processed solely for the purpose of handling your enquiry and any subsequent communication.
The contact form is provided using the Joomla extension ConvertForms.
The processing is based on Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.
Your data will not be disclosed to third parties unless required by law or necessary for the fulfilment of your request.
11. Spam Protection
To protect our contact form against automated misuse and spam submissions, this website uses Cloudflare Turnstile.
Turnstile analyses technical information required to distinguish legitimate visitors from automated requests.
This processing is based on Article 6(1)(f) GDPR.
Further information is available in the Cloudflare Privacy Policy.
12. Communication
If you contact us by email or telephone, the personal data you provide will be processed exclusively for the purpose of responding to your enquiry and maintaining communication.
Depending on the nature of your request, the processing is based on Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.
13. Microsoft Teams
For online meetings and business communication, we use Microsoft Teams, a service provided by Microsoft.
Participation in online meetings requires the processing of certain personal data, such as your name, email address, technical connection data and, where applicable, audio, video or shared content.
Microsoft Teams is used exclusively for conducting business meetings and communication with customers and business partners.
Meetings are not recorded unless all participants have been informed in advance and have given their consent where required.
Further information is available in the Microsoft Privacy Statement.
14. Customer and Contract Data
Where necessary for the initiation, establishment or performance of contractual relationships, we process personal data required for communication, project execution and contractual obligations.
This may include:
- contact details
- company information
- correspondence
- contractual documents
- project-related information
The processing is based on Article 6(1)(b) GDPR.
15. Confidentiality
Grade Consulting frequently works with confidential business information provided by customers, suppliers and business partners.
All information received during business relationships is treated confidentially and processed solely for the agreed business purposes.
Where appropriate, confidentiality agreements (NDAs) are concluded to protect commercially sensitive information.
16. International Business Relations
As an internationally operating consulting company, we communicate with customers, suppliers and business partners located both within and outside the European Union.
Where personal data are transferred outside the European Economic Area (EEA), such transfers are carried out only where appropriate safeguards in accordance with Chapter V GDPR are in place.
17. Recipients of Personal Data
Personal data are disclosed only where this is necessary for the operation of our business or where we are legally required to do so.
Recipients may include:
- hosting providers
- IT service providers
- communication service providers
- legal advisers
- public authorities where legally required
Personal data are never sold to third parties.
18. Storage Period
Personal data are retained only for as long as necessary to fulfil the respective processing purposes or to comply with statutory retention obligations.
Once the relevant purpose no longer applies and any legal retention periods have expired, personal data are securely deleted or anonymised.
19. Your Rights
Under the GDPR, you have the right to:
- access your personal data
- request rectification
- request erasure
- request restriction of processing
- object to processing
- receive your personal data in a portable format where applicable
- withdraw your consent at any time with future effect
Requests may be submitted using the contact details provided in this Privacy Policy.
20. Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.
This right exists without prejudice to any other administrative or judicial remedies.
21. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy where necessary to reflect legal, technical or organisational changes.
The current version published on this website shall always apply.
22. Last Updated
August 2026
