Privacy Policy

Introduction

grandaxius GmbH ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website grandaxius.top or use our tax advisory services.

We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws. Our registered office is located at Waldstraße 59, 44198 Dortmund, North Rhine-Westphalia, Germany (Registration Number: HRB904627).

Data Collection

We collect personal data that you provide directly to us and information that is automatically collected when you use our website. The types of data we collect include:

• Personal Information: Name, email address, phone number, postal address, and company details when you contact us or request our services
• Communication Data: Records of correspondence and communications with our team
• Website Usage Data: Information about how you use our website, including IP address, browser type, pages visited, and time spent on our site
• Professional Information: Details about your business, tax requirements, and financial circumstances relevant to our advisory services
• Technical Data: Device information, operating system, and other technical identifiers

The data we collect is necessary for providing our professional tax advisory services and maintaining our business relationship with you.

How We Use Your Information

We use your personal data for the following purposes, based on legitimate business interests and legal obligations:

• Service Provision: To provide tax advisory services, consultations, and professional guidance
• Communication: To respond to your enquiries, provide updates, and maintain ongoing professional relationships
• Legal Compliance: To meet our legal and regulatory obligations as a tax advisory firm
• Business Operations: To manage our business, maintain records, and improve our services
• Website Functionality: To ensure our website operates effectively and provide you with relevant information
• Marketing: To send you information about our services (with your consent where required)

We process your data lawfully under GDPR based on legitimate interests, contractual necessity, legal obligations, and where applicable, your explicit consent.

Data Sharing and Disclosure

We may share your personal data in the following circumstances:

• Professional Partners: With qualified tax professionals, accountants, or legal advisors when necessary for service provision
• Service Providers: With trusted third-party service providers who assist in our business operations under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or regulatory authorities
• Business Transfers: In connection with any merger, acquisition, or sale of business assets

We do not sell, rent, or trade your personal data to third parties for marketing purposes. All data sharing is conducted in accordance with applicable data protection laws and professional confidentiality requirements.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, comply with legal obligations, and resolve disputes. Specific retention periods include:

• Client Records: Maintained for the duration of our professional relationship and for 10 years thereafter as required by German tax law
• Communication Records: Retained for 7 years for business and legal compliance purposes
• Website Data: Technical data is typically retained for 2 years unless longer retention is required for legal compliance
• Marketing Data: Retained until you withdraw consent or request deletion

After the retention period expires, we securely delete or anonymise your personal data in accordance with our data protection procedures.

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Access: Request access to your personal data and information about how we process it
• Rectification: Request correction of inaccurate or incomplete personal data
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Request restriction of processing in specific situations
• Portability: Request transfer of your data to another organisation in certain circumstances
• Objection: Object to processing based on legitimate interests or for direct marketing purposes
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the details provided below. We will respond to your request within one month and may require verification of your identity.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection and confidentiality
• Secure backup and disaster recovery procedures

Whilst we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to protecting your data using industry-standard practices.

International Data Transfers

As our operations are primarily based in Germany and we serve clients within the European Union, most data processing occurs within the EU/EEA. If we transfer personal data outside the EU/EEA, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules or other approved mechanisms

We will inform you of any international transfers and the safeguards we have implemented to protect your data.

Cookies and Website Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and analyse website usage. For detailed information about our use of cookies, including the types of cookies we use and how to manage your cookie preferences, please refer to our Cookie Policy.

You can control cookie settings through your browser preferences, though disabling certain cookies may affect website functionality.

Third-Party Links

Our website may contain links to third-party websites that are not operated by us. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

This Privacy Policy applies only to information collected by grandaxius through our website and services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us:

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe we have not handled your personal data in accordance with applicable laws.