Privacy Policy
1. Controller
Granum AI FZCO
Registered Office: Unit No: 3O-01-5375
Jewellery & Gemplex 3
Plot No: DMCC-PH2-J&GPlexS
Jewellery & Gemplex
Dubai
United Arab Emirates
Email: contact@granum.ai
License No.: 961026
2. Scope
This Privacy Policy applies to the use of the website granum.ai as well as all content, functions, and communications offered through it.
3. Data We Process
Depending on your use of our services, we process the following in particular:
a) Technical Access Data (Logfiles)
IP address, date/time, accessed pages, referrer URL, browser/OS, device information, data volume transferred, and error logs.
b) Communication and Contact Data
Name, email address, phone number, message/inquiry, and communication metadata (e.g., timestamps).
c) Contractual/Customer Data
Company details, contact persons, billing/payment data, and service/usage data.
d) Newsletter/Marketing
Email address, consent status, opt-in/opt-out records, and tracking information.
e) Cookies
See Section 10, "Cookies."
4. Purposes of Processing
We process personal data for the following purposes:
-
Provision and security of the website (operation, error analysis, detection of abuse/attacks).
-
Responding to inquiries and general communication.
-
Initiation, conclusion, and execution of contracts/services.
-
Compliance with legal obligations (e.g., accounting, documentation requirements).
-
Marketing and newsletters.
-
Improving the website and user experience.
5. Legal Basis
Where applicable, we base our processing on one or more of the following:
-
Consent.
-
Contractual or pre-contractual measures.
-
Legal obligations.
-
Legitimate interests (e.g., IT security, optimization), provided these are not overridden by the rights of the data subject.
6. Recipients / Categories of Recipients
We only disclose data when necessary and permitted, for example to:
-
IT and hosting providers, cloud providers, and website/analytics services.
-
Communication tools (email, ticketing, CRM).
-
Legal/tax advisors and auditors.
-
Authorities/courts, if legally required.
7. International Data Transfers
Data may be transferred to or processed in countries outside the UAE (e.g., via international cloud/tool providers). In such cases, we implement appropriate safeguards (e.g., contractual guarantees, organizational/technical measures) to ensure an adequate level of data protection.
8. Retention Period
We store personal data only as long as necessary for the respective purposes, or as required by legal retention periods or for the defense of legal claims. Afterward, data is deleted or anonymized.
9. Security
We employ appropriate technical and organizational measures (e.g., access controls, encryption, logging, backup/recovery, least-privilege principle) to protect data from loss, misuse, unauthorized access, or disclosure.
10. Cookies and Similar Technologies
We use cookies to:
-
Provide the website technically (Essential Cookies).
-
Optionally provide reach measurement/analysis and marketing (Non-essential Cookies).
Cookie Settings:
You can control cookies via our consent tool or block/delete them via your browser. Non-essential cookies are only set based on your consent where legally required.
11. Your Rights
Depending on the applicable law (specifically the PDPL), you may have the following rights:
-
Access to your personal data.
-
Correction of inaccurate data.
-
Deletion/removal (provided no retention obligation/necessity exists).
-
Restriction of processing.
-
Objection to certain processing activities.
-
Data portability (where applicable).
-
Withdrawal of consent with future effect.
The PDPL (Personal Data Protection Law) provides rights such as access, correction, deletion, restriction, and data portability.
Contact for data subject requests: contact@granum.ai
We may require proof of identity to process your request.
12. Complaints / Supervisory Authority
If you believe that the processing of your data violates applicable data protection laws, you may contact us. Depending on jurisdiction, you may also have the right to lodge a complaint with the competent data protection authority.
13. Third-Party Services
Sofern auf der Webseite eingebunden, bitte hier konkret aufführen, z. B.:
-
WebHosting: IONOS
-
Analytics: Google Analytics
-
Newsletter: Granum AI FZCO
14. Minors
Our website is not directed at minors. If we become aware that data of minors has been collected without necessary consent, we will delete it in accordance with legal requirements.
15. Changes to this Privacy Policy
We may update this policy to reflect legal, technical, or business changes. The current version available on this website shall apply.
Stand: 01.01.2026