Privacy Policy

1. Data Controller

The Controller of personal data is: Gran-Exim LLC ul. Kozlaniuk 7, 79014 Lviv, Ukraine Email: info@granexim.com .

The Controller processes data in accordance with the provisions of the GDPR (General Data Protection Regulation) and maintains appropriate security measures.

2. Scope of Processed Data

We process personal data that you provide voluntarily, in particular:

First and last name
Email address
Phone number
Content of the message

In addition, when using the website, technical data is automatically collected, such as:

IP address
Browser type
Statistical data regarding website traffic
Cookies and marketing identifiers

3. Purposes of Data Processing

We process your data for the following purposes:

Responding to inquiries sent via the contact form
Processing orders and quotation requests
Conducting statistics and analytics (e.g., Google Analytics)
Carrying out marketing activities (e.g., Google Ads)

4. Legal Basis

Data is processed based on:

Your consent (Art. 6 sec. 1 lit. a GDPR)
Performance of a contract or pre-contractual measures (Art. 6 sec. 1 lit. b GDPR)
The legitimate interests of the Controller (Art. 6 sec. 1 lit. f GDPR)

5. Voluntary Provision of Data

The provision of personal data is voluntary, however, the lack of it may prevent:

Answering your inquiry
Preparing an offer
Executing an order

6. Cookies

Our website uses cookies for the purpose of:

Ensuring the proper operation of the service
Analyzing website traffic
Personalizing advertising content

You can manage your cookie consents using the banner or browser settings.

7. Data Sharing

Data may be transferred to entities that support us in the operation of the website and the provision of services, including:

Hosting providers
Analytical providers (Google)
Advertising providers (Google Ads)
Courier and transport companies (in the case of orders).

Every data processor acts on the basis of a data processing agreement and in accordance with the GDPR.

8. Transfer of Data Outside the European Economic Area (EEA)

The Controller is based in Ukraine, therefore personal data is transferred to a third country. The transfer of data outside the EEA takes place in accordance with the provisions of the GDPR – based on Standard Contractual Clauses (SCC) approved by the European Commission, which ensure an adequate level of data protection.

9. Your Rights

In accordance with the GDPR, you have the right to:

Access your data
Rectify your data
Erase your data (right to be forgotten)
Restrict processing
Data portability
Object to processing
Withdraw consent at any time

10. Data Retention Period

We store data:

for the period necessary to fulfill the inquiry or contract
in the case of data processed based on consent – until its withdrawal
statistical and technical data – in accordance with the policies of the providers (e.g., Google)

11. Contact

For matters concerning your personal data, you can contact us at the email address: [info@granexim.com].