Privacy Policy

Graham Miranda UG (haftungsbeschränkt)
Hasselfelder Str. 23
38889 Blankenburg (Harz), Germany

1. Introduction

Graham Miranda UG (hereinafter "we", "us", or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at lehre.grahammiranda.com (the "Site") and use our services.

We are responsible for the processing of your personal data. If you have any questions about this Privacy Policy or our data protection practices, please contact us at graham@grahammiranda.com.

2. Data We Collect

We may collect and process the following categories of personal data:

Contact information (name, email address, phone number, company name) when you fill out our contact form or communicate with us directly.
Technical data (IP address, browser type and version, operating system, referring website) collected automatically when you visit our Site.
Usage data (pages visited, time spent on pages, links clicked) collected via cookies and analytics tools.
Service-related data (IT infrastructure information, support ticket contents) collected when you engage our services.

3. How We Use Your Data

We use your personal data for the following purposes:

To respond to your enquiries and provide requested information about our services.
To deliver contracted IT services and manage our client relationship.
To send you service-related communications (e.g., support updates, invoices).
To improve our website and services based on usage patterns.
To comply with legal obligations (e.g., tax record-keeping, regulatory reporting).
To send you marketing communications about our services, where you have consented to receive them.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

Contract performance: Processing necessary to provide services you have requested under a contract with us.
Legitimate interests: Processing for our legitimate business interests (e.g., improving services, basic analytics) that do not outweigh your rights.
Consent: Processing where you have given explicit consent (e.g., marketing emails).
Legal obligations: Processing necessary to comply with applicable laws and regulations.

5. Data Sharing and Transfers

We do not sell your personal data. We may share your data with:

Service providers who assist us in operating our business (e.g., cloud hosting providers, email delivery services). These providers are contractually bound to process data only on our instructions.
Legal and regulatory authorities where required by applicable law or to protect our legal rights.
Professional advisors (lawyers, accountants) under professional secrecy obligations.

Where we transfer data to countries outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

6. Cookies and Tracking

Our website uses cookies and similar technologies. Cookies are small text files stored on your device. We use:

Essential cookies: Required for basic site functionality (e.g., navigation, secure areas). These cannot be disabled.
Analytics cookies: Help us understand how visitors use our site. We use this information to improve the user experience.
Marketing cookies: Used to track visitors across websites for advertising purposes (only where consent has been given).

You can manage your cookie preferences through our cookie consent banner or your browser settings.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Contact form enquiries are retained for a maximum of 2 years. Client service data is retained for the duration of the contractual relationship plus any legally required retention period.

8. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

Right of access: Request a copy of your personal data.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure: Request deletion of your data (subject to legal retention requirements).
Right to restrict processing: Request limitation of processing in certain circumstances.
Right to data portability: Receive your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests.
Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at graham@grahammiranda.com. We will respond within one month. You also have the right to lodge a complaint with the competent supervisory authority (in Germany: the Datenschutzbeauftragter of your federal state).

9. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection.

10. Third-Party Links

Our website may contain links to external websites operated by third parties. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this Policy periodically.

12. Contact

For any questions about this Privacy Policy or our data protection practices, please contact:

Graham Miranda UG (haftungsbeschränkt)
Hasselfelder Str. 23
38889 Blankenburg (Harz), Germany
Email: graham@grahammiranda.com
Phone: +49 156-7839-7267

Last updated: March 2025