Privacy Policy

1. Controller

The controller responsible for processing personal data on grabem.de is:

Grabe Group OÜ, Sepapaja tn 6, Lasnamäe District, 15551 Tallinn, Harju County, Estonia
Managing Director: Angel Yulo
Email: info@grabem.de · Phone / WhatsApp: +49 1573 2294065

Grabem is a brand of Grabe Group OÜ.

2. General

We take the protection of your personal data seriously and process it confidentially and in accordance with the General Data Protection Regulation (GDPR). This policy explains what data we collect when you visit grabem.de or contact us, and what we use it for.

3. Hosting and server log files

This website is hosted by Hostinger. When you visit the site, technical information is processed automatically, such as IP address, browser type, operating system, pages visited, date and time. This is necessary to provide and secure the website (Art. 6(1)(f) GDPR).

4. Cookies and analytics

This website does not set any cookies and does not use any analytics or tracking services. Fonts are loaded locally from our own server; no connection is made to third-party servers (e.g. Google Fonts).

5. Contact form and email

If you contact us via the contact form or by email, we process your details to reply to your enquiry and, where appropriate, arrange a consultation. In the contact form, these are your name, email address and message (required) and, optionally, your phone number and company or industry. We also store the time of your enquiry and the language and page from which you sent the form.

Your enquiry is stored in our website's database, which only we can access, and forwarded by email to info@grabem.de. The website and the mailbox are run by our hosting provider Hostinger (see section 3). The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Enquiries stored via the form are deleted automatically after six months; emails are deleted once they are no longer needed to handle your enquiry. This does not affect data we must keep longer under statutory retention obligations (e.g. if your enquiry leads to an order).

To protect against spam and abuse, the form uses a field that is invisible to humans, a minimum completion time and a limit on the number of enquiries. For this we store an encrypted hash of your IP address for ten minutes, not the IP address itself. The legal basis is our legitimate interest in operating the website securely (Art. 6(1)(f) GDPR). The form sets no cookies and uses no third-party services (e.g. reCAPTCHA).

The required fields are needed to handle your enquiry. Alternatively, you can reach us directly by email, phone or WhatsApp.

6. Contact via WhatsApp

You can contact us via WhatsApp, a service of WhatsApp Ireland Limited (Meta). Your phone number, profile name and messages are processed. Data may be transferred to third countries, in particular the USA. Using WhatsApp is optional; you can also reach us by email or via the contact form.

7. Use of software and AI services

We use carefully selected software and AI services to handle enquiries and deliver our services. Where we process personal data on behalf of our clients (e.g. emails or calendars), we do so under a separate data processing agreement (Art. 28 GDPR).

We may use an AI assistant service (Grok Bot) to read and summarise enquiries received in our mailbox for internal processing. The legal basis is our legitimate interest in handling your enquiry promptly (Art. 6(1)(f) GDPR). Data may be transferred to third countries, in particular the USA.

8. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), and the right to withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. To exercise your rights, contact info@grabem.de.

9. Data security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. However, no transmission over the internet can be guaranteed to be completely secure.

10. Links to other websites

Our website may contain links to third-party websites. We are not responsible for their content or privacy practices.

11. Changes

We will update this privacy policy when our website or legal requirements change. Last updated: October 2026