Privacy policy

1. Controller

The controller responsible for data processing on this website is:
Grabe Group OÜ
Sepapaja tn 6
15551 Tallinn
Estonia
Represented by: Angel Alberto Yulo
Phone: +49 1573 229 4065
Email: info@grabet.eu

2. Overview

We only process personal data to the extent necessary to operate this website, handle your enquiries and prepare or perform contracts. We do not use analytics or marketing services, do not embed social media plugins and do not load fonts from external servers.

3. Hosting

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The host processes all data generated when the website is accessed on our behalf, based on a data processing agreement pursuant to Art. 28 GDPR. Where data is transferred to countries outside the European Economic Area, this only takes place in compliance with Art. 44 et seq. GDPR, in particular on the basis of the European Commission’s standard contractual clauses.

4. Server log files

When you access this website, information transmitted by your browser is collected automatically: IP address, date and time of access, page or file requested, referrer URL, amount of data transferred, status code, browser type and operating system. This processing serves to deliver the website and to ensure its security and stability. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. Log files are stored for a limited period and then deleted, unless they are needed to investigate a security incident.

5. Contact form and email

If you contact us via the contact form or by email, we process the data you provide (name, email address and your message, and optionally company, phone number and service of interest) in order to handle your enquiry. The form data is sent by email to our mailbox info@grabet.eu, which is also operated by Hostinger; it is not additionally stored in the website’s database.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the preparation or performance of a contract, and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in responding to enquiries. Confirming the privacy notice in the form ensures that you have read this information before submitting.

We delete your data as soon as it is no longer required to handle your enquiry, unless statutory retention obligations – for example under commercial or tax law – apply.

6. Cookies and local storage

This website only uses technically necessary cookies and storage:

• pll_language (cookie): stores the selected language so that the website is displayed in the right language; stored for up to one year.
• gt_cookie_ack (your browser’s local storage): records that you have closed the cookie notice; kept until you delete it in your browser.

The legal basis is Section 25(2) no. 2 of the German TDDDG or the corresponding provisions of your country of residence, and Art. 6(1)(f) GDPR. We do not use analytics, tracking or marketing cookies. You can delete cookies and locally stored data at any time in your browser settings.

7. Fonts and external content

This website uses the system fonts available on your device. No fonts, scripts or other content are loaded from third-party servers such as Google. External links only open third-party websites when you click on them; the respective provider is responsible for their data processing.

8. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). Where processing is based on your consent, you can withdraw it at any time with effect for the future. To exercise your rights, simply send a message to info@grabet.eu.

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you can object to the processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work or the place of the alleged infringement. The authority responsible for us is the Estonian Data Protection Inspectorate: Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, Estonia, www.aki.ee.

11. Obligation to provide data and automated decisions

You are not legally or contractually obliged to provide your data. However, without the mandatory fields we cannot process your enquiry via the form. No automated decision-making, including profiling, takes place.

12. Status

Last updated: October 2026. We will update this privacy policy when the website or the legal requirements change.