Privacy Policy

Effective Date: March 2026
Last Updated: March 2026

1. Introduction

Graham Miranda UG (haftungsbeschränkt) ("we", "us", or "our") is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services, in accordance with the Datenschutz-Grundverordnung (DSGVO) and applicable German data protection laws.

Controller Details:
Graham Miranda UG (haftungsbeschränkt)
Hasselfelder Str. 23
38889 Blankenburg (Harz)
Germany
Email: graham@grahammiranda.com
Phone: +49 156-7839-7267

2. Data We Collect

2.1 Personal Data

We may collect the following types of personal data:

  • Contact Information: Name, email address, phone number, company name, postal address
  • Communication Data: Information you provide when contacting us via forms, email, or phone
  • Technical Data: IP address, browser type, operating system, device information, referring URLs
  • Usage Data: Pages visited, time spent on website, click patterns, and other analytics

2.2 Data We Do Not Intentionally Collect

We do not intentionally collect special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless you voluntarily provide it through our contact forms.

3. How We Use Your Data

We use your personal data for the following purposes:

  • To provide and maintain our services
  • To respond to your inquiries and fulfill your requests
  • To send you information about our services (with your consent)
  • To improve our website and services
  • To comply with legal obligations
  • To protect against fraud and unauthorized access

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under DSGVO:

  • Contract Performance (Art. 6(1)(b)): Processing necessary to provide services you have requested
  • Consent (Art. 6(1)(a)): When you have given clear consent for specific processing activities
  • Legitimate Interests (Art. 6(1)(f)): Our legitimate business interests, such as improving services, provided these are not overridden by your rights
  • Legal Obligation (Art. 6(1)(c)): When processing is required by applicable law

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with:

  • Service Providers: Third-party vendors who assist us in operating our website and business (hosting, analytics, email delivery)
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

All third-party processors are contractually bound to protect your data and process it only as instructed by us.

6. International Data Transfers

If we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Typically:

  • Contact form submissions: Retained for 2 years
  • Business correspondence: Retained for 3 years
  • Technical usage data: Retained for 1 year

8. Your Rights Under DSGVO

You have the following rights regarding your personal data:

  • Right of Access (Art. 15): Request a copy of your personal data
  • Right to Rectification (Art. 16): Request correction of inaccurate data
  • Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
  • Right to Restriction (Art. 18): Request limitation of processing
  • Right to Data Portability (Art. 20): Receive your data in a structured format
  • Right to Object (Art. 21): Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at graham@grahammiranda.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training.

10. Cookies and Tracking

Our website may use cookies and similar tracking technologies. Cookies are small text files stored on your device. We use:

  • Essential Cookies: Required for basic website functionality
  • Analytics Cookies: To understand how visitors use our site (e.g., Google Analytics)

You can control cookie settings through your browser preferences. Disabling cookies may affect website functionality.

11. Third-Party Links

Our website may contain links to external websites not operated by us. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies.

12. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this privacy policy periodically. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy regularly.

14. Contact Us

For questions about this privacy policy or to exercise your data protection rights:

Graham Miranda UG (haftungsbeschränkt)
Hasselfelder Str. 23
38889 Blankenburg (Harz)
Germany
Email: graham@grahammiranda.com
Phone: +49 156-7839-7267

15. Right to Lodge a Complaint

If you believe we have violated your data protection rights, you have the right to lodge a complaint with the competent supervisory authority:

Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany
Phone: +49 511 120-4500

Last updated: March 2026