This Privacy Policy explains how personal data is processed when users visit the website, register or use the connected portals.
Controller
GRAUPNER Holding DIFC
Unit GA 00-SZ-L1-RT-208, Level 1
Gate Avenue - South Zone
Dubai International Financial Centre
Dubai, United Arab Emirates
Contact for privacy requests: support@graupner.group
Data processed
Depending on the service used, we process contact and address details, registration and contract data, Capital Partner or investor assignments, broker, account and transaction references, billing and bank data, and technical data such as IP address, timestamps, browser information, cookies and security logs.
Purposes and legal bases
Data is processed to provide the website and portals, handle registrations, verify email addresses, assign investors, accounts and Capital Partners, take steps prior to a contract and perform contracts, process billing, prevent fraud and misuse, secure systems, analyse errors and comply with legal obligations. Legal bases include steps prior to a contract and contract performance, consent, legal obligations and legitimate interests in secure and orderly operations.
Recipients
Data is shared only where necessary for the relevant purpose. Recipients may include the selected broker, technical hosting and email providers, payment or banking providers, professional advisers and competent authorities. Service providers are contractually bound where required.
International processing
Because brokers and technical providers may operate in different countries, data may be processed outside the user's country of residence. Required contractual, technical and organisational safeguards are applied.
Retention
Data is retained only for as long as needed for the relevant purpose, the business relationship, the defence of legal claims or statutory retention duties. Data that is no longer required is deleted or anonymised.
Cookies and local storage
Technically necessary cookies and browser storage may be used for sessions, security, language, display preferences and correct attribution to a Capital Partner structure. Without these functions, parts of the service may be restricted.
Data subject rights
Subject to applicable law, data subjects may request access, correction, deletion, restriction, portability or object to processing and may withdraw consent with future effect. A right to lodge a complaint with a competent supervisory authority may also apply. Requests should be sent to support@graupner.group.
Security and updates
Appropriate technical and organisational measures are used to protect data. Verification and resume links use random, time-limited tokens; passwords are stored only as secure hashes. Completely risk-free transmission over the internet cannot be guaranteed. This policy may be updated when the service or legal requirements change.