GRATA International always cares of the privacy and security of your personal data, because your confidence is of the highest value to us.
- Firm Profile
- Terms Used
- List of Personal Data
- Personal Data Collection Sources
- Purposes of Personal Data Collection and Processing
- Collection of Personal Data
- Collection and Processing of Personal Data without the Consent of the Subject
- Transfer of Personal Data
- Cross-Border Transfer of Personal Data
- Storage of Personal Data
- Rights of Personal Data Subjects
- Contact Details
- Objectives and Purposes of the Cookies Policy
- Purposes of Using Cookies
- Types of Cookies
- Cookies Management
- Google Analytics
- Contact Details
- Amendments to the Cookies Policy
- GRATA International Association means a global network of independent law firms from around the world that provide legal services under a single brand GRATA International or GRATA
- Company means an individual businessman, legal entity, state or government agency that engages with GRATA International Member, including a client to whom GRATA International Member provides or can provide services;
- Controller means an individual or legal entity, public institution, agency or other structure that independently or together with others determines the purposes and methods of personal data processing
- Personal Data Processing means actions aimed at the accumulation, recording, systematisation, structuring, storage, modification, amendment, use, review, distribution and other transfer, depersonalisation, restoration, grouping or combining, blocking and destruction of personal data
- Personal Data means information related to the personal data subject being identified or identifiable on the basis of such information, and recorded on an electronic, paper and(or) other physical medium. In particular, the personal data include: name, identification number, information on the place of residence or location, online identifier, e-mail address, telephone number, including cellular phone, address and other data of the subject of the personal data;
- Applicable Law means the law applicable in the territory of the state, where the personal data are collected and/or processed;
- Processor means an individual or legal entity, state authority, agency or other authority that processes personal data on behalf of the controller;
- Collection of Personal Data means actions aimed at obtaining of personal data;
- Subject means an individual, to whom the personal data belongs;
- Company Related Party means an individual, who is the founder (participant) of the Company, its employee, or a person serving the company under a civil law contract, as well as another person that the Company interact or may interact with;
- Member means an independent law firm that provides services under GRATA International or GRATA brand in accordance with the applicable laws of its jurisdiction.
GRATA International Association is a global network of independent law firms from around the world that provide legal services under a single brand GRATA International or GRATA. The Association was founded on 23 March 2018 in Zug, Switzerland, and operates according to the Swiss Verein model. All Association Members operate as an associated or integrated office.
GRATA International is the sole Controller of all personal data collected and processed on the website www.gratanet.com. GRATA International works with Processors that provide for the collection, processing, and protection of personal data on behalf of GRATA International in accordance with this Policy, relevant treaties and Applicable Law.
The details of all Association Members and their jurisdictions can be found at www.gratanet.com.
List of Personal Data Collected by GRATA International
GRATA International collects and processes the following categories of personal data.
Principal Data: last name; name; patronymic (if any); date and place of birth; phone number; e-mail; country and city of residence.
Marketing Data: details of requests and subscriptions; last name; name; e-mail; name of the company; jurisdiction details; preferred language and sector of the economy.
Applicant's details: last name; name; patronymic (if any); phone number; e-mail; country and city of residence; track record; education; additional files of the applicant.
Device Details: IP address; Unique Data Item Description (UDID); Cookies; location details; information on the website use, other data related to the device.
Potential Members' Details: name of the company; key contact details; position; phone number; e-mail; location; potential Member's website; additional files of the Member.
GRATA International does not collect or process the special categories of personal data, which include: race and ethnicity; political views; religious and philosophical beliefs; union membership; genetic and biometric data; health, sex, or sexual orientation data.
Personal Data Collection Sources
GRATA International may collect personal data from the following sources:
- from subjects that provide their personal data when interacting with GRATA International website (gratanet.com) in any way, including when subscribing to newsletters, completing feedback forms, sending requests for joining the team or GRATA International Association;
- as a result of using cookies and other technologies for collecting and tracking information;
- public sources;
- state information systems in the procedure and under the conditions provided for by the Applicable Law.
Purposes of Personal Data Collection and Processing
GRATA International collects and processes personal data for the following purposes:
- to provide a Company, which the Subjects are relate to, with the information on the Member's services and the terms of their provision, including to provide business offers, invitations to seminars and other events organised with the participation of GRATA International;
- to provide a Company, which the Subjects are relate to, with information about any changes and trends in the legislation and application thereof, as well as with articles, reviews and other informational and/or analytical materials in the area of law that in GRATA International's opinion can be of the Company's interest;
- to provide a Company, which the subjects are relate to, with other information related to the activities of GRATA International, as well as with any other information that in GRATA International's opinion can be of the Company's interest;
- to provide services to a Company or Company Related Subjects;
- to negotiate with a Company (Company Related Subjects) regarding services provided by the Member to the Company (Company Related Subjects);
- to improve the quality of services provided by the Member to the Company and/or Company Related Subjects;
- for the purposes established by the Applicable Law, in particular, if the collection and processing of personal data is necessary to perform the obligations of the Member provided for by the Applicable Law, to carry out activities of law enforcement agencies, courts and enforcement actions, including to protect the rights and legitimate interests of the Members.
Collection of Personal Data
GRATA International collects personal data through the website in case of the following actions:
- subscribing to receive newsletters or marketing newsletters;
- making requests for services and products of GRATA International;
- sending requests to join a team or GRATA International Association;
- interacting and working with the website using cookies and other technologies for collecting and tracking information on any browser or device;
- using the services provided by GRATA International through the website.
Collection and Processing of Personal Data without the Consent of the Subject
GRATA International collects and processes personal data without the consent of the subject, when such data are required:
- to perform a contract concluded between the Subject and the Member, or if the Member, at the Subject's request, takes the measures necessary to conclude the contract;
- to perform by the Member its obligations under the law;
- to protect the essential interests of the Subject or another individual;
- to protect the rights or legitimate interests of GRATA International or another person, including with the assistance of law enforcement agencies, courts and bailiffs.
- in other cases established by the Applicable Law.
In cases where the Persona Data collection and processing without the consent of the Subject are allowed by the Applicable Law, the Subject may, at any time, request the suspension of such collection and processing until GRATA International demonstrates the legitimacy of interests for which protection the personal data are collected and processed. Personal Data collection and processing using automation tools is allowed.
Transfer of Personal Data
GRATA International may transfer personal data to the following categories of recipients:
- subcontractors and external consultants in order to obtain legal services or any other types of services;
- law enforcement and regulatory authorities.
GRATA International transfers your personal data only when the following conditions are met:
- If there is your consent or any other legal ground for the transfer of personal data;
- When a person, whom the personal data are transferred to, provides for an adequate level of personal data protection and security;
- If the transfer complies with the GDPR requirements, the Applicable Law of the jurisdiction, which the personal data are transferred from or to, as well as other regulatory legal acts that may be applicable in the transfer of personal data.
We also share personal data to establish or protect our legal rights, property or security, or the rights, property or security of others. If you have any questions as to how we transfer your personal data or you want to request copies of regulatory legal acts, corporate rules and other acts on the personal data protection in the country of interest, where GRATA International can transfer the personal data to, please contact us by firstname.lastname@example.org.
Cross-Border Transfer of Personal Data
GRATA International may transfer personal data to the territory of other states according to a court judgement or arbitral award, as well as any decision of the administrative authority of a third country, and/or an international organisation, if (1) such a decision is binding for the member in accordance with the Applicable Law, including applicable international treaties, or (2) such a transfer is permitted by the Applicable Law and is subject to the statutory requirements.
GRATA International may perform the cross-border transfer of personal data for the purposes listed in this Policy, and in the following cases:
- If the personal data transfer is required to perform the contract at the Subject's request or pre-contract measures, as well as to conclude or perform a contract in the interests of the Subject;
- If the personal data transfer is required to file a statement of claim or statement of defense in the interests of the Subject;
- If the transfer is required to protect the vital interests of the Subject, when the Subject physically or legally cannot give its consent;
- The personal data can be transferred from an open register of the European Union designed to provide information to an unlimited number of persons, but only subject to the conditions established by the European Union law.
GRATA International may perform the cross-border transfer of personal data for other purposes and in other cases with the consent of the Subject obtained upon notifying him/her on the possible risks associated with such a transfer.
Storage of Personal Data
GRATA International stores your personal data on the servers provided by Hetzner Online in Falkenstein, Germany. Hentzner Online uses advanced security measures to protect data and complies with the international information security standard ISO/IEC 27001, which establishes information security requirements for the creation, development, and support of the Information Security Management System (ISMS).
GRATA International stores personal data of the website visitors for at least three years from the date of the last visit and in accordance with our obligations under the GDPR or similar legislation worldwide, or for a longer period, if we are required to do so in accordance with our regulatory obligations or obligations to regulatory and law enforcement authorities.
GRATA International stores personal data of clients for at least six years from the date of the last interaction with this client and in accordance with our obligations under GDPR or similar legislation worldwide, or for a longer period, since we are obliged to do so in accordance with our regulatory obligations or obligations to regulatory and law enforcement authorities.
Upon expiry of the above periods, GRATA International will destroy your personal data.
By using the services provided by the Members of GRATA International, you confirm that you have reached the age of 16.
We respect the privacy of children and do not collect, use or disclose the personal data of children under 16 without the consent of their parents or guardians.
If we become aware that the information provided or collected by GRATA International is the personal data of children without prior obtaining the consent of a parent or guardian, we will immediately take measures to delete such personal data.
GRATA International is not liable for damages caused to the Subject as a result of the personal data processing, if such processing did not violate the requirements of the Applicable Law, and if the damage was cased by the processing actions performed at the Subject's direction.
GRATA International would like to send you marketing newsletters and information about our products and services that we think you may like. If you gave your consent to receive marketing newsletters and information, you can always change your preferences, as well as refuse and(or) unsubscribe therefrom.
At any time, you have the right to prohibit GRATA International from contacting you for marketing purposes or transferring your personal data to other GRATA International Members for marketing purposes. If you no longer want to receive marketing newsletters, please contact us by email@example.com.
Rights of Personal Data Subjects
GRATA International would like to make sure that you are fully aware of all rights you have to protect your personal data and that you can enjoy them. Each Personal Data Subject has the following rights:
Right to Rectification. The Subject has the right to request GRATA International to correct inaccurate personal data regarding the Subject or in view of the processing purposes to supplement incomplete personal data, including by providing an additional statement thereon, and GRATA International shall do so without unreasonable delay.
Right to Erasure. The Subject has the right to request GRATA International to erase personal data concerning the Subject and GRATA International shall do so without unreasonable delay. Besides, GRATA International undertakes to erase personal data without undue delay, unless GRATA International is required to retain personal data in order to perform legal obligations or to file, execute or defend on legal claims.
Right to Restrict Processing. The Subject has the right to request GRATA International to restrict processing of personal data concerning the Subject, if the following conditions take place:
- The Subject disputes the personal data accuracy for a period allowing GRATA International to verify the personal data accuracy;
- Processing of personal data is illegal, while the Subject opposes the personal data deletion and requires restrictions on the personal data use;
- GRATA International has achieved the purposes of personal data processing and they are no longer required, however, they are necessary for the Personal Data Subject to file, execute or defend on legal claims;
- The Personal Data Subject was opposed to the processing until it was verified that the legal grounds of the Controller are more important than those of the Subject.
Right to Data Portability. The Subject has the right to request GRATA International to transfer the personal data concerning the Subject in a structured, universal and machine-readable format to another Controller, while GRATA International does not interfere with such a transfer if:
- Processing is based on a consent or a contract;
- Processing is carried out using automation tools.
Right to Object to Processing. The Subject has the right at any time to object to the processing of personal data by GRATA International for personal reasons, if:
- the processing is required to perform tasks in the public interest or in the exercise by GRATA International of their legal and official authority;
- the processing is required to comply with the legitimate interests of GRATA International or a third party, unless the interests or fundamental rights and freedoms of the Personal Data Subject, for which the protection of personal data is required, are more important than such interests, especially if the Personal Data Subject is a child;
- the processing is based on profiling according to the above provisions.
GRATA International will not continue processing personal data, unless GRATA International provides for sound legal grounds for processing that are more important than the interests, rights and freedoms of the Personal Data Subject, unless it is required o file, execute or defend on legal claims.
Right to Appeal. The Subject has the right to appeal against GRATA International's actions or omission to public authorities in the procedure established by the Applicable Law, including the Supervisory Authority established in the territory of the European Union to the extent permitted by the Applicable Law.
Consent Withdrawal. If the Subject gives his/her consent to the processing of personal data, the Subject may withdraw the consent at any time free of charge. This applies to cases where the Subject wants to refuse receiving marketing newsletters from us.
If you make a request, we will respond you within a month. If you want to exercise any of these rights, please contact us by: firstname.lastname@example.org.
Last updated: April 2020
Objectives and Purposes of the Cookies Policy
This Cookies Policy is designed to clarify GRATA International's approach to the use of cookie technology and other technologies for collecting and tracking information in any form of interaction with the website: www.gratanet.com.
Cookies are small pieces of data sent from a website and stored by a web browser on a user's device and which are used to remember information, preferences and user settings when using the website. Cookie technology is used to enhance an individual experience and improve usability when working with a website and using all its functions and elements. More information about cookie technology can be found at: www.allaboutcookies.org
Purposes of Using Cookies
GRATA International uses cookie technology and other identical technologies to:
- ensure website navigation;
- generate summary statistics on the website use;
- share content with others;
- improve your experience of using the website and digital services;
- ensure analytics and data research for improvement of the quality of services and products on the website;
- store individual settings and personal preferences to improve usability and experience of using the website;
- address errors and troubleshoot to ensure the website functionality and optimality.
Types of Cookies
GRATA International uses the following cookies in the website operation:
- Functional cookies used for storing personal information, individual users' settings and preferences to improve individual experience and quality, as well as to simplify the work with the website;
- Advertising cookies used to collect information about website visiting, interests, content viewed, links clicked with the purpose of targeting to send personalised ads to users;
- Analytical and working cookies used to recognise and count the number of users, collect statistics on the website use, improve the quality of our services and products;
- Session cookies used temporarily while using the website and deleted when the session is closed.
You can disable the cookies transmission by choosing the “opt-out” in the proposed form, or through your browser settings:
If you disable cookies, the website may work incorrectly!
This information helps us ensuring maximum compatibility based on your interests and preferences, analyse the website traffic and page views. All the information so collected is aimed solely at ensuring the usability of the website, as well as improving the way of content delivery.
Amendments to the Cookies Policy
Last updated: April 2020