Gartner® Hype Cycle™ for Retail Technologies, 2024
Read the report
In GreyOrange, we care deeply about the privacy and security of your data. This Privacy Policy will help you understand what data we collect, what we use it for and how you can exercise your rights.
We abide among others by the following principles while processing your data:
This Privacy Policy applies to services offered through our websites and to services that we provide in connection with our products. Our website contains links to other websites. Once redirected to a website outside of our domains, this Policy is no longer applicable.
Unless you decide to contact us, you can browse our websites without giving away any information about you other than your IP address. Our websites use cookies to collect anonymous and aggregated statistical data about users’ visits on our websites and to advertise our products online.
Once you decide to contact us you will be asked to provide your personal details such as your full name, the name and characteristics of the organization that you represent, your contact details. Depending on the context, we will use this data either to communicate with you or to provide our services to you and pursue other legitimate goals (e.g. inform you about our products).
You have a right to access your data, a right to have information about you corrected or deleted. If processing of your data is based on consent, you also have a right to withdraw it at any given time. Withdrawal of your consent will not influence the lawfulness of processing based on this consent before its withdrawal. We will not use your data for the purposes of automated decision-making or profiling. You can find more information about your rights in the What are your rights? section.
Unless you decide to contact us, you can browse our websites without giving away any information about you other than your IP address. Recording of your IP address is necessary for technical purposes related to administration of our servers. We will also use it to collect general, statistical information about you (e.g. to get information about the region from which you connect with our websites). We will not be able to identify you based only on your IP address. Our websites support the so-called ‘cookies’, which are small files containing information saved to your hard drive. More about cookies you can read in section “cookies” below.
Although you can use our website without giving away information about you, once you decide to contact us you will be asked to provide your personal details such as:
Depending on the type of your question, we will use this data to communicate with you, prepare quotations for you and answer any other questions that you may have. If you are not our client and decide not to become one, we will delete your data once your matter is solved and information about you is no longer needed.
Additionally, we will also process your personal data to pursue our legitimate goals such as providing you with vital information about our products and services, keep your contact details for marketing purposes, send you newsletter about our products and services, send you invitations for certain events or send you some occasional greetings and recognitions. Once you will submit your message through contact form, we will introduce your personal data to our marketing database and keep them for the marketing purposes mentioned above. We will delete your data contained in our marketing database promptly upon your request to do so. Notwithstanding the above, your personal data will be processed for no longer than 3 years from the date of contact with us.
In this regard your personal data will be processed based on Article 6(1) point (f) of GDPR, where our legitimate goal is direct marketing of our services and products.
You are not obliged to give us any of the information above, but if you decide not to give it to us or provide us with false or incorrect information we may be unable to respond to your message or to contact you in relation to our products and services.
If you decide to conclude and agreement with us and establish an account on our website, we may process your information included in your personal profile on our website. The profile data may include:
The above profile data may be processed for the purposes of proper performance of a contract between you and us, support you and informing you about the vital information about our products and services. In this regard your personal data will be processed based on Article 6(1) point (b) of GDPR. Your personal data will be processed for the duration of the contract and for the period of limitation of public law claims, but not longer than for a period of 5 years from the date of the contract termination.
You are not obliged to give us any of the information above, but if you decide not to give it to us or provide us with false or incorrect information we may be unable to properly perform our duties under the contract.
Cookies may be either “persistent” cookies or “session” cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
We use cookies for the following purposes:
What is more, our service providers use cookies and those cookies may be stored on your computer when you visit our website.
How to manage cookies?
Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can however obtain up-to-date information about blocking and deleting cookies via these links:
(a) https://support.google.com/chrome/answer/95647?hl=en (Chrome);
(b) https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (Firefox);
(c) http://www.opera.com/help/tutorials/security/cookies/ (Opera);
(d) https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);
(e) https://support.apple.com/kb/PH21411 (Safari); and
(f) https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy (Edge).
Blocking all cookies will have a negative impact upon the usability of many websites.
If you block cookies, you will not be able to use all the features on our website.
This website is owned and managed by GreyOrange India Pvt Ltd. We’ve appointed our representative in European Union for the matters concerning processing of personal data of citizens of European Union. Our representative is GreyOrange GmbH located in Nürnberg (Änderung zur Geschäftsanschrift: c/o Rödl & Partner, Äußere Sulzbacher Straße 100, 90491 Nürnberg, Germany) and you may always contact them through the following e-mail address: info@greyorange.com.
In order to appropriately perform our services involving your personal data, we cooperate with our affiliated companies in Germany (GreyOrange GmbH located in Änderung zur Geschäftsanschrift: c/o Rödl & Partner, Äußere Sulzbacher Straße 100, 90491 Nürnberg, Germany), United States (GreyOrange Inc. located in Atlanta, 660 Hembree Parkway Suite 120 Roswell, GA 30076) and India (Grey Orange India Pvt. Ltd., located at Orient Bestech Business Tower, NH-8, Sector 34, Gurugram-122004).
In accordance with article 13 and 14 of the regulation (EU) 2016/679 of the European Parliament of the Council of 27 April 2016 on the protection of natural persons with regard of the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we hereby inform that:
1) controller of your personal data will be:
a) GreyOrange India Pvt Ltd a company under the laws of India, with its registered seat office in India, Orient Bestech Business Tower, 2nd Floor, NH8, Sector 34, Block A, Gurugram, Haryana 122004; the European Commission hasn’t issued an adequacy decision in relation to India country;
b) GreyOrange Inc. a company under the laws of the United States of America, with its registered seat office in the United States of America, 660 Hembree Parkway Suite 120 Roswell, GA 30076; the European Commission hasn’t issued an adequacy decision in relation to this company in the United States – it is not covered by the Privacy Shield framework;
c) GreyOrange GmbH with its registered seat office in Änderung zur Geschäftsanschrift: c/o Rödl & Partner, Äußere Sulzbacher Straße 100, 90491 Nürnberg;
the controller’s representative in European Union in relation to GreyOrange India Pvt Ltd and GreyOrange Inc. is GreyOrange GmbH with its seat office in Laatzen, Bussardweg 31, 30880 Laatzen, Germany; Moreover, we use help of our sales partners located in Europe (companies in Germany, Great Britain, Netherlands and Israel).
In any case when personal data are transferred outside the European Union to the third countries, they are transferred to those countries based on relevant data transfer agreements, consistent with standard data protection clauses adopted by the Commission Decision of 27 December 2004, amending Decision 2001/497/EC as regards the introduction of an alternative set of standard contractual clauses for the transfer of personal data to third countries.
You have the right to access the information that we have on you. You can do this by e-mail through this e-mail address: info@greyorange.com. We will make sure to provide you with a copy of the data we process about you. In order to comply with your request, we may ask you to give us some additional information that we will use to verify your identity. If you fail to provide such information and the information that you have already given to us is not sufficient to identify you, we may refuse to provide you with information.
We will fulfil your request by sending your copy electronically, unless the request expressly specifies a different method. For any subsequent access request, we may charge you with an administrative fee.
If you believe that the information we have about you is incorrect, you are welcome to contact us so we can update it and keep your data accurate.
We will automatically delete information about you after it is no longer needed for the purposes it was collected. If at any point you wish for us to delete information about you, you can do this by contacting us through this e-mail address: info@greyorange.com or requesting it here.
You have the right to obtain from us restriction of processing where one of the following applies:
You may submit your claim in this regard by contacting us through this e-mail address: info@greyorange.com.
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data concerning which is based on point (e) or (f) of Article 6(1) of GDPR. In such a case we will no longer process the personal data unless we will be able to demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
As far as we process your personal data for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, to the extent that it is related to such direct marketing.
You may submit your objection in this regard by contacting us through this e-mail address: info@greyorange.com.
If processing of your data is based on consent, you have the right to withdraw your consent at any time. If you at any point wish to withdraw your consent, you can do this by contacting us through this e-mail address: info@greyorange.com. Remember that withdrawal of consent will not affect the lawfulness of processing based on this consent before its withdrawal.
We do not use any information provided by you for the purposes of automated decision-making, including profiling.
We guarantee that all your personal information is protected, and that we will not make this information available to third parties in cases different than those specified below, unless you give us a permission to do so or unless such disclosure is necessary to comply with a legal obligation that is imposed on us.
We will not disclose your data to any entity located in countries outside of the European Economic Area unless appropriate data protection standards are fulfilled. We may disclose your personal data to any member of our group of companies (this means our subsidiaries, our ultimate holding company and all its subsidiaries) insofar as reasonably necessary for the purposes, and on the legal bases, set out in this policy. Information about our group of companies can be found here.
We may share information that you provided us with:
In any case if we will be entrusting processing of your personal data to any third party, in particular in relation to our sales partners or service providers, we will do so based on appropriate agreement on entrustment of processing of personal data.
We constantly review our Privacy Policy and strive towards making it better. That is why we reserve the right to amend this Privacy Policy from time to time. Each amendment to the Privacy Policy will be signed with the date of publishing and will be effective since that date.
If you have any questions or doubts related to this Privacy Policy or want to know more about how we protect your personal data or your rights, you may contact us through this e-mail address: info@greyorange.com.
We hope that we will be able to answer all your questions and settle all disputes amicably. Nonetheless, if you think that your rights were not observed or that your privacy was harmed, you can always lodge a complaint with the German Data Protection Authority which supervises our operations through our representative – GreyOrange GmbH.
GreyOrange India is a private limited company (GreyOrange India Pvt Ltd) established under the laws of India. You can find our full contact details here.
Effective date: 27.04.2020