Privacy Policy – GRNTS.APP

Last updated: 28 October 2025

This Privacy Policy describes how GRNTS.APP (operated by Quantify Group B.V.) collects, uses, and shares personal data in compliance with the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller is:

Quantify Group B.V.
The Hague Tech, Waldorpstraat 5, 2521 CA, The Hague, The Netherlands
Chamber of Commerce: 82482098
Email: info@grnts.app

2. Personal Data We Collect

We may collect the following types of personal data:

• Contact & Business Information: name, email address, phone number, company name, Chamber of Commerce number, and details about your business activities.
• Application Data: information required for subsidy applications, such as project details, financial data, and employee information.
• Technical Data: IP address, browser type, device information, and usage data collected via cookies and server logs.
• Communication Data: correspondence, feedback, and information provided when you contact us.

3. Purposes and Legal Bases for Processing

We process your data for the following purposes:

• To provide our Services: preparing and submitting subsidy applications, delivering reports, and providing advice.
  Legal basis: Performance of a contract.
• To improve our Platform: analysing usage patterns to enhance user experience and functionality.
  Legal basis: Legitimate interest.
• For communication and support: responding to inquiries and sending service-related updates.
  Legal basis: Performance of a contract; Legitimate interest.
• For marketing (with consent): sending newsletters or promotional offers if you have opted in.
  Legal basis: Consent.
• To ensure security and compliance: protecting our platform and fulfilling legal obligations.
  Legal basis: Legal obligation; Legitimate interest.

4. Data Sharing and Third Parties

We only share your data when necessary and in accordance with the law:

• Subsidy Providers: Your data will be shared with government agencies or other entities as required for the subsidy application.
• Service Providers: We use third-party services for hosting, analytics (Google Analytics), and payment processing. These processors are bound by data processing agreements.
• Legal Requirements: We may disclose data if required by law or to protect our legal rights.

We never sell your personal data to third parties.

5. International Data Transfers

If we transfer data outside the European Economic Area (EEA), we ensure it is protected through appropriate safeguards, such as Standard Contractual Clauses (SCCs).

6. Data Security

We implement technical and organisational measures (e.g., encryption, access controls) to protect your data against loss, theft, and unauthorised access.

7. Data Retention

We retain personal data no longer than necessary for the purposes for which it was collected, or as required by law (e.g., administrative obligations). After this period, your data will be securely deleted or anonymised.

8. Your Rights under the GDPR

You have the right to:

• Access your personal data.
• Rectify incorrect information.
• Erase your data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time (for consent-based processing).

To exercise your rights, please contact us at info@grnts.app. We will respond within one month.

9. Cookies

Our website uses cookies. For more details, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be available on our website.

11. Complaints

If you have a complaint, please contact us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).