Privacy Notice

Last updated: 21 July 2026

Granovex Group Limited respects the privacy of visitors to its website and of individuals who contact us. This Privacy Notice explains how we collect, use, store and protect personal data in connection with this website and our corporate communications.

1. Who we are

The controller responsible for the processing of personal data described in this Privacy Notice is:

Granovex Group Limited
A company incorporated and registered in the Republic of Cyprus

Registered office:
Themistokli Dervi, 41
HAWAII NICOSIA TOWER
8th floor, Flat/Office 806-807
1066, Nicosia
CYPRUS

Company registration number: ΗΕ 473544

Operational management: The Netherlands

Website: granovex.com

Privacy and data-protection enquiries: info@granovex.com

Granovex Group Limited is referred to in this Privacy Notice as “Granovex”, “we”, “us” or “our”.

2. Scope of this Privacy Notice

This Privacy Notice applies to personal data collected through:

  • the Granovex website;
  • the Enquiries form;
  • direct email or telephone communications resulting from a website enquiry;
  • technical and security processes required to operate and protect the website.

This Privacy Notice does not apply to third-party websites that may be linked from our website.

3. Personal data we collect
Information you provide to us

When you submit an enquiry, we may collect:

  • your full name;
  • the name of your company or organisation;
  • your business email address;
  • your telephone number;
  • your country;
  • the nature of your enquiry;
  • the information contained in your message;
  • any further information you choose to provide during subsequent communications.

Please do not submit confidential, price-sensitive, legally privileged or commercially sensitive documentation through the initial website enquiry form.

Technical information

When you visit our website, certain technical information may be processed automatically. This may include:

  • IP address;
  • browser and device type;
  • operating system;
  • date and time of access;
  • pages requested;
  • referral information;
  • website security and error logs.

This information is used primarily to operate, secure and maintain the website.

Cookies and similar technologies

Our website may use cookies and similar technologies for essential website functions and, where applicable, for preferences, statistics or external services.

Non-essential cookies will only be used where the required consent has been obtained.

Further information is available in our Cookie Policy. Visitors can also review or change their cookie preferences through the cookie settings available on the website.

4. Why we use personal data

We may process personal data for the following purposes.

To assess and respond to enquiries

We use the information submitted through the Enquiries form to understand the nature of the request, conduct an initial assessment and respond where appropriate.

The legal basis is:

  • taking steps at the request of an individual before potentially entering into a contract; and/or
  • our legitimate interest in conducting and managing professional business communications.

Submitting an enquiry does not create a contractual relationship or oblige Granovex to respond, enter into discussions or accept a proposed transaction.

To evaluate potential business relationships

Where an enquiry develops into a potential commercial relationship, we may use the information to evaluate the opportunity, identify the parties involved and determine whether further discussions are appropriate.

The legal basis is our legitimate business interest and, where applicable, taking steps before entering into a contract.

Any formal counterparty onboarding, KYC, sanctions or compliance process will be subject to additional information and documentation requirements.

To operate and secure the website

Technical data may be processed to:

  • maintain website functionality;
  • prevent abuse, spam and unauthorised access;
  • investigate errors or security incidents;
  • protect our systems and communications.

The legal basis is our legitimate interest in maintaining a secure and reliable corporate website.

To comply with legal obligations

We may process or retain information where necessary to comply with applicable laws, regulations, court orders, corporate record-keeping requirements or requests from competent authorities.

The legal basis is compliance with a legal obligation.

Website statistics or optional services

Where the website uses non-essential statistics, embedded content or other optional services, such processing will be based on consent where consent is legally required.

Consent can be withdrawn through the cookie settings.

5. Who may receive personal data

Access to personal data is limited to persons and service providers who reasonably require it for the purposes described in this Privacy Notice.

Personal data may be shared with:

  • authorised representatives and personnel of Granovex;
  • website hosting and technical-support providers;
  • email and communications providers;
  • cybersecurity and spam-protection providers;
  • professional advisers, including legal, accounting and compliance advisers;
  • competent public authorities where disclosure is legally required;
  • potential transaction parties, but only where appropriate, lawful and necessary.

Service providers processing personal data on our behalf are expected to process it only in accordance with our instructions and applicable data-protection requirements.

We do not sell personal data.

6. International data transfers

Granovex is established in Cyprus and its operational management takes place from the Netherlands. Both countries are members of the European Union and apply the General Data Protection Regulation.

Some technical or communications service providers may process data in other countries. Where personal data is transferred outside the European Economic Area, Granovex will seek to ensure that an appropriate legal transfer mechanism and suitable safeguards are in place, where required.

Such safeguards may include:

  • a European Commission adequacy decision;
  • Standard Contractual Clauses approved by the European Commission; or
  • another lawful transfer mechanism recognised under applicable data-protection law.
7. How long we retain personal data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

As a general rule:

  • enquiries that do not result in a continuing business relationship may be retained for up to 12 months after the last substantive communication;
  • information connected with an active business discussion may be retained for the duration of those discussions and for a reasonable period afterwards;
  • information relating to a contract, transaction, compliance review or legal obligation may be retained for longer where required for contractual, regulatory, accounting, sanctions, dispute-resolution or legal purposes;
  • technical and security logs are retained in accordance with the operational and security settings of our website and hosting providers.

When information is no longer required, it will be deleted, anonymised or securely archived where continued retention is legally necessary.

8. Data security

Granovex takes reasonable technical and organisational measures to protect personal data against:

  • unauthorised access;
  • accidental loss;
  • misuse;
  • alteration;
  • unlawful disclosure;
  • destruction.

However, no website, email system or internet transmission can be guaranteed to be completely secure. Visitors should therefore avoid sending sensitive or confidential information through the initial enquiry form.

9. Your data-protection rights

Subject to the conditions and limitations of applicable law, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • request the transfer of certain data in a structured and commonly used format;
  • withdraw consent where processing is based on consent;
  • submit a complaint to a competent supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise a right, please contact us at: info@granovex.com

We may need to request additional information to verify the identity of the person making the request.

10. Right to object

Where we process personal data on the basis of legitimate interests, you have the right to object to that processing on grounds relating to your particular situation.

We will stop the relevant processing unless we can demonstrate compelling legitimate grounds for continuing it, or where processing is necessary for the establishment, exercise or defence of legal claims.

11. Complaints

You may contact Granovex directly if you have concerns about how your personal data is handled.

You also have the right to submit a complaint to the competent data-protection supervisory authority. As Granovex is registered in Cyprus, this may include: Office of the Commissioner for Personal Data Protection of the Republic of Cyprus

You may also contact the data-protection authority in the EU or EEA country in which you live, work or believe an infringement has occurred.

12. Automated decision-making

The website enquiry process is not intended to involve decisions based solely on automated processing that produce legal effects or similarly significant effects for individuals.

Spam and security systems may automatically assess website submissions to identify suspected abuse or malicious activity.

13. Third-party links

Our website may contain links to websites operated by third parties. Granovex does not control the privacy practices or content of those websites.

Visitors should review the privacy notices of the relevant third parties before providing personal information to them.

14. Changes to this Privacy Notice

We may update this Privacy Notice to reflect changes in:

  • our website;
  • our processing activities;
  • service providers;
  • legal or regulatory requirements;
  • business operations.

The most recent version will be published on this page together with its effective date.

15. Contact

Questions concerning this Privacy Notice or the processing of personal data may be sent to:

Granovex Group Limited
Themistokli Dervi, 41
HAWAII NICOSIA TOWER
8th floor, Flat/Office 806-807
1066, Nicosia
CYPRUS

E-mail: info@granovex.com