Privacy Policy

Last updated: 7/24/2025

This Privacy Policy describes how SHK UG ("we", "our", or "us") collects, uses, and shares your personal information when you use our EU Grants Agent service.

1. Information We Collect

Personal Information

  • Email address (for account creation and communication)
  • Payment information (processed securely through Stripe)
  • Grant proposal content (abstracts, topic descriptions, call identifiers)

Technical Information

  • IP address and browser information
  • Usage data and analytics
  • Session information and cookies

2. How We Use Your Information

  • To provide and improve our AI-powered grant evaluation services
  • To process payments and manage your account
  • To communicate with you about your reviews and our services
  • To analyze and enhance our AI models (anonymized data only)
  • To comply with legal obligations and protect our rights

3. Legal Basis for Processing (GDPR)

We process your personal data based on:

  • Contract Performance: To provide our grant evaluation services
  • Legitimate Interest: To improve our services and prevent fraud
  • Consent: For marketing communications (where applicable)
  • Legal Obligation: To comply with applicable laws

4. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Stripe for payment processing, hosting providers
  • AI Processing Partners: For grant evaluation (with appropriate safeguards)
  • Legal Authorities: When required by law or to protect our rights

We do not sell your personal data to third parties or use it for advertising purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption in transit and at rest
  • Access controls and authentication
  • Regular security assessments
  • Secure data processing environments

6. Data Retention

We retain your data only as long as necessary:

  • Account Data: Until you delete your account
  • Review Content: For service improvement (anonymized after 12 months)
  • Payment Records: As required by law (typically 10 years)
  • Technical Logs: Maximum 12 months

7. Your Rights (GDPR)

You have the following rights regarding your personal data:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data
  • Portability: Receive your data in a structured format
  • Restriction: Limit processing in certain circumstances
  • Objection: Object to processing based on legitimate interests

To exercise these rights, contact us at privacy@eugrantagent.com

8. International Data Transfers

We may transfer your data to countries outside the EU/EEA. When we do, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

9. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential website functionality
  • Analytics and performance monitoring
  • User preferences and session management

You can manage cookie preferences in your browser settings.

10. Children's Privacy

Our service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Information

Data Controller: SHK UG (haftungsbeschränkt)

Address: Schaafenstrasse 25, 50676 Cologne, Germany

Email: privacy@eugrantagent.com

DPO: dpo@eugrantagent.com

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.