Privacy Policy

Who we are

Granite Strata Corp is the controller of the personal data described in this policy. We are an EU-focused company building transaction infrastructure for enterprise commercial real estate. For any privacy question, contact us at privacy@granitestrata.com.

What we collect, and why

This website is a static site. We use only privacy-friendly, cookieless analytics and run no advertising or cross-site tracking, and it has no on-site forms. As a result we collect very little personal data:

• Technical access data: when your browser requests a page, our hosting provider records standard server log data (IP address, user agent, the page requested, and a timestamp) to deliver the site and protect it against abuse and attacks.
• Aggregate analytics: we use Plausible, a cookieless, EU-based analytics tool, to count visits and see which pages and referrers are popular. It sets no cookies and does not store your IP address or any data that identifies you; the statistics it produces are aggregate and anonymous.
• Information you send us: the contact and careers pages link to email addresses (mailto). If you email us, we receive your email address and whatever you choose to include, and we use it solely to respond to and manage your inquiry.

Cookies and local storage

We do not use tracking, analytics, or advertising cookies, because our analytics is cookieless. The site stores two values in your browser’s local storage: whether you dismissed the “view in another language” suggestion, and, if you switched it, whether you chose the light or dark appearance. They stay on your device, are not cookies, and are not used to identify or track you. See our Cookie Policy for detail.

Legal basis (GDPR)

We process the technical access data, the cookieless analytics, and any inquiry you send us on the basis of our legitimate interests (Article 6(1)(f) GDPR) in operating and securing the website, understanding aggregate usage, and responding to people who contact us. Where you email us, processing is also necessary to take steps at your request.

Service providers (sub-processors)

We host this website on Firebase Hosting (provided by Google), which serves the site from a content delivery network and processes the technical access data described above on our behalf. We use Plausible Analytics, an EU-based cookieless analytics provider, to produce aggregate usage statistics on our behalf, without cookies and without storing personal data. Both are sub-processors for the marketing website only. See our DPA & sub-processors page for the current list.

Retention

Server access logs are retained for a short operational period and then deleted. Emails you send us are kept only as long as needed to handle your inquiry and any follow-up, after which they are deleted in line with our internal retention practices.

International transfers

Granite is EU-first: customer data in our product platform is stored in EU regions. The public marketing website is served from a global content delivery network so that pages load quickly worldwide; where the host processes technical access data outside the EU, that transfer is covered by appropriate safeguards (such as the European Commission’s Standard Contractual Clauses).

Your rights

Subject to applicable law, you have the right to access the personal data we hold about you, and to request its rectification, erasure, restriction, or portability, and to object to processing based on legitimate interests. To exercise any of these rights, email privacy@granitestrata.com. You also have the right to lodge a complaint with your data protection authority.

People named in public registers

Granite collects public reference data about companies so that its customers can identify the parties to their leases. One source is the GLEIF Golden Copy, the open register of Legal Entity Identifiers published by the Global Legal Entity Identifier Foundation under the CC0 licence. Where a sole proprietor holds an LEI, that register names a person, and Granite is the controller of the copy it keeps.

What we hold: what GLEIF publishes about the entity, namely its LEI, legal name, jurisdiction, registration number, registered address, status and the entities it is consolidated by. We use it only to identify the entity and its relationships for our customers; we do not use it to profile or contact anyone. The legal basis is our legitimate interest in identifying the parties to commercial leases (Article 6(1)(f) GDPR). It is stored in the EU, apart from all other data so it can be erased, for as long as GLEIF publishes it.

Because Granite has no way to contact the people GLEIF lists, we give this notice publicly rather than to each person (Article 14(5)(b) GDPR). You can ask to see what we hold about you, object to it, or have it erased by emailing privacy@granitestrata.com; once erased, you are left out of every later copy we take of the register. You may also lodge a complaint with your data protection authority.

Children

This website is intended for business audiences and is not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time; the effective date above reflects the latest version. Material changes will be reflected here.