Privacy Policy

Last updated: December 26, 2025

Protecting your personal data is important to us. In this Privacy Policy, we explain how YourServiceNet UG (haftungsbeschränkt) processes personal data on the GraveStay websites.

Data is processed in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable data protection laws.

1. Controller

The controller within the meaning of Art. 4 No. 7 GDPR is:

YourServiceNet UG (haftungsbeschränkt)
Südliche Ingolstädter Straße 3a
85716 Unterschleißheim
Germany

Managing Director: Vladimir Koch

Email: legal@gravestay.com
Website: https://gravestay.com

2. Scope

This Privacy Policy applies to the GraveStay websites at https://gravestay.com and https://app.gravestay.com, including all pages and all processing of personal data carried out via those websites.

3. Data Processing When Visiting the Website

When you access our website, the hosting provider automatically collects and processes the following data:

  • IP address (shortened or anonymized where technically possible)
  • Date and time of access
  • Pages and files accessed
  • Browser type and browser version
  • Operating system
  • Referrer URL

This data is processed to ensure a smooth connection to the website, system security, and technical administration.

Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).

4. Contact by Email

If you contact us by email, the personal data you provide, such as your name, email address, and message content, is processed only to handle your request.

Legal basis:
Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in communication).

5. Cookies

We use only technically necessary cookies that are required for the operation of the website.

Tracking, analytics, or marketing cookies are not used unless this is expressly stated and the corresponding consent has been obtained.

Legal basis:
Art. 6(1)(f) GDPR and Section 25(2) TTDSG.

6. Hosting and Content Delivery

This website is provided using services of:

Cloudflare, Inc.
101 Townsend St., San Francisco, CA 94107, USA

Cloudflare acts as a content delivery network (CDN) and security service provider. In this context, personal data, especially IP addresses, may also be transferred to third countries.

Appropriate safeguards are used to ensure an adequate level of data protection, in particular the standard contractual clauses approved by the European Commission under Art. 46 GDPR.

7. Storage Period

Personal data is stored only for as long as necessary for the respective processing purposes or as required by statutory retention obligations.

8. Rights of Data Subjects

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.

9. Data Security

We use appropriate technical and organizational security measures to protect your personal data against loss, destruction, manipulation, and unauthorized access.

10. Children’s Data

This website is not directed at children under 16. We do not knowingly process personal data from children.

This website may contain links to external third-party websites. We are not responsible for the content or privacy practices of those external websites.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy when necessary. The current version is always available on this page.

13. Contact

If you have questions about data protection or the processing of personal data, you can contact us at any time:

Email: legal@gravestay.com