Privacy Policy

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified.

Data Collection on this Website

• Who is responsible? The data processing on this website is carried out by the website operator details in the Imprint.
• How do we collect your data? Some data is collected when you provide it to us (e.g., contact forms). Other data is collected automatically by our IT systems (e.g., technical data like browser version).
• What do we use your data for? Part of the data is used to ensure the error-free provision of the website. Other data may be used to analyze user behavior or facilitate communication with partners.

We host the content of our website with the following provider:

Vercel

The provider is Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel is a cloud platform for hosting web applications. When you visit our website, your data is processed on Vercel's servers. This may also result in data transfer to the USA.

Data Transfer to the USA: We have concluded a standard contractual clause (SCC) agreement with Vercel to ensure compliance with European data protection standards. For more details, please refer to Vercel's Privacy Policy: https://vercel.com/legal/privacy-policy.

Approximate Location Detection: Vercel automatically derives your approximate location (country, city, and continent) from your IP address using MaxMind's GeoIP database. We use this information solely to personalise the content shown to you — for example, displaying programs in your region first. This processing occurs entirely on Vercel's infrastructure; we receive only the derived location data, not your raw IP address. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing relevant content).

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Note on the Responsible Body

Revocation of your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Object (Art. 21 GDPR)

If the data processing is based on Art. 6 Para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.

Contact Form & Inquiries

If you send us inquiries via the contact form or course inquiry modal, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent, except to the specific educational institution you are inquiring about.

Location Preferences & Content Personalisation

When you first visit Gradia, your approximate location (country, city, and continent) is automatically detected via Vercel's infrastructure (see Section 2) and stored in your browser's local storage under the key gradia_locale. This data never leaves your device — it is not transmitted to our servers or database.

We use this location to personalise homepage content and search suggestions, for example by showing executive education programs in your region first. You can view or override your detected region at any time via the Preferences panel in the page footer. Selecting "Reset to auto" re-runs the detection.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in providing a relevant, personalised experience. No precise location (GPS or street-level address) is ever collected; detection is country and city level only, derived from your IP address.

Supabase (Database & Auth)

We use Supabase for data storage and user authentication. The provider is Supabase, Inc., 970 Toa Payoh North #07-04, Singapore 318992. However, our database instance is located in Frankfurt, Germany (EU).

Despite the EU server location, remote access by the US/Singapore parent company cannot be completely ruled out for support purposes. We have therefore concluded standard contractual clauses (SCC) to secure such potential transfers.

PostHog

This website uses PostHog, an open-source product analytics suite. We use the PostHog Cloud EU version, meaning data is stored within the European Union.

PostHog captures data such as your IP address (anonymized), browser type, and interactions with our application to help us improve the user experience. You can opt-out of this tracking via our cookie settings.

OpenStreetMap

This site uses map services from OpenStreetMap (OSM). The provider is the OpenStreetMap Foundation. To use the functions of OSM, it is necessary to store your IP address. This information is usually transferred to an OSM server and stored there. The provider of this site has no influence on this data transfer.