Privacy Policy

1. Who we are

GRC Aura is a software product operated by GRC Advisory Sp. z o.o. ("GRC Advisory", "we", "us", "our"), a company registered in Poland. Headquarters and registered office details are available at grcadvisory.com.

GRC Advisory acts as the data controller for personal data collected through this website (grcaura.com), the GRC Aura ROI Calculator, our LinkedIn Lead Gen Forms, and any related communications.

For privacy-related questions or to exercise your rights, contact us at: save_fue@grcadvisory.com.

2. What data we collect

We may collect the following categories of personal data:

• Contact details you provide voluntarily — name, work email, company, job title, country — through our forms (demo request, ROI Calculator, pilot enrollment) or via LinkedIn Lead Gen Forms.
• Calculator inputs — SAP user counts, license tier mix, and pricing assumptions you enter into the ROI Calculator. Inputs are processed in your browser; only summary results are sent to us when you request a PDF report.
• Technical data — IP address, browser type, device type, referring URL, and pages visited — collected via cookies and analytics tools.
• Marketing engagement data — ad impressions, clicks, and conversions reported by advertising platforms such as LinkedIn and Google.

3. How we use your data

We process personal data for the following purposes:

• To respond to your enquiries — sending the ROI report you requested, replying to demo requests, providing pilot onboarding information.
• To provide the GRC Aura service — account creation, customer support, service updates.
• To improve our product and content — analysing usage patterns, optimising the website, refining benchmarks.
• To send marketing communications related to GRC Aura and SAP licensing optimisation, where you have given consent or where there is a legitimate interest. You can unsubscribe at any time.
• To comply with legal obligations — tax, accounting, or regulatory record-keeping.

4. Legal basis (GDPR)

Under Regulation (EU) 2016/679 (GDPR), we rely on the following legal bases: your consent (e.g., when you submit a LinkedIn Lead Gen Form or subscribe to updates); performance of a contract (when delivering services you have requested); legitimate interest (e.g., analytics, service improvement, and B2B outreach to relevant prospects); and legal obligation (record-keeping required by law).

5. LinkedIn Lead Gen Forms

When you submit a LinkedIn Lead Gen Form associated with a GRC Aura advertisement, LinkedIn shares with us the data fields you confirmed in the form (typically: name, work email, company name, job title, country). LinkedIn's own privacy practices for advertising are described in the LinkedIn Privacy Policy.

We use these details to send you the requested resource (e.g., ROI report or case study), to follow up about your interest in GRC Aura, and to add you to our marketing list for relevant updates. You can unsubscribe at any time using the link in any marketing email or by emailing save_fue@grcadvisory.com.

6. Cookies and analytics

grcaura.com uses cookies and similar technologies for the following purposes:

• Strictly necessary — site functionality, language preference, security.
• Analytics — Google Analytics 4 (via Google Tag Manager) to understand site usage in aggregate.
• Marketing — LinkedIn Insight Tag and other ad-platform pixels to measure campaign effectiveness and build remarketing audiences.

You can manage cookies through your browser settings. Blocking some cookies may affect site functionality.

7. Sharing your data

We share data only with:

• Service providers acting on our behalf, including hosting providers, email infrastructure, CRM, and analytics tools, all bound by contractual data-processing agreements.
• Advertising platforms (e.g., LinkedIn, Google) for measurement and remarketing, in line with their respective terms.
• Authorities or law enforcement where legally required.

We do not sell personal data to third parties.

8. International transfers

Some of our service providers may process data outside the European Economic Area (EEA), including in the United States. Where this happens, transfers are protected by appropriate safeguards, such as the EU Standard Contractual Clauses or equivalent mechanisms approved under the GDPR.

9. Data retention

We retain personal data only as long as necessary for the purposes described above. As a guideline:

• Marketing leads — up to 24 months after the last interaction, unless you opt out earlier.
• Customer records — for the duration of the contractual relationship plus the legally required retention period (typically up to 6 years for accounting purposes).
• Website analytics — aggregated/anonymised data may be retained indefinitely; identifiable cookie data follows the lifetime set by each provider.

10. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion ("right to be forgotten") where applicable.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Lodge a complaint with a supervisory authority — in Poland, the Personal Data Protection Office (UODO, uodo.gov.pl).

To exercise any of these rights, email save_fue@grcadvisory.com. We aim to respond within 30 days.

11. Data security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted connections (TLS), access controls, and provider audits.

12. Children

GRC Aura is a B2B service intended for business professionals. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently received such data, please contact us so we can delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be communicated via the website or email.

14. Contact

GRC Advisory Sp. z o.o.
Email: save_fue@grcadvisory.com
Website: grcadvisory.com