Your privacy is of vital importance to us.
1. Introduction
At BAG Consult, protecting your personal data and ensuring transparency in how it is processed are fundamental to the way we operate. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website or interact with us.
We are committed to complying with the General Data Protection Regulation (GDPR) and applicable data protection laws in Portugal, Germany, and across the European Union.
2. Who We Are
BAG Consult operates in both Portugal and Germany and provides consulting services in data, process, and digital transformation.
Data Controllers:
Portugal
Bernd A. Grimm Consult LDA
Praça Bocage 67
2900-276 Setúbal, Portugal
Email: info@bag-consult.com
Germany
Bernd A. Grimm Consult GmbH
Rheinpromenade 13
D-40789 Monheim, Germany
Am Flughafen 13
D-12529 Schönefeld, Deutschland
Email: info@bag-consult.com
Depending on your interaction with us, either entity or both may act as joint controllers. If you have any questions about how your data is handled, you may contact us at the email address above.
3. What Personal Data We Collect
We may collect and process the following categories of personal data:
3.1 Website Usage
When you visit our website, we may automatically collect:
- IP address
- Operating system
- Pages visited
- Date and time of access
- Referring website
3.2 Communication and Contact
If you contact us through our website, email, or other channels, we may process:
- Name
- Email address
- Phone number
- Company
- Message content
- Any information you choose to share
4. Why We Process Your Data
We process your personal data for the following purposes:
- To operate and maintain our website
- To respond to enquiries
- To provide consulting services
- To improve user experience
- To analyse website performance
- To communicate relevant insights, events, and updates
- To ensure website security and prevent fraud
5. Legal Basis for Processing
We rely on the following legal bases:
- Consent (e.g., marketing and tracking cookies)
- Contractual necessity or pre-contractual measures
- Legitimate interests (e.g., website security, analytics)
- Legal obligations
You may withdraw consent at any time.
6. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to:
- Ensure functionality
- Improve performance
- Analyse usage
- Deliver relevant content and advertising
Currently, we use only essential cookies required for the functionality and security of the website.
7. Analytics and Third-Party Services
We may use trusted third-party providers such as:
- YouTube
- reCAPTCHA
These providers may process data on our behalf. Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as:
- EU Standard Contractual Clauses
- Adequacy decisions
Further details are available upon request.
8. Data Sharing
We may share personal data with:
- Hosting and IT providers
- Marketing and analytics providers
- Professional advisors
- Authorities where required by law
All providers are subject to contractual and security obligations.
9. International Data Transfers
When personal data is transferred outside the EEA, we ensure appropriate safeguards in accordance with GDPR.
10. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy, including:
- Contractual and business requirements
- Legal and regulatory obligations
- Dispute resolution
Retention periods vary depending on the type of interaction.
11. Your Rights
Under GDPR, you have the right to:
- Access your data
- Rectify inaccurate data
- Erase your data
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent
To exercise your rights, please contact us.
You also have the right to lodge a complaint with a supervisory authority, including:
- CNPD (Portugal)
- BfDI (Germany)
12. Security
We implement appropriate technical and organisational measures to protect personal data, including:
- Encryption (SSL)
- Access control
- Secure infrastructure
- Continuous monitoring
13. Updates
We may update this Privacy Policy to reflect changes in law, technology, or our services. The latest version will always be available on our website.
14. Contact
If you have any questions about this Privacy Policy or how we process your data, please contact:
Last updated: February 2026