Effective Date: July 14, 2025
This Privacy Policy explains how MB Cogrant ("we", "us", or "Cogrant") collects, uses, stores, and protects your personal data when you use our services via www.cogrant.eu (the "Platform"). It is written in accordance with the General Data Protection Regulation (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and the EU Artificial Intelligence Act (AI Act).
By using our services, you agree to the terms of this Privacy Policy.
1. Data Controller Information
MB Cogrant
Email: info@cogrant.eu
2. What Data We Collect
We may collect and process the following categories of data:
a. Account Information
Name, surname
Email address
Organization name
Country or location
Job title (optional)
b. Company & Eligibility Data
Information you input to receive relevant funding matches, such as sector, size, legal status, and operational focus.
c. Platform Usage Data
Log-in history
Feature usage patterns
Subscription status
IP address and browser metadata
d. Content Data
Information submitted or uploaded to the platform, including grant text inputs, preferences, and project data.
e. Payment Data
Handled securely by third-party payment processors; we do not store full card details.
3. How We Use Your Data
We process your personal data for the following purposes:
To provide access to the Cogrant Search platform and personalized grant suggestions.
To assist in AI-supported proposal generation.
To deliver newsletters, updates, and grant alerts (with your consent).
To manage subscriptions and payments.
To comply with applicable legal obligations.
To improve our services through anonymized analytics.
4. Legal Basis for Processing
We process personal data based on:
Performance of a contract (e.g., providing the platform and consulting services).
Consent (e.g., email communications).
Legitimate interest (e.g., platform analytics and security).
Legal obligations (e.g., accounting, tax compliance).
5. Use of Artificial Intelligence & EU AI Act
Cogrant uses general-purpose AI systems (such as large language models) to generate text content (e.g., grant proposals, call matching explanations).
In accordance with the EU Artificial Intelligence Act (AI Act):
We do not use AI for high-risk applications, such as biometric identification, legal judgments, or social scoring.
Users are informed when content is AI-generated.
We require users to review and validate all AI-generated outputs before use or submission.
We provide transparency about the purpose, logic, and limitations of AI tools integrated into the platform.
All outputs are subject to human oversight and intervention, and you are responsible for final review.
6. Data Retention
We retain your personal data only for as long as necessary to:
Deliver services;
Comply with legal obligations;
Resolve disputes;
Enforce agreements.
Inactive user accounts may be deleted after 24 months of inactivity.
7. Data Sharing and Subprocessors
We do not sell or rent personal data.
We may share data with:
Cloud service providers (e.g., infrastructure, storage);
Payment processors;
Analytics and email platforms (e.g., user behavior tools);
AI service providers (for proposal generation, under DPA agreements).
All third-party providers are subject to confidentiality and data protection agreements and are located within the EU or in jurisdictions recognized as adequate by the European Commission.
8. International Data Transfers
If data is transferred outside the European Economic Area (EEA), it is done under:
Standard Contractual Clauses (SCCs);
Adequacy decisions by the European Commission;
Other lawful safeguards.
9. Your Data Protection Rights
You have the following rights under the GDPR:
Access – Request a copy of your personal data.
Rectification – Request correction of inaccurate data.
Erasure – Request deletion ("right to be forgotten").
Restriction – Request limited processing of your data.
Data Portability – Receive your data in a portable format.
Objection – Object to processing based on legitimate interest.
Withdraw Consent – Where applicable, at any time.
To exercise any of the above rights, please contact info@cogrant.eu.
We will respond within 30 calendar days.
10. Cookies and Tracking
We use cookies to:
Maintain secure user sessions;
Analyze site usage (e.g., via Google Analytics or Matomo);
Personalize user experience.
You may opt out of non-essential cookies through our cookie banner or browser settings.
11. Data Security
We implement technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction. These include:
Access controls;
Regular backups and audits.
12. Complaints
If you believe your data protection rights have been violated, you may lodge a complaint with:
State Data Protection Inspectorate
L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania
Website: https://vdai.lrv.lt
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Updated versions will be posted on www.cogrant.eu with a revised effective date. Continued use of the Platform after updates indicates your acceptance.
14. Contact Information
For privacy-related questions, requests, or complaints:
MB Cogrant
Email: info@cogrant.eu
Website:www.cogrant.eu
