Privacy policy

This Privacy Policy explains how we collect and process personal data when you contact us or use this website.

1. Data controller

Data Controller: the company operating this website (see company details on this page).

Contact (privacy): privacy@gravinar.com

DPO: not appointed (not required for our current activities).

2. Data we process

Depending on how you contact us, we may process:

• Identification and contact data (name, email, company, phone if provided)
• Message contents and any information you include
• Technical data required to serve the website (server logs)

3. Purposes and legal bases

We process personal data for:

• Responding to inquiries (GDPR Art. 6(1)(b) or 6(1)(f))
• Business communications with prospective or existing clients (GDPR Art. 6(1)(f))
• Compliance with legal obligations where applicable (GDPR Art. 6(1)(c))

4. Retention

We keep personal data only as long as necessary for the purposes described above, and to meet legal or contractual obligations.

5. Recipients and international transfers

We do not sell personal data. We may use service providers (e.g., hosting) acting as processors. Where data is transferred outside the EEA, we apply appropriate safeguards (e.g., SCCs) where required.

6. Your rights

You may request access, rectification, erasure, restriction, objection, and portability where applicable. You can exercise your rights by contacting privacy@gravinar.com.

If you believe your rights have been infringed, you have the right to lodge a complaint with your local supervisory authority (in Spain, the AEPD).

7. Security

We apply reasonable technical and organizational measures to protect personal data. No method of transmission or storage is 100% secure.

8. Changes

We may update this policy. Updates will be published on this page.