Legal
Privacy policy
How Gravinar processes personal data in accordance with the GDPR and applicable Spanish law.
This Privacy Policy explains how we collect and process personal data when you contact us or use this website.
1. Data controller
Data Controller: Gravinar Digital S.L.
Contact (privacy): privacy@gravinar.com
DPO: not appointed (not required for our current activities).
2. Data we process
Depending on how you contact us, we may process:
- Identification and contact data (name, email, company, phone if provided)
- Message contents and any information you include
- Technical data required to serve the website (server logs)
- Aggregated website usage and conversion-event data collected through Plausible Analytics
3. Purposes and legal bases
We process personal data for:
- Responding to inquiries (GDPR Art. 6(1)(b) or 6(1)(f))
- Business communications with prospective or existing clients (GDPR Art. 6(1)(f))
- Compliance with legal obligations where applicable (GDPR Art. 6(1)(c))
- Understanding and improving the website through privacy-oriented, aggregated analytics (GDPR Art. 6(1)(f))
4. Retention
We keep personal data only as long as necessary for the purposes described above, and to meet legal or contractual obligations.
5. Recipients and international transfers
We do not sell personal data. We use service providers acting as processors where needed to operate the site. This currently includes the hosting and form-processing platform (Netlify) and website analytics (Plausible Analytics). Where a provider processes data outside the EEA, appropriate transfer safeguards are applied where required.
The public form is intended only for initial business contact. Do not submit passwords, production credentials, confidential source code, sensitive personal data, or project archives. If technical materials are required, a safer exchange method will be agreed separately.
6. Your rights
You may request access, rectification, erasure, restriction, objection, and portability where applicable. You can exercise your rights by contacting privacy@gravinar.com.
If you believe your rights have been infringed, you have the right to lodge a complaint with your local supervisory authority (in Spain, the AEPD).
7. Security
We apply reasonable technical and organizational measures to protect personal data. No method of transmission or storage is 100% secure.
8. Changes
We may update this policy. Updates will be published on this page.