Privacy Policy

1. Data controller

In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPD-GDD), we inform you that the data controller for your personal data is:

• Controller: Arnau Gros Presas
• Tax ID (NIF): 49459243C
• Address: Avinguda d'Ernest Lluch 32, 08302, Mataró, Barcelona, Spain
• Email: info@grosglobal.com
• Phone: +34 644 653 354

2. Data we collect

2.1. Data provided voluntarily

Through the contact and quote request form:

• Full name
• Email address
• Phone number (if provided)
• Company name (if provided)
• Message and project description

2.2. Automatically collected data

While browsing the Website, data may be collected automatically through cookies and similar technologies:

• IP address
• Browser type and device
• Pages visited and time spent
• Referral source
• Website interaction data

For more information, please see our Cookie Policy.

3. Purpose of processing

• Managing inquiries: Responding to queries, quote requests and information requests.
• Service provision: Managing the commercial relationship and providing contracted AI visual content creation services.
• Commercial communications: Sending information about our services, with your express consent.
• Website improvement: Analyzing Website usage to improve user experience through web analytics tools.
• Legal compliance: Fulfilling applicable legal obligations.

4. Legal basis

• Consent (Art. 6.1.a GDPR): When submitting the contact form.
• Contract performance (Art. 6.1.b GDPR): When processing is necessary for service delivery.
• Legitimate interest (Art. 6.1.f GDPR): For improving our services and Website through analytics.
• Legal obligation (Art. 6.1.c GDPR): For compliance with applicable legal and tax obligations.

5. Data retention

• Inquiry data: Retained for the duration of the inquiry and up to 1 year after resolution.
• Client data: Retained during the commercial relationship and for the legally applicable limitation periods thereafter.
• Analytics data: Retained according to each tool's retention periods (see Cookie Policy).

6. Data recipients

Your personal data will not be transferred to third parties except by legal obligation. However, the following service providers may have access to personal data as data processors:

• Supabase Inc. (database hosting): EU servers.
• Google LLC (Google Analytics 4, Google Tag Manager): International transfer to the US under the EU-US Data Privacy Framework.
• Hosting provider (VPS server): For Website hosting.

7. International transfers

Some service providers are located outside the European Economic Area (EEA). International data transfers are carried out in compliance with the GDPR, through adequacy decisions, standard contractual clauses, or the EU-US Data Privacy Framework.

8. Your rights

Under the GDPR, you may exercise the following rights: access, rectification, erasure, restriction of processing, data portability, objection, and the right not to be subject to automated individual decision-making.

To exercise your rights, contact info@grosglobal.com with the subject line "Data Protection" and a copy of your identification document.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

9. Security measures

We have implemented appropriate technical and organizational measures to ensure the security and integrity of personal data, including SSL/TLS encryption, restricted access controls, regular backups, and periodic security reviews.

10. Modifications

The data controller reserves the right to modify this Privacy Policy to adapt it to legislative or jurisprudential developments. Substantial changes will be communicated through the Website.