Privacy policy.
- Controller
- GROS (Arnau Gros Presas)
- Contact
- info@grosglobal.com
1. Data we collect
- Contact data you provide. Name, email, company, phone and message when you fill the form or write to us.
- Browser technical data. IP address, browser type, language and pages visited. Collected automatically for the site to work.
- Cookie data. Your language preference and cookie choice. Analytics and marketing only if you accept.
- Use of the client area. If you sign in to your client area or open a gallery link, we record when you come in, which galleries you open, how long you stay and what you mark, download or ask us to change. We measure it ourselves, with no third-party cookies or advertising, to know your delivery has reached you and to serve you better.
2. Purposes and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Reply to your commercial enquiry | Pre-contractual measures (art. 6.1.b) |
| Commercial communications | Consent (art. 6.1.a) |
| Site usage analytics | Consent (art. 6.1.a) |
| Site security | Legitimate interest (art. 6.1.f) |
3. Retention
We keep your data only as long as needed to fulfil the purpose: commercial enquiries without engagement up to 12 months from the last contact, customer data under contract for the duration of the relationship plus the legal accounting retention periods, and server technical logs up to 90 days. After that period, data is deleted or anonymized. The detail of how long you spend in the client area is deleted after 12 months.
4. Recipients
We work with technology providers to run the site (hosting, transactional email, analytics, meeting scheduling, storage). All sign a data processing agreement under GDPR art. 28. Some are located outside the EU, with transfers covered by the standard contractual clauses and the EU-US Data Privacy Framework.
You may request the current list of providers by writing to info@grosglobal.com.
5. Social media platform data (Meta / Instagram)
When you interact with our Instagram or Facebook accounts (for example, by commenting a keyword on a post), we process, through the official Meta API, your user ID, your public username, the content of your comment or message and the fact that you have interacted with us.
- Purpose. To reply to you automatically by direct message with the information you requested and, where appropriate, to follow up commercially on your interest.
- Legal basis. Your voluntary action of commenting or writing to us to request information (consent, art. 6.1.a, and pre-contractual measures, art. 6.1.b).
- Retention. The same periods as in section 3 apply. If the interaction does not lead to an engagement, we keep the data for a maximum of 12 months from the last contact.
- Meta Platform. We process this data in accordance with the Meta Platform policies. You can request its deletion at any time by writing to info@grosglobal.com, through the same channel as section 7.
6. YouTube API Services
We publish videos on our own YouTube channel with an internal tool that uses YouTube API Services. Only the GROS team uses it, with the GROS Google account. It is not open to the public or to clients.
- Data it processes. The GROS channel data: its ID and name, and the videos we upload with their title, description, tags and thumbnail. It does not access data from other YouTube users or from visitors to this site, and it does not place cookies or similar technologies on your device.
- Purpose. To upload and schedule our videos. We do not sell this data or share it with third parties.
- Retention and deletion. The tool stores only the authorization to access the channel, on GROS equipment. That authorization can be revoked at any time from the Google account permissions page; when it is revoked, we delete the stored authorization.
- YouTube and Google terms. Use of this tool is subject to the YouTube Terms of Service and the Google Privacy Policy.
- Contact. For any question or request about this processing, write to info@grosglobal.com.
7. Your rights
As a data subject you can exercise the rights of access, rectification, erasure, objection, restriction, portability and withdrawal of consent. Write to info@grosglobal.com with your request and a document proving your identity; we reply within one month.
If you consider that the processing does not comply with the GDPR, you can lodge a complaint with the Spanish Data Protection Agency.
8. Policy updates
This policy may change when we update our services or when applicable law changes. The current version is the one published here, with the last updated date at the top.