Privacy Policy
Notice pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)
Last updated: May 2026
This is a translation provided for convenience. In case of discrepancy, the Italian version prevails.
01
Data controller
- Company
- GREM S.R.L.
- Registered office
- Via Matteo La Fragola 4 — 84135 Salerno (SA)
- VAT number
- 06136730659
- Legal representative
- Guariglia Mattia — Sole Director
- Privacy contact
- [email protected]
- DPO
- Not appointed (not required under Article 37 GDPR)
02
Data collected while browsing
The IT systems and software procedures that operate this website acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet protocols: IP addresses, browser type, operating system, pages visited, date and time of the visit.
This data is used solely to obtain anonymous statistical information on the use of the website and to check that it is working correctly. It is not associated with identified users.
03
Cookies
The website uses only technical cookies that are necessary for its operation. No profiling or tracking cookies are used without the user's prior explicit consent, in accordance with the guidelines of the Italian Data Protection Authority (Garante per la protezione dei dati personali).
04
Data provided voluntarily
Sending messages via contact forms or by email entails the acquisition of the sender's data needed to respond to the request. This data is not retained beyond the time needed to handle the communication.
05
Data provided when registering for the services
Use of Grem S.R.L.'s software services requires registration with personal and company details. This data is processed to provide the requested services pursuant to Article 6(1)(b) GDPR. For further details, please refer to the Customer Privacy Notice provided at the contract stage.
06
Purposes of processing
Contract
Provision of the requested software services and management of the contractual relationship
Legal basis: Art. 6(1)(b) GDPR
Law
Tax, accounting and legal obligations
Legal basis: Art. 6(1)(c) GDPR
Security
IT security, fraud prevention, system logs
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
Consent
Marketing communications and newsletter
Legal basis: Art. 6(1)(a) GDPR — may be withdrawn at any time
07
Recipients of the data
The data is not sold or transferred to third parties for marketing purposes. It may be disclosed to the technical providers that manage the service infrastructure, acting as data processors under Article 28 GDPR:
- Hetzner Online GmbHHosting and servers — Data centre in Germany (GDPR compliant)
- Cloudflare Inc.CDN and web security — European nodes, participant in the EU-US Data Privacy Framework
- Google LLCBusiness Workspace — European region, participant in the EU-US Data Privacy Framework
- Aruba S.p.A.Electronic invoicing and certified email (PEC) — Servers in Italy
- Stripe Inc.Online payments — Participant in the EU-US Data Privacy Framework
08
Transfers to third countries
Some providers operate with infrastructure partly outside the EU (USA). All transfers take place in compliance with the EU-US Data Privacy Framework and the safeguards provided for in Articles 44-49 GDPR. The main data is hosted on servers in Germany (Hetzner).
09
Retention period
- Browsing data
- Maximum 12 months
- Contact requests
- Time needed to handle the request
- Customer data (contract)
- Contract term + 10 years (tax obligation)
- Marketing / newsletter
- Until consent is withdrawn
10
Rights of data subjects
Under Articles 15-22 GDPR, the user has the right to:
- AccessObtain confirmation of the processing and a copy of the data (Art. 15)
- RectificationCorrect inaccurate or incomplete data (Art. 16)
- ErasureRequest erasure of the data (Art. 17)
- RestrictionRestrict processing in certain cases (Art. 18)
- PortabilityReceive the data in a structured format (Art. 20)
- ObjectionObject to processing based on legitimate interest (Art. 21)
To exercise your rights or for any information regarding the processing of personal data, you may contact the data controller at the address given below. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali): www.garanteprivacy.it — Piazza Venezia 11, 00187 Roma.
11
Changes to this Privacy Policy
This Privacy Policy may be updated periodically to reflect regulatory or operational changes. The updated version will always be available on this page, together with the date of the latest revision. We recommend that you consult it periodically.
Contact
To exercise your rights or for any privacy-related questions:
GREM S.R.L. — Via Matteo La Fragola 4, 84135 Salerno
[email protected]People
Ideas
Impact