Privacy Policy

Overview

GRAL operates gral.tech and enterprise platforms including Cognity, Sentara, and Emittra. This privacy policy describes how we collect, use, store, and protect personal data when you interact with our website and services.

By using our website, you acknowledge that you have read and understood this policy. For questions, contact us at segreteria@gral.tech.

Information We Collect

Website analytics

Page views, device type, browser information, referrer URL, and general geographic location. This data is collected in aggregate and is not used to identify individual users.

Contact form submissions

Name, email address, company name, and message content submitted through website contact forms.

Platform usage data

For enterprise clients using our platforms, usage data is collected as necessary to operate and improve the service. This is governed by separate enterprise agreements and data processing addendums.

How We Use Your Information

• Respond to inquiries and contact form submissions
• Improve the functionality, performance, and content of our website and services
• Communicate about our platforms and services, only with explicit consent
• Fulfill contractual obligations to enterprise clients
• Comply with legal requirements and enforce our terms of service

Data Storage & Security

Website data is processed within the European Union. Enterprise platform data is stored according to client-specific deployment configurations, including on-premise, private cloud, or hybrid environments.

All data is protected with industry-standard encryption both in transit (TLS 1.2+) and at rest (AES-256). Our infrastructure is SOC 2 Type II, GDPR, and ISO 27001 compliant.

Third-Party Services

We use analytics tools to understand website traffic patterns and improve user experience. Providers are selected for adequate data protection and processing within the EU where possible.

We do not sell, rent, or trade personal data to third parties under any circumstances. Enterprise platform integrations with third-party services are governed by separate data processing agreements negotiated with each client.

Cookies

Essential cookies — Required for core website functionality such as navigation and security. Cannot be disabled.

Analytics cookies — Used to understand how visitors interact with our website. Only placed with explicit consent.

We do not use advertising or tracking cookies. We do not participate in cross-site tracking or retargeting programs.

Your Rights

Under GDPR and applicable data protection legislation, you have the right to:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate or incomplete data
• Erasure — Request deletion of your personal data where there is no compelling reason for continued processing
• Data portability — Request transfer of your data to another controller in a structured, machine-readable format
• Restriction of processing — Request limitation of how your data is processed in certain circumstances
• Object — Object to the processing of your personal data where we rely on legitimate interests as the legal basis

To exercise any of these rights, contact segreteria@gral.tech. We will respond within 30 days.

Data Retention

• Contact form data — Retained for a maximum of 24 months from date of submission, then permanently deleted
• Enterprise data — Retained according to the terms specified in each client's contractual agreement
• Website analytics data — Anonymized after 14 months and cannot be linked to individual users

Changes to This Policy

We may update this privacy policy to reflect changes in our practices, technologies, or legal requirements. Changes will be reflected with an updated "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact

Email: segreteria@gral.tech
Location: Italy