In short
- We collect your details only when you contact us, and use them only to reply and to do the work you ask for.
- No analytics, advertising or tracking cookies.
- No selling or sharing of personal data for marketing.
- Ask to see, correct or delete your data at any time: info@grcgravity.com.
Controller
GRC Gravity AB, Stockholm, Sweden, is the controller for the personal data described here. Contact: info@grcgravity.com.
What we collect, and why
When you contact us
Your name, email address, company and the content of your message. We use it to reply and to scope and deliver the work you ask for. Legal basis: steps taken at your request before a contract, and our legitimate interest in responding to enquiries (Article 6(1)(b) and (f) GDPR).
When you visit the website
Technical data such as IP address, browser type and time of visit, recorded in server logs by our hosting provider for security and reliability. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Cookies
This website uses no analytics, advertising or tracking cookies, and asks for no consent. Our hosting provider may set a strictly necessary cookie to protect the site against automated abuse; it holds no personal data and is exempt from consent under the ePrivacy rules.
Processors
Three providers process data on our behalf under data processing agreements, for the purposes above only:
- Website hosting and content delivery: Cloudflare
- Delivery of contact-form messages to our inbox: Web3Forms
- Email: Microsoft
We do not sell personal data or share it for third-party marketing.
Transfers outside the EEA
These providers may process data in the United States. Transfers rely on the EU-US Data Privacy Framework and, where applicable, the European Commission's standard contractual clauses.
Retention
- Enquiries and correspondence: up to 24 months after our last exchange, or for the duration of an engagement and the retention periods that apply to it.
- Server logs: as long as the hosting provider needs them for security, normally a matter of weeks.
Your rights
You may request access to your personal data, its correction or deletion, restriction of processing, data portability, or object to processing based on legitimate interest. Write to info@grcgravity.com; we answer within one month. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.
Changes
Updates to this policy are published on this page with a new version date. This version applies from October 2026.