Privacy Policy

In this portal, we take the privacy and security of your data very seriously. Below, we detail how we handle the collected information.

1. Data Collected

We collect the minimum information necessary for the correct operation of the service:

• User Information: First name, last name, email address, username and assigned role.
• Technical Data: IP address, browser type and operating system to ensure access security.
• Activity Logs: Actions such as login, upload, download or deletion of files are recorded for the purpose of auditing the use of the portal.

2. Use of Cookies

This portal only uses technical session cookies (PHPSESSID) necessary to maintain your identity while you browse the restricted areas. We do not use tracking or third-party advertising cookies.

Corporate Web Analytics: On our corporate landing page (gravityflash.com) we measure traffic and navigation using a server-side analytics system that is 100% free of tracking cookies. We do not store cookies in your browser for this purpose.

3. Purpose of Processing

The data is used exclusively for:

• Manage authorized access to project content.
• Maintain the security of the platform and prevent unauthorized access.
• Generate internal usage statistics for project administrators.
• Corporate Web Stats: Analyze general traffic, origin of visits, country of origin and time spent on the main website to improve the business offering and detect attempts at fraud or denial of service (DDoS) attacks, using IP address registration under the legal basis of Legitimate Interest (Art. 6.1.f GDPR).

4. Legal basis of processing

Data processing is carried out under the following legal bases:

• Execution of the contract and provision of the service;
• Legitimate interest in ensuring security and preventing fraud;
• Compliance with legal obligations.

5. International transfers

Some data may be processed or stored outside the European Economic Area by international technology providers. GravityFlash adopts reasonable measures to ensure an adequate level of data protection.

6. Data retention

Data will be retained as long as an active account exists or as long as necessary for security, auditing, and legal compliance purposes.

7. Communication to Third Parties

Your data is not sold or shared with any external entity, except as legally required by competent authorities.

8. Your Rights

You can request access, rectification, or deletion of your user account or browsing data by directly contacting the responsible for the treatment.