Privacy Policy
Last updated: 7 August 2026
This policy explains how we process personal data collected through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data. The short version: we collect very little, we keep everything on our own infrastructure in the European Union, and we never sell or share your data with third parties for their own purposes.
1. Data controller
- Controller: GrexID SRL (in formation)
- Registered office: AJ Slegers 140, 1200 Brussels, Belgium
- Contact for privacy matters: info@grexid.eu
GrexID SRL is in formation; until incorporation is complete, its founders act on its behalf and answer for the processing described here, and the company assumes it on incorporation. Full identification details are set out in the Legal Notice. This does not change any of your rights below, or the address at which you exercise them.
2. What data we process, why, and on what legal basis
| Processing | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Demo & contact requests | Identification and contact details you provide (name, email, company, company size, sector) | Answering your enquiry, arranging product demonstrations and following up on commercial requests | Art. 6(1)(b) — steps prior to entering into a contract, taken at your request |
| Server logs | IP address, timestamp, requested URL, user agent | Operating the website securely, preventing abuse and diagnosing technical incidents | Art. 6(1)(f) — legitimate interest in the security and availability of the service |
| Web analytics (Matomo, self-hosted) | Truncated IP address, pages visited, referrer, device and browser characteristics, first-party analytics cookies | Aggregated statistics on how the website is used, to improve content and performance | Art. 6(1)(a) — your consent, given through the cookie banner and revocable at any time |
We do not use the data for automated decision-making or profiling with legal effects, and we do not process special categories of data through this website.
3. Analytics on our own infrastructure
Website usage statistics are produced with Matomo, an open-source analytics platform that we run ourselves on our own servers, hosted by OVHcloud in data centres located in the European Union — the same infrastructure that serves this website. Analytics data is processed exclusively by GrexID SRL (in formation): it is never transmitted to, or shared with, any third-party analytics or advertising provider.
- Analytics runs only after you accept it in the cookie banner; the site is fully usable if you refuse.
- IP addresses are truncated (anonymised) before storage.
- Data is used solely for aggregated audience statistics — no cross-site tracking, no advertising and no sharing with third parties.
- You can withdraw consent at any time via Cookie settings in the footer.
4. How long we keep your data
We keep personal data only for as long as it is necessary for the purpose it was collected for, and no longer than the periods below:
- Demo & contact requests: for as long as needed to handle your enquiry and, where a commercial relationship follows, for its duration plus any legally required limitation periods.
- Server logs: for a limited period necessary to operate and secure the website, and longer only where a security incident requires it.
- Analytics data: for no longer than needed to produce audience statistics; beyond that, only aggregated, non-identifying figures are kept.
You can ask us at any time, at the address in section 1, how long a specific category of data is currently retained.
5. Recipients and processors
We do not sell personal data, and we do not share it with third parties for their own purposes. Data may be accessed by service providers acting as processors under Article 28 GDPR, strictly on our instructions:
- OVHcloud (OVH Groupe SAS, France) — infrastructure hosting for the website and the self-hosted analytics service, in EU data centres.
- Brevo (Brevo SAS, France) — transactional email delivery for demo and contact requests submitted through the website.
Beyond processors, data will only be disclosed where a legal obligation requires it (e.g. to courts or public authorities).
6. International transfers
All personal data is stored and processed within the European Union. We do not transfer personal data outside the European Economic Area.
7. Your rights
Under the GDPR you may exercise, at any time and free of charge, the rights of:
- Access — know whether we process your data and obtain a copy.
- Rectification — correct inaccurate or incomplete data.
- Erasure — have your data deleted when it is no longer needed.
- Restriction — limit processing in the cases provided by law.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdrawal of consent — at any time, without affecting the lawfulness of prior processing.
To exercise them, write to info@grexid.eu from the address you wish to exercise rights over, or by post to our registered office, indicating the right you wish to exercise. We may request additional information to verify your identity where reasonable doubts exist.
If you believe your rights have not been respected, you may lodge a complaint with the Belgian Data Protection Authority (APD/GBA) — www.dataprotectionauthority.be, Rue de la Presse 35 / Drukpersstraat 35, 1000 Brussels — or with the supervisory authority of your own EU member state.
8. Security
GrexID SRL (in formation) applies technical and organisational measures appropriate to the risk — including encrypted transport (TLS), access control, minimisation and hosting with EU-based providers where configured — to protect personal data against unauthorised access, alteration, loss or disclosure.
9. Minors
This website is aimed at business audiences and is not directed at minors. We do not knowingly collect data from anyone under 13 years of age.
10. Changes to this policy
We may update this policy to reflect legal or operational changes. The current version, with its revision date, will always be published on this page.