Privacy notice
Last updated on 13 October 2026
This notice explains how personal data is processed for visitors to www.kaigrid.ai (the "Site"), for anyone who fills in the "Request information" form, and for anyone who signs in to the reserved area, under Regulation (EU) 2016/679 ("GDPR") and applicable Italian law. We do not sell data and do not pass it to third parties for marketing purposes. The Italian version is the authoritative one.
1. Data controller
The data controller is GRK Interactive S.r.l., registered office at via Bergognone 27, 20144 Milan (MI), Italy, tax code and VAT number 05814140967, registered with the Milan Companies Register under no. 05814140967, REA MI-1850299. For any data protection matter you can write to privacy@grk.agency.
2. Data processed
- Information requests: first name, last name, company name, business email, phone, the topic you choose and your message, if you write one; together with the consents you give, with the date and the wording shown.
- Reserved area: when you sign in with your KaiGrid account, the Site receives your name, your email, an account identifier and your company from the sign-in service, to show you the applications active for your company. The Site never sees or stores your password.
- Technical data: IP address and browser information, processed by the server hosting the Site and by the form's anti-bot check (section 5), to run the Site and protect it from abuse.
3. Purposes and legal bases
- Answering your request and, if you ask, arranging a demo or a presentation: pre-contractual measures taken at your request (Art. 6.1.b GDPR).
- Sending you news and offers about KAi GRID: only if you choose it in the form, with an optional consent you can withdraw at any time (Art. 6.1.a GDPR). Without that consent your request is handled all the same.
- Access to the reserved area: performance of the contract with your company (Art. 6.1.b GDPR).
- Site security and abuse prevention: the controller's legitimate interest (Art. 6.1.f GDPR).
4. How your request reaches us
When you send the form, you receive by email a copy of everything you filled in, and the same email reaches us. The Site keeps no separate archive of requests: your request stays in our mailbox and in the systems we use to handle it.
5. Providers processing data on our behalf
- Microsoft Ireland Operations Ltd (Ireland): the server hosting the Site and the mail used to send requests.
- Cloudflare (through Cloudflare Portugal): the form's anti-bot check (Turnstile), which processes your IP address and technical browser data under Cloudflare's Turnstile Privacy Addendum.
They are bound by data processing agreements (Art. 28 GDPR). Sign-in to the reserved area goes through the KaiGrid sign-in service, run by the controller itself.
6. Where the data is
Data is processed in the European Union. Cloudflare and Microsoft belong to groups based also outside the EU: any access from third countries is covered by the safeguards of Art. 44 et seq. GDPR, namely the European Commission's Standard Contractual Clauses and, for providers that adhere to it, the EU-US Data Privacy Framework.
7. How long
Information requests are kept for as long as needed to answer and follow up, and in any case no longer than 24 months after the last exchange, unless a contractual relationship arises. Consent to news and offers lasts until you withdraw it. Server technical data is kept only as long as strictly needed for security.
8. Your rights
You can exercise at any time the rights under Arts. 15–22 GDPR: access, rectification, erasure, restriction of and objection to processing, portability and withdrawal of consent, by writing to privacy@grk.agency. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
9. Cookies
How the Site uses cookies and similar tools is explained in the cookie policy.