1. Who we are
Gremsy Joint Stock Company ("Gremsy", "we", "us"), 2841 Pham The Hien, Binh Dong Ward, Ho Chi Minh City, Vietnam, operates gremsy.com and gremsy.us (the "Sites"). We are the controller of personal data collected through the Sites and a "business" under applicable U.S. state privacy laws. You can reach us at [email protected].
This policy covers the Sites only. Our Vietnamese-language website gremsy.vn is governed by a separate policy, and any Gremsy app or product will have its own notice.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Identifiers and contact details | Name, work email, phone number, company, job title, country | You, via forms (contact, quote request, newsletter, document download) |
| Commercial information | Product inquiries, quote requests, support requests | You |
| Professional and employment information | CV/résumé, education, work history, cover letter | Job applicants |
| Internet and device activity | IP address, browser, operating system, pages viewed, referring page, cookie identifiers | Automatically, via cookies and similar technologies |
| Approximate location | City/country inferred from IP address | Automatically |
| Communications | Content of messages you send us | You |
We do not intentionally collect sensitive personal information (for example government ID numbers, health, or financial account data). Please do not include it in forms or applications.
3. How we use information and our legal bases
| Purpose | Legal basis (EEA/UK GDPR) |
|---|---|
| Respond to inquiries, quote and support requests | Legitimate interests (running our business and responding to you), or steps at your request before a contract |
| Send newsletters, technical updates and marketing | Consent (where required by law) or legitimate interests for existing business contacts where permitted; you can opt out at any time |
| Recruit and assess job applicants | Consent / steps at your request before entering an employment contract |
| Analyze Site traffic and improve performance | Consent for non-essential cookies; legitimate interests for strictly necessary and security measures |
| Secure the Sites, prevent fraud and abuse | Legitimate interests |
| Comply with law, export-control and sanctions screening, and respond to legal requests | Legal obligation; legitimate interests |
4. Cookies and similar technologies
We use strictly necessary cookies (session, security, anti-spam) and, subject to your choices, analytics cookies.
- EEA/UK visitors: non-essential cookies are placed only after you opt in through our cookie banner. You can withdraw consent at any time via the cookie settings link in the footer.
- California and other U.S. visitors: you can opt out of cookies that sell or share personal information through the cookie settings link. We honor Global Privacy Control (GPC) signals as a valid opt-out request.
- Our first-party analytics cookie (gremsy_vid) holds a random identifier valid for 12 months. You can also manage cookies in your browser settings.
5. How we disclose information
We do not sell personal information. We disclose information only to:
- Service providers acting on our instructions under written agreements, such as hosting/cloud, email delivery, analytics, anti-spam, CRM and recruitment systems.
- Authorities and advisers where required by law or to protect rights, safety and security, or in connection with a corporate transaction such as a merger or sale.
In the past 12 months we have disclosed identifiers, contact details, commercial information and internet/device activity to service providers for the business purposes above.
6. International transfers
Gremsy is based in Vietnam and our providers may process data in Vietnam, the United States and other countries. If you are in the EEA or UK, we transfer your data using safeguards recognized by law, such as Standard Contractual Clauses, and you may request a copy of them via the contact details below.
7. Retention
| Data | Retention |
|---|---|
| Inquiries and business contacts | 24 months after last interaction, unless you ask us to delete earlier |
| Marketing subscriptions | Until you unsubscribe or withdraw consent |
| Job applications | Deleted when the recruitment process ends if you are not hired; up to 12 months only if you separately agree to be considered for other roles |
| Analytics cookie identifiers | Up to 12 months |
| Security logs | As required by applicable law |
After these periods we delete, de-identify or anonymize the data unless the law requires longer retention.
8. Security
We protect personal data with measures including TLS encryption in transit, role-based access control, segregated storage for applicant and contact data, and bot/spam protection. No system is completely secure, but we review and improve these measures regularly.
9. Your rights
EEA and UK residents
You may request access, rectification, erasure, restriction, portability and object to processing, and withdraw consent at any time. You may lodge a complaint with your local data protection authority.
California and other U.S. state residents
Depending on your state, you may request to know/access the personal information we hold and how it is used, correct it, delete it, obtain a portable copy, opt out of sale, sharing or targeted advertising, and limit use of sensitive personal information. We do not discriminate against you for exercising these rights.
Vietnamese residents
You have the rights provided by Vietnam's Law on Personal Data Protection and Decree 356/2025/NĐ-CP, including the right to be informed, to consent or withdraw consent, to access, correct, delete, restrict or object to processing, and to complain. See our Vietnamese policy at gremsy.vn for details.
How to exercise your rights
Email [email protected]. We will verify your identity by matching details you provide with information we hold. An authorized agent may submit a request on your behalf with written proof of authorization. We respond within one month (GDPR) or 45 days (CCPA/CPRA), and may extend where the law allows. If we decline a request, you may appeal by replying to our response; where state law requires, you may also contact your state attorney general.
10. Marketing communications
We send marketing emails with your consent or as otherwise permitted by law. Every message includes an unsubscribe link and our postal address. Opting out of marketing does not affect transactional messages about your request.
11. Job applicants
We use applicant data only to assess and manage recruitment. If you are not hired, we delete your application at the end of the process unless you agreed to a longer retention period.
12. Children
The Sites are not directed to children under 16 and we do not knowingly collect their personal information. If you believe a child has provided data to us, contact us and we will delete it.
13. Changes to this policy
We may update this policy and will post the new version with a revised date. For material changes we will provide additional notice or request consent where required by law.
14. Contact
- Gremsy Joint Stock Company, 7F, SCS Building, D1 Road, Saigon Hi-Tech Park, Tang Nhon Phu Ward, Ho Chi Minh City, Vietnam
- Privacy contact: Gremsy Legal Department, [email protected], +84 28 7105 1585
Questions about this policy or a request about your data? Write to [email protected].