Privacy Policy

GITSA LLC ("GITSA," "we," or "us") operates the GITSA websites and is responsible for personal information submitted through them.

This Privacy Policy applies to:

• the GITSA corporate website at gitsagroup.com, including the Contact form;
• the GITSA Global Research Center at research.gitsagroup.com, including research downloads, research subscriptions, and unsubscribe functionality;
• INSPIRE at inspire.gitsagroup.com, including INSPIRE subscriptions, subscription confirmation, subscriber access to publication content, and unsubscribe functionality; and
• research emails, INSPIRE emails, and Contact inquiry notifications sent in connection with these websites.

It does not apply to third-party websites linked from our websites, including LinkedIn.

Contact inquiries. When you submit the Contact form, we collect your first and last name, business email address, organization, country or market, job title (optional), inquiry topic, and message, together with the date and time of your submission and the Privacy Policy version in effect.

Research downloads. When you request research, the form asks for your full name, business email address, company, and job title. We record your business email address, company, job title, the research you requested, the Terms of Use and Privacy Policy versions you accepted, and the date and time of your request. Your name is stored only if you choose to receive GITSA Research emails, in which case it is saved with your subscriber record.

INSPIRE subscriptions. When you subscribe to INSPIRE, we collect your first and last name, email address, organization, country or market, job title (optional), your consent to receive INSPIRE emails, the date, time, consent version, and Privacy Policy version, and where you subscribed. Your subscription becomes active only after you confirm it using the link we email to you. If you unsubscribe, we record that you opted out and when.

INSPIRE subscriber access. To let active subscribers read INSPIRE publication content, we send time-limited, single-use access links by email and keep a record of those links and of subscriber sign-in sessions, including when they were created, used, and expire.

Research subscriptions. When you subscribe, directly or from the download form, we collect your business email address (and, from the download form, your name, company, and job title), your consent to receive research emails, the date, time, and consent version, and where you subscribed. If you unsubscribe, we record that you opted out and when.

When you visit our websites, our hosting and infrastructure providers automatically process technical data such as IP address, device and browser information, and request logs, as needed to deliver and secure the service. To limit abuse of our subscription forms, we may store a one-way scrambled (hashed) form of the requesting IP address alongside subscription and access requests; we do not store the IP address itself in those records. GITSA does not otherwise add this technical data to the inquiry, download, or subscriber records described above.

We do not intentionally collect sensitive personal data, payment-card data, or information from children through our websites. Please do not submit such information.

• Respond to inquiries submitted through the Contact form
• Deliver research materials you request
• Manage research and INSPIRE subscriptions and honor unsubscribe requests
• Confirm INSPIRE subscriptions and provide active subscribers with access to INSPIRE publication content
• Maintain records of consent, opt-out, and acceptance of our Terms of Use and Privacy Policy
• Send research and INSPIRE communications where you have consented
• Administer, secure, and protect our websites against security incidents, fraud, and abuse
• Analyze aggregate audience and research-interest trends
• Meet legal and compliance obligations and establish, exercise, or defend legal claims

Where applicable law requires a legal basis for processing, we rely on:

• taking steps you request, such as responding to your inquiry or delivering research;
• our legitimate interests in operating, securing, and improving a business-to-business website and research service;
• your consent for research marketing emails, where consent is required; and
• compliance with legal obligations and the establishment, exercise, or defense of legal claims.

Research emails are optional. The subscription checkbox on the download form is not preselected and is separate from your download; you can download research without subscribing. Direct subscriptions require that you check a consent box.

You can withdraw consent at any time using the unsubscribe link in any research email. Unsubscribing is free and does not require you to sign in.

INSPIRE emails are also optional. You can unsubscribe at any time using the unsubscribe link in any INSPIRE email.

GITSA does not sell personal information and does not disclose personal information for cross-context behavioral or targeted advertising.

We use the following service providers to operate our websites:

• Lovable and Lovable Cloud, for website hosting, application infrastructure, database, authentication, and private file storage
• Resend, for email delivery of Contact inquiry notifications to GITSA, of research communications, and of INSPIRE confirmation, access, and publication emails

These providers process personal information only as needed to provide their services to GITSA, subject to their terms and controls. We may also disclose information where required by law or to protect rights, safety, and security. Our website typefaces are served from our own websites, not from a third-party font service.

Because GITSA operates internationally and uses service providers, personal information may be processed in countries other than your country of residence, including the United States. GITSA and its service providers use applicable safeguards where required by law.

GITSA applies the following intended retention periods:

• Contact inquiries: up to 3 years after the last relevant interaction.
• Research download and consent records: up to 3 years, subject to any longer period reasonably required to maintain evidence of consent, withdrawal, or compliance.
• Active research subscribers: while the subscription remains active.
• Unsubscribed subscribers: we keep the minimum opt-out (suppression) information needed to ensure you are not re-subscribed or sent marketing communications by mistake.
• Research campaign records: up to 3 years.

Deletion under these periods is currently carried out through periodic manual review rather than automated deletion. Records may therefore remain until the next review after their retention period ends.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including restricted administrative access and private file storage. No system is completely secure, and we cannot guarantee absolute security.

Depending on applicable law, you may have the right to access, correct, delete, or receive a portable copy of your personal information; to restrict or object to certain processing; and to withdraw consent. We always honor objections to direct marketing.

Where applicable, you may also lodge a complaint with a relevant data protection regulator. To make a request, email privacy@gitsagroup.com. We may need to verify your request.

We do not make solely automated decisions that produce legal or similarly significant effects based on information submitted through our websites.

Our websites do not use analytics cookies, advertising cookies, tracking pixels, Google Analytics, or the LinkedIn Insight Tag, and public visitors are not tracked across sites. Cookies and browser storage are used only where strictly necessary to provide a service you request, for example to keep an INSPIRE subscriber signed in so they can access publication content, or to keep an authorized administrator signed in. These strictly necessary items are not used for advertising or to track you across sites. If we introduce non-essential cookies or tracking, we will update this policy and request consent where required.

Our websites are professional services and are not directed to individuals under 18.

Our websites may link to third-party websites, such as LinkedIn. Their privacy practices are governed by their own policies, not this one.

We may update this Privacy Policy when our websites, services, or applicable requirements change. The effective date above shows the current version. See also our Terms of Use.

For privacy questions or rights requests, email privacy@gitsagroup.com. For general business inquiries, email info@gitsagroup.com.