Privacy policy

Last updated: 15 October 2026

This policy explains how we process the personal data of visitors to the website gpuworld.it (the “Website”) and of those who purchase and use our remote optimization services, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”).

Data controller

The data controller is the holder of VAT number IT04155810924, trading under the GPUWORLD® brand (“GPUWORLD®”, “we”, “us”).

For any question about your data, you can write to us at gpuworldteam@gmail.com.

Personal data we process

Browsing the Website: technical data needed for the Website to work, such as IP address, device and browser type, language, pages visited, date and time, and necessary cookies. Analytics and marketing data only with your consent (see “Cookies and tracking tools”).
Purchase and payment: the data you enter on Stripe’s payment page, for example name, email and card details, any discount code and your acceptance of the Terms of Service. GPUWORLD® does not receive the full card number or the security code: we receive the transaction data that Stripe makes available to us.
Invoice: first name, last name, Italian tax code (codice fiscale), full address and email and, for businesses, the VAT number.
Booking: the data you enter in Calendly, such as name, email, day and time of the session and your answers to the form’s questions.
Discord ticket: your Discord username and ID, the messages and files you send in the ticket, including the information on your PC’s configuration and the problems encountered that you give us during the preliminary check, and your participation in the voice call, which is not recorded.
Remote session: your AnyDesk ID and connection data; technical information about the PC (components, BIOS/UEFI, operating system, drivers, network, installed software, temperatures and test results); what appears on the screen during the session, including the screen recording. See “Remote session and screen recording”.
Communications: the emails you send us and our replies.
Customers under 18: also the data of the parent or guardian and their written confirmation in the ticket (see “Minors”).

The service does not require special categories of data, for example health data: avoid showing them on the screen during the session.

Where the data comes from

From you, when you pay, book, give us your invoicing details, write to us in the ticket or by email, and during the session.
From your device, automatically, when you visit the Website (through Shopify and cookies) and when you connect with AnyDesk.
From the providers we use: Stripe for payment data, Calendly for booking data, Discord for ticket messages.

Purposes and legal bases

Selling and providing the service (payment, booking, ticket, preliminary check, session, support in the following 7 days): performance of the contract (Article 6(1)(b) GDPR).
Answering your questions before purchase, for example in the consultation on Discord: pre-contractual steps taken at your request (Article 6(1)(b)).
Issuing the invoice and meeting accounting and tax obligations: legal obligation (Article 6(1)(c)).
Handling withdrawals, complaints and refunds: legal obligation and performance of the contract (Article 6(1)(c) and (b)).
Recording the screen during the session, to document the work and be able to reconstruct it in case of disputes: our legitimate interest in establishing, exercising or defending our rights (Article 6(1)(f)).
Calculating creators’ commissions for discount codes: our legitimate interest (Article 6(1)(f)). Creators receive only the number of uses of their code and the related amounts, without data that identifies you.
Operation and security of the Website and prevention of payment fraud: our legitimate interest (Article 6(1)(f)).
Analytics and marketing through the Website’s cookies and pixels: your consent (Article 6(1)(a)), which you can withdraw at any time.
Establishing, exercising or defending legal claims, in or out of court: our legitimate interest (Article 6(1)(f)).

We do not send customers promotional communications by email or messages. The Website’s marketing cookies and pixels are described separately, under “Cookies and tracking tools”.

Remote session and screen recording

Remote sessions include the booked session and any corrective work carried out with AnyDesk during the after-sales support provided for in the Terms of Service. What is described in this section applies to each of them.

The work is carried out personally by the business owner with the AnyDesk program, while we are on a Discord call. We access your PC only after you have accepted the connection request in AnyDesk, and you remain present for the whole session. During access we see what appears on the screen and work on the settings, drivers, BIOS/UEFI and software needed for the service.

AnyDesk. The program is provided by AnyDesk Software GmbH (Türlenstraße 2, 70191 Stuttgart, Germany), which processes the data needed for the connection, such as your AnyDesk ID and IP address, under its own privacy policy. According to that policy, AnyDesk does not store session content beyond what is needed to transmit it.

Screen recording. Before the session we give you a notice about the recording in the ticket. During the session we use the OBS program to record only your PC’s screen, without audio: the voice of the call is not recorded. The recording is used to document the work in case of disputes; the legal basis is stated under “Purposes and legal bases”. Recordings are kept on a protected external SSD and are deleted manually 30 days after the relevant session. They are accessed by the business owner and by the moderators of our Discord server, according to their respective authorizations.

The recording may capture everything that appears on the screen, including notifications and open windows: before the session, close documents, emails and programs with personal content and turn off notifications.

The recording is provided for in the Terms of Service, but accepting the Terms is not consent to the recording and does not replace this policy. You can object to the recording on grounds relating to your particular situation (Article 21 GDPR) by telling us in the ticket before the session: in that case we carry out the session without recording it and document the work carried out in the ticket.

The Website uses Shopify’s cookie banner. Cookies necessary for the Website to work (for example for the language and to remember your cookie choice) are always active. Analytics and marketing cookies and pixels are activated only if you give your consent.

As of the date of the latest update, the Website uses:

Shopify’s necessary cookies, for example localization for the language and the one that remembers your cookie choice;
Shopify’s analytics and marketing cookies, only with consent;
two Shopify pixels (the Shopify app pixel and a custom pixel), configured for analytics and marketing and loaded only after consent.

The Website’s fonts are hosted on Shopify together with the Website: displaying them does not involve requests to Google Fonts servers.

Shopify also collects some browsing data for the operation and security of the platform, as described in its privacy policy.

You can change your choice at any time with “Cookie preferences” at the bottom of every page. The full list of Shopify cookies, with their duration, is on the Shopify cookies page.

Who receives the data

The business owner, who is the controller and carries out the work personally.
The moderators of our Discord server, authorized by us, who see the tickets and, according to the authorizations assigned to each of them, access the screen recordings and the Shopify, Stripe, Calendly and Gmail dashboards.
The providers listed in the next section, each in its own role.
The Italian Revenue Agency (Agenzia delle Entrate) and other public authorities, for tax obligations and in the other cases provided for by law.
Creators promoting discount codes receive only the number of uses and the amounts related to their code, without data that identifies you.

Providers and platforms we use

Each provider processes data according to its own role, defined by its contract: on our behalf, as a processor (Article 28 GDPR), or also for its own purposes, as an independent controller.

Shopify – platform the Website runs on. It processes browsing data on our behalf and, for some purposes of its own, as an independent controller, as described in its privacy policy.
Stripe – payment processing and recording of the acceptance of the Terms. For some processing, for example fraud prevention and legal obligations, it acts as an independent controller: see its privacy policy.
Calendly – session booking: see its privacy policy.
Discord – ticket, messages and call. Discord processes your account data as an independent controller, under its privacy policy; we process the ticket’s messages and files in our server.
AnyDesk – remote access during the session (see “Remote session and screen recording”).
Google – email service (gpuworldteam@gmail.com): see Google’s privacy policy.

Transfers outside the European Economic Area

Some providers, or companies in their groups, may process data outside the European Economic Area, for example in the United States or Canada; AnyDesk states that it also operates through subsidiaries outside the European Union. In these cases the transfer is based, as stated by the providers, on an adequacy decision of the European Commission, for example for companies participating in the EU-U.S. Data Privacy Framework, or on standard contractual clauses approved by the Commission.

You can ask us for information about the safeguards in place using the contact details in this policy.

Retention and security

Each category of data has its own retention period, linked to the purpose for which we keep it: deleting one does not delete the others.

Discord tickets, including the work documented in the ticket and the parent’s or guardian’s confirmations: deleted 7 days after the completion of the work. The ticket bot does not keep copies or transcripts after deletion. Discord processes your account data under its own policy.
Screen recordings: kept on a protected external SSD and deleted manually 30 days after the relevant session.
Invoices and other tax documents containing your data: until the tax assessments for the tax period to which they relate have been finalized, as required by Article 22 of Presidential Decree 600/1973. The assessment period ordinarily ends on 31 December of the fifth year after the year in which the tax return was filed (Article 43 of Presidential Decree 600/1973). Other Stripe data and emails are not covered by this obligation.

Data kept by Stripe: Stripe also keeps transaction data as an independent controller, for its own legal obligations, under its privacy policy.
AnyDesk connection data: processed by AnyDesk under its policy.
Cookies: for the duration stated by Shopify for each cookie.

We protect data with measures appropriate to the type of processing; however, no system is completely secure.

Obligation to provide data and automated decisions

Payment, invoicing, booking and contact data are necessary to purchase and provide the service: without them we cannot provide it. Consent to analytics and marketing cookies is optional and the Website works without it.

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).

Your rights

You can ask us at any time for access to your data, rectification, erasure, restriction of processing and portability of the data you provided to us (Articles 15–20 GDPR). You can object to processing based on our legitimate interest, including the screen recording (Article 21), and withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, write to us at gpuworldteam@gmail.com. We will reply free of charge within one month, which may be extended by two further months for complex requests (Article 12 GDPR). We may ask you for information to verify your identity.

Complaints

If you believe that the processing of your data infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the EU Member State where you live or work (Article 77 GDPR). You can also write to us first: we will try to solve the problem.

Minors

If the customer is under 18, the service is carried out only with the involvement of a parent or guardian: before the session, the parent or guardian confirms their authorization in writing in the ticket, receives the notice about the screen recording and is present during the session. In these cases we also process the parent’s or guardian’s data needed for the purchase and the session.

For optional cookies, in Italy consent to information society services can be given from the age of 14 (Article 2-quinquies of the Italian Personal Data Protection Code). Using Discord requires meeting Discord’s minimum age.

Third-party websites and services

The Website contains links to third-party services, such as Discord, Instagram, TikTok and X. When you use them, the privacy policies of their respective providers apply.

Changes to this policy

We may update this policy, for example if the services, the providers or the law change. The date of the latest update is shown at the top of the page.

Contact

GPUWORLD®
Email: gpuworldteam@gmail.com
Discord: https://discord.gg/gpuworld

Questions about this document?

Get in touch with us on Discord.

Message us on Discord