                At GrowLanding we respect your privacy. This policy explains what data we collect, what we use it for, who we share it with and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).
            

1. Data controller

Identity: GrowLanding — Daniel Simarro Reigada
Tax ID (NIF): 79147331F
Address: Marbella, Málaga, Spain
Contact: info@growlanding.com

2. Personal data we collect

2.1 Contact form

When you fill in our contact form we collect: name, email address, phone number (optional), type of business (optional), service of interest and the message you send us.

2.2 Appointment booking (Cal.com)

If you book an appointment through our scheduling system (Cal.com), Cal.com collects the data required to manage your booking — name, email and time zone — in accordance with its own privacy policy.

2.3 Browsing and analytics data

We use Google Analytics 4 to collect aggregated, anonymised statistics about how visitors browse the Site (pages visited, time on site, device type, approximate origin), in order to improve it. This tool is only activated if you give your prior consent via the cookie banner; see our Cookie Policy for more details.

2.4 Advertising and remarketing

The Site does not use advertising or remarketing cookies. If campaigns using such technologies are activated in the future, your prior consent will be requested and this policy will be updated.

2.5 Technical data

Like any web server, our system automatically logs the originating IP address, browser used, operating system and date and time of access. This data is used exclusively for the maintenance and security of the Site.

3. Purposes and legal bases of processing

Purpose	Legal basis	Retention period
Responding to your enquiry or quote request	Legitimate interest (Art. 6.1.f GDPR) / performance of pre-contractual measures (Art. 6.1.b GDPR)	3 years from last contact
Sending you the automatic confirmation of your enquiry	Legitimate interest (Art. 6.1.f GDPR)	Until the enquiry is resolved
Server security and maintenance	Legitimate interest (Art. 6.1.f GDPR)	30 days (server logs)

4. Recipients and international transfers

GrowLanding does not sell or disclose your personal data to third parties. However, in order to provide our services we work with the following providers acting as data processors:

Cal.com Inc. (USA) — Management of the appointment booking system. The transfer is carried out under Standard Contractual Clauses approved by the European Commission. More information: Cal.com privacy policy.
Hosting provider (Hostinger) — Data is hosted on servers located in the European Union.
Google LLC (USA) — Google Analytics 4, used only with your prior consent. The transfer is carried out under the EU–US Data Privacy Framework. More information: Google privacy policy.

5. Data subject rights

Under the GDPR, you have the right to:

Access: obtain confirmation of whether we process your data and, where applicable, access it.
Rectification: request the correction of inaccurate or incomplete data.
Erasure ("right to be forgotten"): ask us to delete your data when it is no longer necessary or you withdraw your consent.
Restriction of processing: request that we suspend the processing of your data in certain circumstances.
Portability: receive your data in a structured, commonly used format in order to transmit it to another controller.
Objection: object to processing based on legitimate interest or for direct marketing purposes.
Withdrawal of consent: where processing is based on your consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, send an email to info@growlanding.com indicating the right you wish to exercise and attaching a copy of your national ID or other identifying document. We will respond within one month at the latest.

If you believe that the processing of your data does not comply with the regulations, you also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

6. Data security

GrowLanding applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk of the processing: HTTPS encryption, password-restricted access, regular backups and regular system security updates.

7. Changes to this policy

We may update this Privacy Policy from time to time. We will publish any changes on this page with the new update date. If the changes are substantial, we will notify you prominently. We recommend that you review this page periodically.