                At GrowLanding we respect your privacy. This policy explains what data we collect, what we use it for, who we share it with and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).
            

1. Data controller

Identity: GrowLanding — Daniel Simarro Reigada
Tax ID (NIF): 79147331F
Address: Marbella, Málaga, Spain
Contact: hola@growlanding.com

2. Personal data we collect

2.1 Contact form

When you fill in our contact form we collect: name, email address, phone number (optional), type of business (optional), service of interest and the message you send us.

2.2 Appointment booking (Cal.com)

If you book an appointment through our scheduling system (Cal.com), Cal.com collects the data required to manage your booking — name, email and time zone — in accordance with its own privacy policy.

2.3 Browsing and analytics data

The Site currently does not use analytics tools and does not collect browsing data for statistical purposes. If we activate such a tool in the future (for example, Google Analytics), your prior consent will be requested via a cookie banner and this policy will be updated to reflect it.

2.4 Advertising and remarketing

The Site does not use advertising or remarketing cookies. If campaigns using such technologies are activated in the future, your prior consent will be requested and this policy will be updated.

2.5 Technical data

Like any web server, our system automatically logs the originating IP address, browser used, operating system and date and time of access. This data is used exclusively for the maintenance and security of the Site.

3. Purposes and legal bases of processing

Purpose	Legal basis	Retention period
Responding to your enquiry or quote request	Legitimate interest (Art. 6.1.f GDPR) / performance of pre-contractual measures (Art. 6.1.b GDPR)	3 years from last contact
Sending you the automatic confirmation of your enquiry	Legitimate interest (Art. 6.1.f GDPR)	Until the enquiry is resolved
Server security and maintenance	Legitimate interest (Art. 6.1.f GDPR)	30 days (server logs)

4. Recipients and international transfers

GrowLanding does not sell or disclose your personal data to third parties. However, in order to provide our services we work with the following providers acting as data processors:

Cal.com Inc. (USA) — Management of the appointment booking system. The transfer is carried out under Standard Contractual Clauses approved by the European Commission. More information: Cal.com privacy policy.
Hosting provider (Hostinger) — Data is hosted on servers located in the European Union.

If Google services (Analytics, Ads) are activated in the future, Google LLC (USA) would act as a data processor under the EU–US Data Privacy Framework; this policy will be updated at that time.

5. Data subject rights

Under the GDPR, you have the right to:

Access: obtain confirmation of whether we process your data and, where applicable, access it.
Rectification: request the correction of inaccurate or incomplete data.
Erasure ("right to be forgotten"): ask us to delete your data when it is no longer necessary or you withdraw your consent.
Restriction of processing: request that we suspend the processing of your data in certain circumstances.
Portability: receive your data in a structured, commonly used format in order to transmit it to another controller.
Objection: object to processing based on legitimate interest or for direct marketing purposes.
Withdrawal of consent: where processing is based on your consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, send an email to hola@growlanding.com indicating the right you wish to exercise and attaching a copy of your national ID or other identifying document. We will respond within one month at the latest.

If you believe that the processing of your data does not comply with the regulations, you also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

6. Data security

GrowLanding applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk of the processing: HTTPS encryption, password-restricted access, regular backups and regular system security updates.

7. Changes to this policy

We may update this Privacy Policy from time to time. We will publish any changes on this page with the new update date. If the changes are substantial, we will notify you prominently. We recommend that you review this page periodically.