Your data,
clear and looked after.

Who the controller is

The data controller is GRANIA SYSTEMS SL (in formation), who works under the brand Grania. NIF B05724547 (provisional).

For any privacy matter you can write to info@grania.ai.

What data I collect

Only what you give me:

• In the request form: name, email, business, website or social media, the service you are interested in and what you tell me about your case.
• If you write to me by email or WhatsApp: whatever you include in the message.
• If you arrive from an ad: which campaign you come from (the parameters of the web address, such as utm_campaign), which are attached to your request so that I know which ad works.
• When browsing: aggregated visit data without cookies (Vercel Web Analytics) and, only if you accept, Google Analytics.

What for and on what basis

To reply to your request and prepare a proposal for you: this is a pre-contractual measure that you ask for (art. 6.1.b GDPR).

To measure which pages work with Google Analytics: your consent in the cookie notice.

I do not build profiles, I do not make automated decisions about you and I do not sell or rent data.

The fields marked as mandatory in the form are necessary to handle your request: if you do not fill them in, I cannot prepare the proposal for you.

Who else sees your request

To prepare your proposal, your request is assigned to an advisor: an independent professional who works with Grania. She receives what you wrote in the form and nothing else, and can only use it to attend to you, under a data processing agreement that limits her to that.

Providers that process data on my behalf

I use these services under a data processing agreement. When any of them processes data outside the European Economic Area (United States), the transfer relies on the EU-US Data Privacy Framework and/or on the standard contractual clauses approved by the European Commission:

• Vercel Inc. — site hosting and cookie-free visit analytics (Vercel Web Analytics).
• Supabase Inc. — database where requests are stored.
• Resend Inc. — sending of confirmation emails and internal notification emails.
• Google Ireland Ltd. — Google Analytics 4, only if you accept measurement cookies.
• Meta Platforms Ireland Ltd. (WhatsApp) — only if you decide to message me on WhatsApp; its own policy applies.

How long I keep it

Requests that do not end up as a project are reviewed and deleted after 12 months at most. If we work together, the project data is kept for as long as it lasts and afterwards for the time the law requires for invoices and tax obligations (up to 6 years).

Your rights

You can ask for access, rectification, erasure, objection, restriction and portability of your data, and withdraw your consent, by writing to info@grania.ai. I reply within one month.

If you believe I have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

How it is protected

The site works only over an encrypted connection (HTTPS), the forms limit attempts and filter out automated submissions, access to the database is restricted to the service account, and the technical logs do not store your full email address.

Minors

The services are designed for businesses and professionals. If you are under 14, do not send your data.

Changes to this policy

If anything changes in how I process your data, I update it here with its date. If the change is important and I have your email, I let you know.