Privacy & Cookie Policy
Last updated: 14 July 2026 - Version 2026-07-14
1. Who we are (data controller)
- Trading name: HolaGranada
- Legal name: Jensen Technologies SL
- NIF / CIF: ESB18987875
- Registered address: Calle Granada 21, 18008 Granada, Spain
- Contact email: hello@holagranada.com
Data Protection Officer (DPO): A DPO is not mandatory for Jensen Technologies SL under GDPR Art. 37(1), as the company does not carry out large-scale systematic monitoring of individuals or process special categories of data at scale. Data protection enquiries and rights requests may be addressed to Soren Beck Jensen at hello@holagranada.com.
2. What personal data we collect and why
We collect personal data only for specific, legitimate purposes. The table below sets out each processing activity.
| Purpose | Data collected | Legal basis | Retention |
|---|---|---|---|
| Responding to contact and enquiry forms | Name, email address, message content, topic selected | Legitimate interests (Art. 6(1)(f) GDPR) - responding to a direct enquiry you initiated | 3 years from last contact, then deleted |
| Providing paid relocation services under a contract | Name, email, service details, correspondence, documents you provide | Performance of a contract (Art. 6(1)(b) GDPR) | 5 years from contract end (Spanish commercial and tax law requirements) |
| Sending the relocation checklist (lead magnet) | Email address | Consent (Art. 6(1)(a) GDPR) - you explicitly requested the resource | Until you unsubscribe or withdraw consent; confirmation link expires after 7 days |
| Marketing newsletter (optional) | Email address, date and time of opt-in, consent version | Consent (Art. 6(1)(a) GDPR) - you ticked the optional marketing box | Until you unsubscribe or withdraw consent |
| Website analytics | Pseudonymous identifiers, pages visited, referral source, device and browser type, approximate location (country/city) | Consent (Art. 6(1)(a) GDPR) - only activated after you accept analytics cookies | 26 months in Google Analytics; raw event data 14 months |
| Cookie-consent record | Your consent choices, timestamp, policy version (stored locally in your browser only) | Legal obligation / legitimate interests (Art. 6(1)(c)(f) GDPR) - demonstrating compliance with ePrivacy rules | Until you clear your browser storage or change your preferences |
| Compliance with legal obligations (e.g. tax, invoicing) | Name, address, NIF/NIE/passport, invoice data | Legal obligation (Art. 6(1)(c) GDPR) - Spanish tax and commercial law | 5 years (general commercial period); 10 years where required by specific tax law |
3. Recipients and processors
We share data only where necessary. The following third-party processors receive personal data on our behalf:
- Replit, Inc. (website hosting) - the website and its server infrastructure are hosted on Replit's platform. Replit receives data that passes through the server (form submissions, server logs). Replit is based in San Francisco, CA, USA. Data is transferred to the United States under Standard Contractual Clauses (SCCs). Replit's privacy policy: replit.com/site/privacy.
- Google LLC (Google Analytics 4) - website analytics. Data is transferred to the United States under Standard Contractual Clauses (SCCs). You can opt out of analytics via our cookie consent settings or by installing the Google Analytics Opt-out Browser Add-on . Google's privacy policy: policies.google.com/privacy.
- Google LLC (Google Fonts) - web fonts loaded from fonts.googleapis.com. Your IP address may be transmitted to Google servers in the United States when font files are requested. Google's policy applies.
- Mailgun (Sinch AB) - transactional email delivery for contact form notifications and resource downloads. Data may be processed in the EU or United States. A data-processing agreement is in place. See mailgun.com/legal/privacy-policy.
We do not sell, rent, or share your personal data with third parties for their own marketing purposes. We may disclose data to public authorities where required by law.
4. International transfers
The processors listed above (Replit, Inc. and Google LLC) are based in the United States. Transfers to the United States are carried out under Standard Contractual Clauses (SCCs) approved by the European Commission, as required by GDPR Chapter V. The EU-US Data Privacy Framework (2023) may also apply where the recipient is certified under that framework.
Replit, Inc. and Google LLC are the only entities outside the European Economic Area (EEA) that receive personal data through use of this website. No other international transfers take place.
5. Cookies and tracking technologies
Cookies are small text files stored in your browser when you visit a website. They allow the website to remember information about your visit - such as your preferences or whether you have visited before. Similar technologies include local storage (used to save your cookie-consent choices on this site), pixel tags, and web beacons.
Cookies are governed in Spain by the LOPDGDD (Ley Organica 3/2018) and the ePrivacy Directive (2002/58/EC as amended), which require informed, specific, and freely given consent before non-essential cookies are set. Non-essential cookies (including Google Analytics) are only activated after you give your consent via the cookie banner shown on your first visit. You can change your choices at any time using the "Cookie preferences" link in the website footer.
Cookies we use
The table below lists every cookie and similar technology currently active on this website, based on an audit conducted on 14 July 2026. If we add new technologies in future, we will update this page and renew your consent where required.
| Name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
| hg_cookie_consent | HolaGranada | Strictly necessary | Stores your cookie-consent preferences (analytics on/off, marketing on/off), the timestamp of your choice, and the policy version in effect. Saved in browser localStorage - not transmitted to any server. | Persistent (until browser storage is cleared) |
| _ga | Google Analytics 4 | Analytics (consent required) | Distinguishes unique users by assigning a randomly generated pseudonymous client ID. Used to calculate visits and sessions in Google Analytics. Only set if you accept analytics cookies. | 2 years |
| _ga_B47ZM887LB | Google Analytics 4 | Analytics (consent required) | Maintains session state and tracks page views within a single GA4 property. Specific to this website's GA4 measurement ID. Only set if you accept analytics cookies. | 2 years |
Third-party requests (not cookies)
The following services make outbound network requests from your browser but do not currently set cookies. They may receive your IP address and browser details as part of normal HTTP requests.
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) - web font files are loaded from Google's servers. Your IP address is transmitted to Google in the United States. Google states that no persistent cookies are set solely for font delivery; however, Google's general privacy policy applies.
Google Analytics and Consent Mode
We use Google Analytics 4 (GA4) with Google Consent Mode v2. This means:
- Before you make a consent choice, all analytics and advertising storage is set to "denied" by default. Google Analytics does not receive identifiable data and does not set cookies.
- If you accept analytics cookies, analytics storage is updated to "granted" and GA4 begins collecting pseudonymous usage data (pages visited, session duration, referral source, approximate location at city level, device type).
- Data is processed by Google LLC, whose servers are primarily located in the United States. Transfers are made under Standard Contractual Clauses. See Google's Privacy Policy .
- You can opt out at any time by changing your cookie preferences (link in footer) or by installing the Google Analytics Opt-out Browser Add-on .
Managing your preferences
You can change your cookie choices at any time using the button below or via the "Cookie preferences" link in the website footer. Changes take effect immediately in your browser.
You can also manage or delete cookies directly in your browser settings. Note that disabling all cookies may affect the functionality of some websites. Instructions for common browsers:
6. Your rights
Under GDPR and the LOPDGDD you have the following rights:
- Access (Art. 15 GDPR): request a copy of the personal data we hold about you.
- Rectification (Art. 16 GDPR): request correction of inaccurate or incomplete data.
- Erasure (Art. 17 GDPR): request deletion of your data in certain circumstances (the "right to be forgotten").
- Restriction (Art. 18 GDPR): request that we restrict processing while a dispute is resolved.
- Data portability (Art. 20 GDPR): receive your data in a structured, machine-readable format where processing is based on consent or contract.
- Objection (Art. 21 GDPR): object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds.
- Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, email us at hello@holagranada.com with the subject line "Data rights request". We will respond within one month. We may ask you to verify your identity before processing the request.
7. Right to lodge a complaint
If you believe your data-protection rights have been violated, you have the right to lodge a complaint with the Spanish data-protection supervisory authority:
Agencia Espanola de Proteccion de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid, Spain
www.aepd.es
Telephone: +34 912 663 517
You may also contact the supervisory authority in the EU member state where you reside, work, or where the alleged infringement took place.
8. Security
We apply appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. Our website is served over HTTPS. Access to data is restricted to personnel with a legitimate need.
No method of internet transmission is completely secure. If you believe your data has been compromised, contact us immediately at hello@holagranada.com.
9. Children
Our services are intended for adults. We do not knowingly collect personal data from individuals under 14 years of age (the age of consent for data processing in Spain under LOPDGDD Art. 7). If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.
10. Changes to this policy
We may update this policy from time to time. The version date at the top of this page will be updated whenever material changes are made. Where changes affect non-essential cookies, we will renew your consent. Where required, we will notify you by email or through a prominent notice on the website.
11. Contact
For any questions about this policy or how we handle your data, please contact us at hello@holagranada.com.