Privacy policy
Last updated: 20/08/2026
1. Data controller
- Controller
- GRANITTOR INC.
- Tax ID (NIF)
- Folio Mercantil Nº 155786956 (Registro Público de Panamá)
- Registered address
- Panamá, provincia de Panamá, República de Panamá
- info@granittor.com
- Phone
- +34 664 80 02 52
- Data Protection Officer
- No aplica
2. Purposes of processing and legal basis
| Purpose | Data processed | Legal basis |
|---|---|---|
| Responding to enquiries and requests sent through the contact form | Name, email, phone and message content | Consent of the data subject (art. 6.1.a GDPR) and pre-contractual measures (art. 6.1.b GDPR) |
| Preparing and sending information proposals | Contact details and details of the request | Pre-contractual measures at the data subject request (art. 6.1.b GDPR) |
| Managing the commercial and accounting relationship | Identification and billing data | Performance of a contract (art. 6.1.b) and legal obligation (art. 6.1.c GDPR) |
| Sending commercial communications, where requested | Name and email | Consent of the data subject (art. 6.1.a GDPR) |
| Website usage analytics | Browsing data | Consent, given through the cookie banner |
Additional purposes declared by the owner: Atender las solicitudes de información recibidas a través del sitio web y, en su caso, preparar y remitir propuestas de servicio
3. Retention period
Data is retained for as long as the relationship continues and erasure has not been requested. Thereafter it is kept blocked for the applicable statutory limitation periods (in particular those set out in tax and commercial legislation). Period indicated by the controller: mientras dure la relación y, después, durante los plazos de prescripción legal.
Data processed on the basis of consent is retained until that consent is withdrawn.
4. Recipients and processors
Data is not disclosed to third parties except where required by law. The following providers access the data as processors, under a contract signed in accordance with article 28 GDPR:
- Web hosting: OVHcloud, with servers located in {{HOSTING_UBICACION}}. More information at https://www.ovhcloud.com/es-es/personal-data-protection/
- Website development and maintenance: Digizone Labs, which receives a copy of the requests sent through the contact form in order to provide technical support and ensure the site works correctly.
- Technical processing of the form: Supabase, whose functions infrastructure receives the form data and triggers the delivery of the email to the owner.
- Transactional email delivery: Resend, used to deliver the requests submitted through the contact form to the owner.
- Other providers: No hay otros encargados del tratamiento
International transfers: Sí. El responsable del tratamiento está domiciliado en la República de Panamá, país que no cuenta con decisión de adecuación de la Comisión Europea. Las transferencias se amparan en cláusulas contractuales tipo. Where they occur, they are covered by a European Commission adequacy decision or by standard contractual clauses.
5. Data subject rights
Any person may exercise the rights of access, rectification, erasure, objection, restriction of processing, portability and not to be subject to automated individual decision-making, by writing to info@granittor.com or to Panamá, provincia de Panamá, República de Panamá, stating the right being exercised and attaching a copy of an identity document.
Where processing is based on consent, that consent may be withdrawn at any time, without affecting the lawfulness of processing carried out beforehand.
If you believe your data is not being processed correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.
6. Security
GRANITTOR INC. applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with article 32 GDPR, including encryption in transit (HTTPS), access control and backups.
7. Accuracy of the data
Users warrant that the data they provide is accurate and undertake to notify any changes. They are responsible for any false or inaccurate information they supply.
8. Minors
The Website is not directed at children under 14. GRANITTOR INC. does not knowingly collect data from children under that age without the consent of their parents or legal guardians.
10. Changes to this policy
This policy may be updated to reflect legislative developments or changes in processing activities. We recommend reviewing it periodically.