Privacy policy

Proyecto Desarrollo Comercial de Andalucía Garan S.A. is the controller of data collected through the form and virtual assistant. This policy explains the processing carried out by this site, not that of linked third-party websites. Contact channels are being verified and must be completed before this policy is published in final form.

The form collects name, email address, telephone number and company where provided, together with interest, project information, message and acceptance of the policy. It also records the referring page, campaign references, date and technical data needed to protect the form. We use this information to handle your enquiry, prepare a response and manage follow-up.

The chat stores a random conversation identifier and the messages sent. If you ask the team to contact you and confirm the privacy information, it may save your name, email address and stated requirement as an enquiry. Do not send sensitive data, passwords, confidential documents or other people’s data without a legitimate basis.

Confirmation messages and notices relating to an enquiry are used solely to manage it. These data are not used for advertising campaigns without a separate legal basis. Usage measurement, if Google Analytics is configured, requires your acceptance of analytical cookies.

Handling enquiries may be based on the pre-contractual steps you request; optional processing is based on consent, which you may withdraw without affecting the lawfulness of prior processing. Protection against misuse is based on the legitimate interest in maintaining service security. Legal obligations will be met where applicable.

Chat messages are kept for a maximum of twelve months and deleted once that period has expired. Enquiries are kept while being handled and reviewed to avoid retaining data that is no longer necessary. If a contractual relationship arises, legally required retention periods will apply. Data may be restricted where necessary to deal with legal liabilities. The controller must approve the enquiry retention policy and its specific periods.

Access is restricted to authorised staff and the providers needed to operate the service: Lovable Cloud and its hosting and data infrastructure; Resend for emails when configured; and the AI model service accessible through Lovable for chat. Google Analytics will process measurement data only if configured and its use is accepted.

Your data are not sold. They may be disclosed to authorities where required by law. The controller must check contracts, subprocessors, processing locations and security measures. For transfers outside the European Economic Area, applicable adequacy decisions or safeguards must be checked, including standard contractual clauses and any appropriate supplementary measures; no specific safeguard is claimed without reviewing the relevant contract.

Where applicable, you may request access, rectification, erasure, objection, restriction and portability, and withdraw your consent. Your request should allow us to identify you and specify the right you wish to exercise; additional documentation will be requested only where necessary and proportionate. The final channel for exercising rights is awaiting confirmation and must be added before this policy is published as final.

You may complain to the Spanish Data Protection Agency at www.aepd.es if you believe processing breaches the regulations. The assistant does not make decisions with legal effects concerning you and does not replace the team’s assessment.