Privacy Policy for GranTransfers

Effective Date: March 31, 2026

1. Introduction

This privacy policy is established in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter "GDPR" or "the Regulation") for the protection of individuals with regard to the processing of personal data and on the free movement of such data. It applies to visitors of the GranTransfers website (hereinafter "the Site") and to anyone who has provided their contact details for inquiries, bookings, or to receive communications about our services.

With the help of this Privacy Policy, GranTransfers aims to openly and honestly notify you about all processing activities involving your data, the reasons we do so, your rights over your personal data, and how long we retain it.

If you do not agree with the terms of this Privacy Policy, please do not access the website or use our services.

2. Who We Are (The Data Processing Controller)

The controller of the processing of personal data is:

For the purposes of this Privacy Policy, the term "User" or "Users" refers to all persons over 18 years of age who access the Website or use our services. As a User, you declare that you have the necessary legal capacity to understand and accept this Privacy Policy in its entirety.

3. What Is Personal Data and Data Processing?

Personal data refers to any information that identifies or allows the identification of a person. This includes directly identifiable information such as name and surname, as well as indirect identifiers such as IP address, device information, and data obtained through cookies.

Data processing means any operation or set of operations performed on personal data, including collection, recording, storage, use, and disclosure.

4. What Type of Information Do We Collect?

4.1 Information You Provide

If you only access the Website without interacting with GranTransfers via contact or booking forms, we do not collect personal data beyond what you consent to share through cookies. When you voluntarily provide data through our forms, we may collect the following:

4.2 Payment Information

Payments are processed securely via Stripe. We do not store full payment card details on our servers. Bank details or card information is collected solely for the purpose of completing your transaction.

4.3 Automatically Collected Data

When you visit our Website, we may automatically collect:

4.4 User Responsibility

As a User, you guarantee that the personal data provided to GranTransfers is truthful, accurate, complete, and up to date. You are responsible for any direct or indirect damage that may arise from non-compliance with this obligation. If you provide data of third parties, you must have their consent and inform them of the contents of this Privacy Policy.

5. Through What Channels Do We Collect Your Personal Data?

We collect information through the following channels:

6. What Processing Do We Perform With Your Personal Data and for What Purposes?

We process your personal data for the following purposes:

6.1 Contracting and Provision of Services

To deliver the transportation services you have booked, including managing reservations, coordinating with drivers, and providing customer support.

6.2 Management to Finalize Service Contracting

When you express interest in our services but do not complete the booking process:

6.3 Commercial Communications

With your consent, or if you are an existing customer who has previously used our services, we may send you updates about GranTransfers services and relevant promotions. You may withdraw consent at any time.

6.4 Cookies and Analytics

We use cookies and similar technologies to analyze website traffic, improve user experience, and provide personalized content. You can control cookies through your browser settings. For more details, refer to our Cookie Policy.

6.5 Security and Fraud Prevention

To ensure the security of our services, prevent fraudulent activity, and protect our legal rights.

6.6 Compliance With Legal Obligations

To comply with applicable laws, regulations, and legal processes.

7. What Is the Legitimacy for the Processing of Your Data?

We process your personal data based on the following legal grounds:

8. How Long Do We Keep Your Data?

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, and to demonstrate compliance with legal obligations.

Purpose Retention Period
Contracting and service provision Up to six (6) years following the conclusion of service provision to address potential claims
Management to finalize contracting Until the transactional communication is sent; thereafter, if the contract is completed, data is retained as above
Commercial communications Until you withdraw consent or object; in any case, not exceeding two (2) years from the last interaction
Data processed based on legitimate interest Until you object to processing

After retention periods expire, data will be securely deleted or anonymized, except where retained for legal or regulatory compliance.

9. Your Rights (GDPR)

Under data protection law, you have the following rights:

Right Description
Right of Access To obtain confirmation of whether we process your personal data and to access that data.
Right of Rectification To request correction of inaccurate or incomplete data.
Right to Object To object to processing based on legitimate interests or for direct marketing purposes.
Right to Erasure (Right to be Forgotten) To request deletion of your personal data, subject to legal limitations.
Right to Restriction of Processing To request the suspension of processing under certain circumstances (e.g., while we verify data accuracy).
Right to Data Portability To receive your data in a structured, commonly used format and to transmit it to another controller.

How to Exercise Your Rights

You can exercise your rights by contacting us at:

Please include sufficient information to verify your identity.

If you believe your rights have not been adequately addressed, you have the right to lodge a complaint with the relevant supervisory authority (e.g., in the United States, the Federal Trade Commission or your state attorney general).

10. To Whom Do We Disclose Your Personal Data?

We do not sell your personal data. Your information may be shared with:

All third parties process data in accordance with applicable data protection laws and contractual obligations.

11. International Data Transfers

Your personal data may be transferred and processed outside your country of residence, including in the United States. When we transfer data internationally, we take appropriate measures to ensure your data remains protected, including reliance on adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including HTTPS encryption, secure data handling practices, and restricted access to personal information. However, no system is 100% secure, and we cannot guarantee the absolute security of your data.

13. Children’s Privacy

Our services are intended for individuals 18 years and older. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal information, please contact us immediately.

14. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and provide personalized content. By using our Website, you consent to the use of cookies in accordance with this Privacy Policy and our Cookie Policy. You can manage cookie preferences through your browser settings.

15. Social Media

Our Website includes links to social media platforms such as Facebook and X (formerly Twitter). When you click on these icons, you will be redirected to the respective platform. We have no control over the data collection practices of these platforms. For information about how they process your data, please review their privacy policies:

If you interact with GranTransfers through social media, any information you share is subject to the platform’s privacy policy. We encourage you not to share sensitive personal data via social media.

16. Links to Other Websites

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of such websites. We recommend reviewing the privacy policies of any external sites you visit.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically.

18. Governing Law

This Privacy Policy is governed by the laws of the State of Wyoming, United States, without regard to its conflict of law principles. For Users located in the European Economic Area, additional protections under the GDPR may apply.

19. Confidentiality and Professional Secrecy

All communications between GranTransfers and Users are treated with confidentiality. We are committed to maintaining the secrecy of personal data and preventing unauthorized access, alteration, or disclosure.

20. Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us:

Last Review Date: March 31, 2026