Privacy Policy
This policy explains what personal data HolaTandem collects when you contact us through WhatsApp, why we use it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR).
1. Who we are (data controller)
HolaTandem, operated by Elena Ignat, based in Fuengirola, Málaga, Spain.
Contact for any privacy question or request: info@holatandem.com
2. What data we collect
When you send a message to a WhatsApp business number operated by HolaTandem (on our own behalf or on behalf of a client business), we may process:
- Your name or WhatsApp profile name
- Your WhatsApp phone number
- The content of the messages you send and receive in the conversation
- Booking or enquiry details you provide (for example a service, date, or time you request)
We do not ask for special-category data (health, beliefs, etc.). Please do not send it.
3. How we collect it
We only collect this data when you choose to message us first. We do not buy contact lists or message you without you starting the conversation, except where you have separately agreed to receive messages.
4. Why we use it and our legal basis
- To reply to you and handle your enquiry or booking — legal basis: performance of a contract or steps taken at your request, and our legitimate interest in responding to customers.
- To pass a genuinely interested enquiry to a human (the business owner) so they can follow up — same basis.
We do not use your data for advertising and we do not sell it.
5. Automated and AI processing
Replies are generated with the help of an automated AI assistant. This means your messages are processed by software to produce a relevant answer. A human (the business owner) can step in at any point, and important enquiries are handed to a person. You can ask to speak to a human at any time.
6. Who we share it with (processors)
We use trusted service providers strictly to deliver the service. They act on our instructions:
- Meta Platforms / WhatsApp — delivers the messages.
- OpenAI — generates the AI replies.
- Supabase — stores the conversation and contact data securely.
- n8n — connects these services to route your message.
- Google Analytics (Google) — measures website traffic on holatandem.com, only if you accept analytics cookies in the banner.
We do not share your data with anyone else except where required by law.
7. International transfers
Some of these providers process data outside the European Economic Area (for example in the United States). Where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses or an equivalent approved mechanism.
8. How long we keep it
We keep conversation and contact data only as long as needed to handle your enquiry and for a reasonable follow-up period, after which it is deleted or anonymised. You can ask us to delete it sooner (see your rights below).
9. Your rights
Under GDPR you have the right to: access your data; correct it; have it deleted; restrict or object to its use; and receive a copy in a portable format. To exercise any of these, email info@holatandem.com. You also have the right to complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es).
10. Changes to this policy
If we change this policy we will update the date at the top. Please check back from time to time.