Privacy Policy

2.1 Who We Are

This Privacy Policy explains how EdG Holding 1315 SL (“we”, “us”, “our”), trading as Erwin de Grave and operating erwindegrave.com, collects, uses, stores, and protects your personal data.

  • Data Controller: EdG Holding 1315 SL
  • CIF: B01626035
  • Address: Calle Alhaurín el Grande 1, 29130 Alhaurín de la Torre, Málaga, Spain
  • Email: info@erwindegrave.com
  • Last updated: 27 February 2026

2.2 What Data We Collect

a) Data you provide directly

When you complete the Business Strength Assessment, submit the contact form, or book a discovery call, we collect:

  • Full name
  • Email address
  • Company name and your role within it
  • Business information you enter into the assessment
  • Your message or enquiry content

b) Data collected automatically

When you visit this website, we automatically collect:

  • IP address (anonymised)
  • Browser type and version
  • Pages visited and time spent on each page
  • Referring website or traffic source
  • Device type and operating system

2.3 Legal Bases for Processing

We process your personal data on the following legal bases under GDPR Article 6:

  • Legitimate interest (Art. 6(1)(f)): To respond to enquiries, analyse website performance, and improve our services.
  • Contract performance (Art. 6(1)(b)): To deliver consulting and advisory services you have requested.
  • Legal obligation (Art. 6(1)(c)): To comply with applicable Spanish and EU law.

2.4 Third-Party Services

This website uses the following third-party services. Each processes personal data as described below.

Matomo (self-hosted analytics)

We use Matomo, hosted on our own infrastructure at analytics.erwindegrave.we.bs, to understand how visitors use this website. Matomo anonymises IP addresses and does not share data with third parties. No data leaves our controlled environment.

Mautic (via marketingation.com)

Mautic is our self-managed marketing automation platform. It tracks which pages you visit on this website to help us understand which content is most relevant to visitors. Mautic does not send marketing emails on our behalf. No email marketing is conducted through this website.

Flowlu (erwindegrave.flowlu.com)

When you book a discovery call or express interest in our services, your name, email, and enquiry details are transferred to our Flowlu CRM to manage the relationship. Flowlu is a cloud-based system and processes data in accordance with GDPR.

Calendly

When you book a call, you interact with Calendly through an embedded interface on our website. Calendly collects your name, email, and scheduling preferences directly and independently. See Calendly’s Privacy Policy at calendly.com/privacy.

LinkedIn Insight Tag

We use the LinkedIn Insight Tag to measure the performance of any LinkedIn advertising and to understand the aggregate professional profile of our website visitors. LinkedIn may set cookies in your browser. LinkedIn acts as an independent data controller for this data. You can opt out at linkedin.com/psettings/guest-controls.

2.5 Data Retention

  • Contact form and assessment data: up to 3 years from your last interaction, or until you request deletion
  • Client engagement data: up to 6 years to comply with Spanish commercial and tax law
  • Analytics data: 13 months (Matomo), then aggregated or deleted
  • CRM data in Flowlu: retained while a business relationship exists or for up to 3 years after last contact

2.6 Your Rights Under GDPR

As a resident of the European Economic Area, you have the following rights:

  • Right of access: request a copy of personal data we hold about you
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure: request deletion of your data
  • Right to restriction: request we limit processing of your data
  • Right to data portability: receive your data in a portable format
  • Right to object: object to processing based on legitimate interests

To exercise any of these rights, contact us at info@erwindegrave.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority: Agencia Española de Protección de Datos (www.aepd.es).

2.7 Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption. Access to personal data is restricted to those who need it to deliver our services.

2.8 Children

This website is not directed at persons under 14 years of age (the minimum age of digital consent in Spain under LOPDGDD). We do not knowingly collect personal data from children under 14. If you believe we have done so inadvertently, contact us at info@erwindegrave.com.

2.9 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify visitors of material changes by updating the date at the top of this page.

2.10 Contact

Privacy-related questions: info@erwindegrave.com