Privacy
Privacy Policy
What we collect, why, and what you can ask us to do about it. Under Regulation (EU) 2016/679 and Organic Law 3/2018.
Full text
The short version
Browsing this website is anonymous as far as we are concerned. We run no analytics, we set no cookies, and we place no tracking of any kind. We only hold personal data about you if you choose to give it to us, by writing to one of our email addresses or by subscribing to our newsletter. We do not sell data, we do not build profiles, and we make no automated decisions about anyone.
The rest of this page sets out the detail that data protection law requires.
1. Who is responsible
The data controller is:
GRASSHOPPER AIR MOBILITY, S.L.
Rambla de la Marina, 456, Planta 2
08907 L’Hospitalet de Llobregat, Barcelona, Spain
Tax identification number (NIF): B56724453
Registered at the Commercial Registry of Barcelona, Volume 49092, Folio 060, Section 8, Page B 607404
For anything to do with personal data, write to [email protected]. For anything else, [email protected] or +34 644 661 687.
We are not required to appoint a Data Protection Officer and have not appointed one. The address above reaches the people responsible.
2. Visiting the website
This site is served by Cloudflare, which hosts the pages and protects the site from attack. Like every web server, Cloudflare records each request in its logs: your IP address, the time, the page requested, the referring page and your browser type. An IP address is personal data, so we tell you about it.
| Purpose | Delivering the website, keeping it available, and defending it against attack and abuse |
| Legal basis | Our legitimate interest in operating and securing our own website (Art. 6(1)(f) GDPR) |
| Retention | Held by Cloudflare for a short period under their own retention policy. We do not download, store or analyse these logs |
We use the aggregate traffic figures Cloudflare shows in its dashboard, such as visit counts, countries and most-visited pages. These are statistics, not records about you, and we have no way to connect them to an individual.
We have installed no analytics software. There is no Google Analytics, no tag manager, no advertising pixel and no session recording on this site. Fonts and images are served from our own domain, not from Google Fonts or any other third party. See our Cookie Policy, which also explains how to verify this in your own browser.
3. Writing to us
Our Contact page lists email addresses rather than a form. If you write to us, we receive whatever you put in your message, which is typically your name, your email address, your company and the reason you are writing.
| Purpose | Reading your message and replying to it |
| Legal basis | Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR), or our legitimate interest in answering people who contact us (Art. 6(1)(f)) |
| Retention | For as long as the conversation is live, and afterwards for as long as we may need it as a record of our dealings. Correspondence with no continuing purpose is deleted |
Our email runs on Google Workspace. Business contacts may also be recorded in our customer relationship system, HubSpot, so that we can keep track of a conversation.
4. The newsletter
If you enter your email address in the subscribe field, we use it to send you occasional updates about the company. We ask for nothing else.
| Purpose | Sending you the updates you asked for |
| Legal basis | Your consent (Art. 6(1)(a) GDPR and Art. 21 LSSI-CE) |
| Retention | Until you unsubscribe. We keep a record that you subscribed, and when, for as long as we send to you and for a reasonable period afterwards, because the law requires us to be able to show that consent was given |
Subscribing takes two steps. After you enter your address, we send you an email asking you to confirm. Nothing is added to the list until you click that link, which means nobody can be signed up by someone else. Every message we send carries an unsubscribe link, and you can withdraw your consent at any time, at no cost, without giving a reason. Withdrawing does not affect anything we sent lawfully beforehand.
The list is managed by HubSpot. Your address is passed to HubSpot by our own server. HubSpot loads no script into this website and places nothing on your device.
5. The video on the home page
The home page shows a still image with a play button. If you click it, the video is loaded from YouTube (Google Ireland Limited), which will then receive your IP address and may store information on your device. That is Google’s processing under its own privacy policy, and it happens only if you click. Full explanation in our Cookie Policy.
6. Who else sees your data
These are the only third parties involved, and each acts on our instructions under a data processing agreement:
| Who | What for | Where |
|---|---|---|
| Cloudflare | Hosting the website and its server logs | EU and USA |
| Google (Workspace) | Our email | EU and USA |
| HubSpot | Newsletter and customer relationship records | EU and USA |
Beyond these, we disclose personal data only to our professional advisers where necessary, or to a public authority where the law obliges us to. We do not sell personal data, and we do not share it for anyone else’s marketing.
7. Transfers outside Europe
The three providers above are, or are owned by, companies in the United States, so your data may be processed there. Those transfers are covered by the European Commission’s Standard Contractual Clauses and, where the provider is certified, by the EU-US Data Privacy Framework. You may ask us for a copy of the safeguards that apply.
8. Your rights
You may ask us at any time to:
- Access. Tell you what personal data of yours we hold.
- Rectify. Correct anything inaccurate.
- Erase. Delete it, where there is no longer a reason to keep it.
- Restrict. Stop using it while a dispute is resolved.
- Object. To processing we base on legitimate interest.
- Port. Receive it in a machine-readable form, or have it sent elsewhere.
- Withdraw consent. At any time, where consent is what we relied on.
Write to [email protected] with “Data protection” in the subject line. We answer within one month. There is no charge.
If you are not satisfied with our answer, you may complain to the Spanish Data Protection Agency, the Agencia Española de Protección de Datos, at www.aepd.es, C/ Jorge Juan 6, 28001 Madrid. You may complain to them directly. You do not have to come to us first.
9. Profiling and automated decisions
We do not profile you and we make no decisions about you by automated means.
10. Children
This is a business website and is not directed at children. We do not knowingly collect data from anyone under 14, the age of digital consent in Spain.
11. Security
The site is served only over an encrypted connection. It runs no database and no login, so there is no account of yours for anyone to break into. Personal data you send us lives in our email and CRM accounts, which are protected by access controls and multi-factor authentication.
12. Changes to this policy
If what we do with personal data changes, we change this page at the same time, and the date below changes with it. Where the change is significant and we hold your address, we will tell you.
Last updated: 3 August 2026.