ROSÉ BY HOLA · BARCELONA BRANDS

Privacy policy

Last updated: 8 October 2026

Who is responsible?

BARCELONA BRANDS, S.L.
NIF / VAT: B66235797
Rambla de Garraf 48–60, Local 6A, CC Valentí Village
08812 Sant Pere de Ribes, Barcelona, Spain
hola@holacava.com

This policy covers personal data processed in connection with rosebyhola.com, under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

What we process and why

• Enquiries: when you email us, we receive your email address and the information you choose to provide, such as your name, company and message. We use it to answer your request. The basis is our legitimate interest in responding to enquiries, or steps at your request before entering a contract where relevant.
• Website delivery and security: our hosting and infrastructure providers may process technical information such as IP address, browser information, requested URL and request time to deliver and protect the website. The basis is our legitimate interest in running a secure, reliable website.
• Age declaration: a confirmation is stored only in your browser for the current tab session. We do not ask for your date of birth, identity document or country, and do not send the declaration to our server.
• Audience totals: we count browser page views and new age-confirmed visit starts, solely to understand this website’s audience. We keep separate monthly aggregate totals for countries, approximate cities and regions, language, broad device/browser/operating-system categories, public pages, referring domains, non-personal campaign labels, time periods, scroll and visible-time milestones and product or outbound-link clicks. The hosting network supplies an approximate country from the connection; the audience database stores counters by month and category, rather than individual visitor records. Location is approximate and may reflect a VPN or network location. Referrer domains are counted without full URLs; page queries are not retained. Optional campaign labels containing email-like data are discarded. We do not store IP addresses, names, device fingerprints, visitor identifiers or individual browsing histories in these statistics. The basis for this limited first-party measurement is our legitimate interest in understanding website use. We do not collect age ranges or infer your age from login or browsing data. Browser Do Not Track and Global Privacy Control signals are respected. You may also exclude your browser through Privacy settings. Signed-in owner traffic is excluded when the hosting platform supplies the authenticated identity. Anonymous owner visits require the browser exclusion setting; previous anonymous totals cannot be separated retrospectively.

This website has no checkout, account registration, advertising pixels or third-party analytics scripts. Contacting us or entering the site does not subscribe you to marketing. Any future marketing subscription will require a separate lawful basis and an easy way to unsubscribe.

Recipients and international transfers

Authorised staff and service providers for hosting, website security and business email may process data as needed for those purposes. Website hosting uses the Sites service and its infrastructure providers. Data may also be disclosed where legally required. Where processing involves transfers outside the European Economic Area, applicable GDPR transfer requirements must be met, including an adequacy decision or appropriate safeguards such as standard contractual clauses where required. You can contact us for information about the safeguards applicable to your data. We do not sell your personal data.

Retention

We keep enquiry correspondence for the time needed to answer and follow up your request, and thereafter only where needed for a continuing business relationship, legal obligations or the establishment, exercise or defence of legal claims. Technical records are retained by the relevant provider according to its service and security retention rules. Audience totals are retained for up to 25 calendar months. Browser storage periods are listed in our cookie policy.

Your rights

You may request access, rectification, erasure, restriction, objection and, where applicable, data portability by emailing hola@holacava.com. If processing is based on consent, you can withdraw it without affecting earlier lawful processing. We may request proportionate information to verify your identity. You can complain to the Spanish Data Protection Agency at aepd.es or your competent local supervisory authority.

Security and external websites

We use appropriate organisational and technical safeguards; no online service can guarantee absolute security. External retailers, review platforms and social networks have their own privacy policies, which apply when you visit them. This site does not make automated decisions or build advertising profiles about you.

Changes and contact

We will update this policy when the website or its processing changes. Contact hola@holacava.com with any privacy question.