1. Data controller
The controller of the personal data collected through accountingspain.com is:
Owner: Juan David Jiménez Pineda
Spanish Tax ID (NIF): 78839505J
Activity: Accounting, tax and labour advisory
Town: San Bartolomé (Lanzarote)
Province: Las Palmas — Canary Islands, Spain
Email: info@accountingspain.com
Phone: +34 621 39 25 84
2. Purpose of processing
Personal data you provide through the Site is processed exclusively for the following purposes:
- Enquiries and commercial communication: handling requests sent through the contact form and replying to your questions.
- Newsletter subscription: sending periodic communications with tax, accounting and regulatory content, only if you have expressly subscribed.
- Provision of professional services: if you ultimately engage advisory services, your data is also processed in order to perform the contracted engagement.
- Compliance with legal obligations: invoicing, accounting and tax obligations.
- Site improvement: aggregated statistical analysis of Site usage through Google Analytics 4, only if you have given express consent to analytics cookies.
No automated decision-making or profiling is carried out on your data.
3. Legal basis
The legal basis legitimising the processing depends on the purpose:
- Consent (art. 6.1.a GDPR): for handling enquiries via the contact form and newsletter subscription.
- Performance of a contract (art. 6.1.b GDPR): when you engage an advisory service.
- Compliance with a legal obligation (art. 6.1.c GDPR): for applicable accounting, tax and commercial obligations.
- Legitimate interest (art. 6.1.f GDPR): for fraud prevention and Site security.
4. Data collected
The personal data collected through the Site is the data you provide:
| Channel | Data collected |
|---|---|
| Contact form | Name, email, phone (optional), message |
| Newsletter | |
| Analytics cookies (Google Analytics 4) | Pseudonymised browsing data (pages visited, time spent, device, approximate country/region location). Anonymised IP. |
| Service engagement | Full identification, tax and billing data necessary for the performance of the engagement. |
We do not request or process special categories of data (health, ideology, religion, etc.) unless required by the contracted service and supported by an appropriate legal basis.
5. Retention period
- Enquiries that do not result in a contract: up to 12 months from the last communication.
- Newsletter: until you unsubscribe.
- Clients: throughout the contractual relationship and, once terminated, for the periods legally required to address accounting, tax and commercial obligations (generally up to 6 years for accounting records under article 30 of the Spanish Commercial Code, plus the applicable tax limitation periods).
- Analytics data: according to the periods set in the Google Analytics 4 configuration (default 14 months).
6. Recipients and data processors
Your data will not be shared with third parties except as required by law. However, the following providers act as data processors for the operation of the Site:
| Provider | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Website hosting | Germany (EU) |
| Formspree, Inc. | Contact form and newsletter delivery | USA |
| Google Ireland Ltd. (Google Analytics 4) | Web analytics (only with consent) | Ireland (EU) / USA |
Additionally, data may be communicated to the competent public authorities (Spanish Tax Agency — AEAT, Canary Islands Tax Agency, Social Security, etc.) where necessary for compliance with legal obligations arising from the professional service.
7. International transfers
The use of Formspree and Google Analytics involves international transfers to the USA. These transfers take place under the EU-US Data Privacy Framework and/or the Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection.
8. Your rights
As the data subject, you have the right to:
- Access the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure when the data is no longer necessary or you withdraw consent.
- Object to processing for reasons related to your particular situation.
- Restriction of processing in the cases provided in art. 18 GDPR.
- Portability of the data you have provided.
- Withdraw consent, without affecting the lawfulness of prior processing.
- Not to be subject to automated decisions with legal effects.
To exercise any of these rights, send an email to info@accountingspain.com indicating the right you wish to exercise and attaching a copy of an identification document.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing of your data infringes applicable law.
9. Security measures
We have implemented the technical and organisational measures necessary to ensure the security of personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data and the risks involved. These include TLS encryption for all communications, credential-based access control and regular backups.
10. Children's data
The Site is not directed at children under 14 and we do not knowingly collect personal data from children below that age. If you become aware that a minor has provided data without parental consent, please contact us so we can delete it.
11. Changes
This privacy policy may be updated to reflect regulatory or operational changes. The version in force will always be the one published on this page, with the date of the last update.