--- title: "Privacy Policy \u2014 Accounting Spain" description: "Privacy and personal data protection policy of accountingspain.com under the EU GDPR and Spanish data protection law." canonical_url: "https://www.accountingspain.com/en/privacy-policy/" last_updated: "2026-04-26" --- Data protection # Privacy Policy Last updated: 26 April 2026 **Contents** 1. Data controller 2. Purpose of processing 3. Legal basis 4. Data collected 5. Retention period 6. Recipients and processors 7. International transfers 8. Your rights 9. Security measures 10. Children's data 11. Changes ## 1. Data controller The controller of the personal data collected through accountingspain.com is: **Owner:** Juan David Jiménez Pineda **Spanish Tax ID (NIF):** 78839505J **Activity:** Accounting, tax and labour advisory **Town:** San Bartolomé (Lanzarote) **Province:** Las Palmas — Canary Islands, Spain **Email:** [info@accountingspain.com](mailto:info@accountingspain.com) **Phone:** +34 621 39 25 84 ## 2. Purpose of processing Personal data you provide through the Site is processed exclusively for the following purposes: - **Enquiries and commercial communication**: handling requests sent through the contact form and replying to your questions. - **Newsletter subscription**: sending periodic communications with tax, accounting and regulatory content, only if you have expressly subscribed. - **Provision of professional services**: if you ultimately engage advisory services, your data is also processed in order to perform the contracted engagement. - **Compliance with legal obligations**: invoicing, accounting and tax obligations. - **Site improvement**: aggregated statistical analysis of Site usage through Google Analytics 4, only if you have given express consent to analytics cookies. No automated decision-making or profiling is carried out on your data. ## 3. Legal basis The legal basis legitimising the processing depends on the purpose: - **Consent** (art. 6.1.a GDPR): for handling enquiries via the contact form and newsletter subscription. - **Performance of a contract** (art. 6.1.b GDPR): when you engage an advisory service. - **Compliance with a legal obligation** (art. 6.1.c GDPR): for applicable accounting, tax and commercial obligations. - **Legitimate interest** (art. 6.1.f GDPR): for fraud prevention and Site security. ## 4. Data collected The personal data collected through the Site is the data you provide: ChannelData collected Contact formName, email, phone (optional), message NewsletterEmail Analytics cookies (Google Analytics 4)Pseudonymised browsing data (pages visited, time spent, device, approximate country/region location). Anonymised IP. Service engagementFull identification, tax and billing data necessary for the performance of the engagement. We do not request or process special categories of data (health, ideology, religion, etc.) unless required by the contracted service and supported by an appropriate legal basis. ## 5. Retention period - **Enquiries that do not result in a contract**: up to 12 months from the last communication. - **Newsletter**: until you unsubscribe. - **Clients**: throughout the contractual relationship and, once terminated, for the periods legally required to address accounting, tax and commercial obligations (generally up to 6 years for accounting records under article 30 of the Spanish Commercial Code, plus the applicable tax limitation periods). - **Analytics data**: according to the periods set in the Google Analytics 4 configuration (default 14 months). ## 6. Recipients and data processors Your data will not be shared with third parties except as required by law. However, the following providers act as data processors for the operation of the Site: ProviderPurposeLocation Hetzner Online GmbHWebsite hostingGermany (EU) Formspree, Inc.Contact form and newsletter deliveryUSA Google Ireland Ltd. (Google Analytics 4)Web analytics (only with consent)Ireland (EU) / USA Additionally, data may be communicated to the competent public authorities (Spanish Tax Agency — AEAT, Canary Islands Tax Agency, Social Security, etc.) where necessary for compliance with legal obligations arising from the professional service. ## 7. International transfers The use of Formspree and Google Analytics involves international transfers to the USA. These transfers take place under the EU-US Data Privacy Framework and/or the Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection. ## 8. Your rights As the data subject, you have the right to: - **Access** the personal data we hold about you. - **Rectification** of inaccurate or incomplete data. - **Erasure** when the data is no longer necessary or you withdraw consent. - **Object** to processing for reasons related to your particular situation. - **Restriction** of processing in the cases provided in art. 18 GDPR. - **Portability** of the data you have provided. - **Withdraw consent**, without affecting the lawfulness of prior processing. - **Not to be subject to automated decisions** with legal effects. To exercise any of these rights, send an email to [info@accountingspain.com](mailto:info@accountingspain.com) indicating the right you wish to exercise and attaching a copy of an identification document. You also have the right to lodge a complaint with the **Spanish Data Protection Agency** ([www.aepd.es](https://www.aepd.es)) if you believe the processing of your data infringes applicable law. ## 9. Security measures We have implemented the technical and organisational measures necessary to ensure the security of personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data and the risks involved. These include TLS encryption for all communications, credential-based access control and regular backups. ## 10. Children's data The Site is not directed at children under 14 and we do not knowingly collect personal data from children below that age. If you become aware that a minor has provided data without parental consent, please contact us so we can delete it. ## 11. Changes This privacy policy may be updated to reflect regulatory or operational changes. The version in force will always be the one published on this page, with the date of the last update. [ ](https://wa.me/34621392584?text=Hello%2C%20I%20would%20like%20to%20request%20a%20consultation.)