Privacy policy

How we process your personal data, on what legal basis, for how long, and how you can exercise your rights.

1. Data controller

Controller: José María Rodríguez Rodríguez (Tu Asesoría Fiscal Málaga)
NIF: 34776376P
Address: Calle Menta, 13 — 29651 Mijas (Málaga), Spain
Email: info@tuasesoriafiscalmalaga.es

2. What data we process and why

Contact form

We collect your name, email address, telephone number (optional), the type of enquiry and the message you send. The purpose is to respond to your enquiry and send you a quote.

Provision of professional services

If you engage us, we also process the identification, tax, financial and, where relevant, employment data needed to carry out the engagement and to meet our legal obligations towards the Spanish tax agency, social security and other public bodies.

Website use

We use cookies and similar technologies as described in the cookie policy.

3. Legal basis

Consent (Article 6.1.a GDPR) for handling enquiries and for non-essential cookies.
Performance of a contract or pre-contractual steps (Article 6.1.b) for our advisory services.
Legal obligation (Article 6.1.c) under tax, accounting, employment and anti-money-laundering rules.
Legitimate interest (Article 6.1.f) for website security and defence against claims.

4. Retention periods

Enquiries that do not lead to an engagement are kept for a maximum of twelve months. Client data is kept for the duration of the professional relationship and afterwards for the applicable limitation periods: six years under commercial law, four years under tax law and ten years under anti-money-laundering rules where applicable.

5. Recipients

We do not disclose your data to third parties except where legally required. The following act as processors under Article 28 GDPR contracts: our web hosting and email provider, with servers in the European Union; our tax filing software provider; and financial institutions for payments.

When acting on your behalf we disclose only the necessary data to the Spanish tax agency, social security, the Regional Government of Andalusia, the relevant town halls, the national police and the immigration offices, depending on the matter.

6. International transfers

As a rule we do not transfer data outside the European Economic Area. Where a technology provider makes this necessary, transfers rely on an adequacy decision of the European Commission or on standard contractual clauses, and this policy will state so.

7. Your rights

You may exercise your rights of access, rectification, erasure, restriction, objection and portability at any time, and withdraw consent without affecting the lawfulness of prior processing. Write to info@tuasesoriafiscalmalaga.es or to our postal address, enclosing a copy of an identity document and stating the right you wish to exercise. We reply within one month.

If you believe your data has not been handled lawfully you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).

8. Security and accuracy

We apply appropriate technical and organisational measures, including TLS encryption in transit, access controls and regular backups. You warrant that the data you provide is accurate and undertake to notify any changes. If you provide third-party data, you must have informed those individuals of this policy beforehand.

9. Minors

Our services are aimed at persons over eighteen. We do not knowingly collect data from minors through the contact form.

10. Changes

This policy may be updated to reflect legal changes or new processing activities. The version in force is always the one published on this page.