Privacy policy
What data of yours I process, what for, for how long and how to control it.
Last updated:
Data controller
The controller of your personal data is the owner of this website, whose identification and contact details are as follows:
- Owner
- Paula Lavín Fernández
- Registered address
- C/ Luis Martínez, 21, 39005 Santander, España
- Phone
- +34 657 986 173
- Professional body
- Colegio de Economistas de Cantabria — Nº 2630
- Website
- ecommerceasesoria.com
What data I process and where it comes from
I only process the data you give me voluntarily. I do not buy databases and I do not obtain your data from third parties.
- Contact details you send when you write to me: name, email address, phone number if you include it, and the content of your message.
- Details of your business shared during the assessment or the provision of the service: activity, sales channels, turnover, and tax and accounting records.
- Technical data logged by the server when it serves the page: IP address, date and time, and browser type. These are the standard logs of any web server.
The contact form sends no data to any server
This is worth spelling out because it is unusual: the form on this site does not transmit what you type. When you press the button, your browser opens your own email client with the message already drafted, and you decide whether to send it.
In other words, the form data neither passes through nor is stored on this site. It reaches me as an ordinary email, and from that point it is handled as described below.
Why I process your data and on what legal basis
Each purpose rests on a legal basis under article 6 GDPR:
- To answer your enquiries and prepare the free assessment. Basis: pre-contractual measures taken at your request.
- To provide the advisory services contracted and file your returns with the authorities. Basis: performance of the contract.
- To comply with legal obligations on tax, accounting and anti-money-laundering matters. Basis: compliance with a legal obligation.
- To send you updates about the service, only if you expressly subscribe. Basis: your consent, which you may withdraw at any time.
How long I keep it
If your enquiry does not lead to a contract, I delete the data once it has been dealt with, unless I need to keep it to evidence how it was handled.
If we do work together, I keep the documentation for the duration of the relationship and afterwards for the periods required by law: four years for tax obligations, six years for commercial records and ten years for anti-money-laundering purposes. After those periods it is securely deleted.
Who I share your data with
I do not sell or transfer your data for commercial purposes. It is accessed only by:
- The Spanish Tax Agency and Social Security, when I file your returns and paperwork on your behalf.
- The accounting and invoicing software I work with, as a data processor.
- My email provider and the host of this site, as data processors.
- External advisers or banks, where strictly necessary for the service and always under a duty of confidentiality.
International transfers
Some of the technology providers I use are companies based outside the European Economic Area or with infrastructure within it. In those cases the transfers rely on the safeguards set out in chapter V GDPR: European Commission adequacy decisions or standard contractual clauses.
Cookies
This site uses no cookies. It also uses no analytics tools, tracking pixels, heatmaps or behavioural advertising, and it does not share your browsing with third parties.
All resources — fonts, images and video — are served from the domain itself, so visiting the site makes no requests to outside servers from your browser. That is why you will not see a cookie banner: there is nothing to consent to.
If I ever add a tool that does use them, I will update this policy and ask for your prior consent through the appropriate mechanism.
Your rights
You may exercise the following rights at any time by writing to the email address above, stating which one you wish to exercise and proving your identity:
- Access: find out what data of yours I process.
- Rectification: correct data that is inaccurate or incomplete.
- Erasure: ask me to delete it when it is no longer necessary.
- Objection and restriction: object to the processing or ask me to restrict it.
- Portability: receive your data in a structured, commonly used format.
- Withdraw any consent you gave, without affecting processing carried out beforehand.
Complaints
If you believe I have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid — www.aepd.es). I would appreciate it if you raised it with me first, so we can try to resolve it directly.
Security
I apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration, including HTTPS encryption of the site’s traffic and restricted access to client documentation.
Changes to this policy
This policy may be updated if the services, the providers or the applicable legislation change. The date of the latest revision appears at the top of the page.
Ready to stop fighting with your taxes?
Book your free assessment and discover how much you can save in time and money.
