Purpose of This Policy
The purpose of this policy is to inform data subjects about the various processing activities carried out by this organization through its website that may affect their personal data, in accordance with Organic Law 3/2018 of December 5 on Personal Data Protection and Guarantee of Digital Rights, and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016.
Identification and Contact Details of the Data Controller
The organization OpenTax Law, S.L, Tax ID: B93826097, postal address: Calle Jacinto Benavente 11, Entreplanta, Marbella, 29601, Málaga, email: info@opentax.es, registered in the Commercial Registry of Málaga.
Purposes of Processing Your Personal Data
Users/Visitors of the Controller’s Website
We will process the personal data you provide through our web forms for the following purposes:
- To respond to requests, complaints, and incidents submitted through our contact channels on the website.
- To understand user behavior on the website in order to detect possible cyber‑attacks.
- To comply with legal obligations directly applicable to us and governing our activity.
- To protect and exercise our rights or respond to claims of any kind.
- Where applicable, to send commercial communications related to the goods or services that form part of our activity, and/or news or newsletters related to our sector.
- To manage and send the requested quotation.
- To manage your data in order to schedule the requested appointment.
- To manage, administer, and supervise your activity in the blog/forum included on the website.
Clients
We will process the personal data you provide through our web forms for the following purposes:
- Managing the commercial relationship.
- Providing the services you have contracted with us.
- Administrative, accounting, and tax management.
- Responding to requests, complaints, and incidents submitted through our contact channels on the website.
- Understanding user behavior on the website in order to detect possible cyber‑attacks.
- Where applicable, conducting quality surveys to evaluate our service.
- Where applicable, carrying out prize draws.
- Where applicable, sending commercial communications related to our activity, and/or news or newsletters related to our sector.
- Complying with legal obligations directly applicable to us and governing our activity.
- Protecting and exercising our rights or responding to claims of any kind.
Legal Basis for Processing
Users/Visitors of the Website
- Consent you have given us to process your data for the purposes indicated. Refusal to provide your personal data will make it impossible to process your data for these purposes.
- Compliance with legal obligations applicable to us. In this case, the data subject cannot refuse the processing of personal data.
- Legitimate interest in protecting our image, business, and reputation by preventing attacks on our website. In this case, the data subject cannot refuse the processing, although they may exercise the rights recognized in section eight of this policy.
Clients
Users/Visitors of the Website
- Consent you have given us to process your data for the purposes indicated. Refusal to provide your personal data will make it impossible to process your data for these purposes.
- Compliance with legal obligations applicable to us. In this case, the data subject cannot refuse the processing of personal data.
- Legitimate interest in protecting our image, business, and reputation by preventing attacks on our website. In this case, the data subject cannot refuse the processing, although they may exercise the rights recognized in section eight of this policy.
Data Retention Periods or Criteria
Personal data provided will be retained for the time necessary to fulfill the purposes for which they were initially collected. Once the data are no longer necessary, they will be duly blocked and made available, where appropriate, to competent Public Administrations and Authorities, Courts, or the Public Prosecutor’s Office, during the statute of limitations of actions arising from the relationship with the client and/or the legally established retention periods.
Law 10/2010 on Anti‑Money Laundering and Counter‑Terrorist Financing: 10 years, pursuant to Article 25.
Civil Code: Between 5 and 15 years, depending on the case, pursuant to Article 1964.2.
Commercial Code: 6 years, pursuant to Article 30, applicable to commercial information (issued and received invoices, receipts, corrective invoices, bank documents, etc.).
General Tax Law: 4 years, pursuant to Articles 66–70, applicable to tax‑related information.
Automated Decisions and Profiling
The website does not make automated decisions nor does it create profiles.
Recipients
During the processing period, the organization may disclose your data to:
- Courts and Tribunals.
- Law Enforcement Agencies.
- Other competent authorities or public bodies when legally required.
- Banks and Financial Institutions, if you contract services with us.
International Data Transfers
The organization does not carry out any international data transfers.
Rights
Data subjects may exercise, at any time and free of charge, their rights of access, rectification, erasure, restriction of processing, objection, data portability (where technically possible), withdrawal of consent, and, where applicable, the right not to be subject to a decision based solely on automated processing, including profiling.
You may use the forms provided by the organization or send a written request to the postal or email address indicated above. In any case, your request must include a copy of your ID card or equivalent document to verify your identity.
If you believe your rights regarding personal data protection have been violated, especially if you have not obtained satisfaction in exercising your rights, you may file a complaint with the competent Data Protection Authority (Spanish Data Protection Agency) via its website: www.agpd.es.
In accordance with Article 21 of Law 34/2002 on Information Society Services and Electronic Commerce, if you do not wish to receive further information about our services, you may unsubscribe by sending an email to info@opentax.es with the subject “UNSUBSCRIBE”.
Accuracy of the Data
The data subject guarantees that the data provided are true, accurate, complete, and up‑to‑date, and undertakes to notify any changes through the channels indicated in section one of this policy. The data subject will be responsible for any damage or harm, direct or indirect, resulting from failure to comply with this obligation.
If the user provides data belonging to third parties, they declare that they have obtained the consent of the data subjects and undertake to inform them of the content of this clause, exempting the organization from any liability arising from failure to comply with this obligation.