Legal
Privacy policy
Last updated: 5 September 2026
Here is how we handle your personal data under the GDPR (EU 2016/679) and the Spanish LOPDGDD.
Data controller
- Controller: [LEGAL NAME] - tax ID [TAX ID]
- Registered address: [REGISTERED ADDRESS]
- Contact: [email protected]
- Data Protection Officer (DPO): [DPO contact or «not appointed»]
What data we process and why
| Purpose | Data | Legal basis |
|---|---|---|
| Answering your enquiry when you write to us | Email, name and the content of your message | Consent / legitimate interest |
| Running and securing the site | Technical browsing data (IP, logs) | Legitimate interest |
| Measuring use of the public website | Pages viewed, language, device type and truncated IP address | Consent (we ask on arrival and you can withdraw it) |
| Measuring our advertising campaigns | Browser identifier and pages viewed after seeing an ad | Consent (separate checkbox: you can refuse it and accept analytics only) |
| Providing the ATAZEL service (private area) | Account data and whatever you upload to the platform | Performance of the contract / legal obligation |
For the data you handle inside the platform (invoices, suppliers, employees, customers) we act as the data processor; you are the controller. That relationship is governed by the processing agreement (art. 28 GDPR).
Recipients and processors
We do not sell your data. To run the service we rely on providers with the safeguards the GDPR requires:
| Provider | Purpose | Location / safeguard |
|---|---|---|
| Hosting | Service infrastructure | [country] |
| Cloudflare | CDN / network security | USA - Standard Contractual Clauses |
| Anthropic | Automatic reading (OCR) of invoices | USA - SCC + EU residency + zero retention |
| Powens / Plaid / GoCardless | Bank connection (PSD2), if you switch it on | EU / USA depending on the provider |
| Google Analytics | Public website measurement, only if you accept it | Ireland / USA - Standard Contractual Clauses |
| Microsoft Clarity | Heatmaps and anonymous session recording, only if you accept it | Ireland / USA - Standard Contractual Clauses |
| Measurement of our advertising campaigns, only if you accept it | Ireland / USA - Standard Contractual Clauses |
International transfers
Some providers are outside the EEA (USA). We apply appropriate safeguards (Standard Contractual Clauses and, where applicable, EU data residency).
Retention
We keep the data for as long as the relationship lasts and, afterwards, for the applicable legal periods (commercial and tax obligations).
Your rights
You can exercise access, rectification, erasure, objection, restriction and portability by writing to [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Cookies
The use of cookies is described in the Cookie policy.
This page is translated as a courtesy. In the event of any discrepancy, the Spanish version prevails, as it is the one with legal effect.