Privacy Policy

In compliance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Organic Act 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you about the processing of your personal data.

1. Data Controller

2. Purpose of Processing

We process the information provided by data subjects for the following purposes:

• Handling requests for information, quotes and tax assessments.
• Providing the contracted tax, accounting, employment advisory and business consulting services.
• Managing the commercial and administrative relationship with clients and suppliers.
• Complying with the legal and tax obligations arising from our professional activity.
• Managing the sending of communications about our services, on the basis of legitimate interest.

3. Legal Basis for Processing

The legal basis for processing your personal data is:

• Legitimate interest (art. 6.1.f GDPR): arising from the professional advisory service relationship.
• Performance of a contract (art. 6.1.b GDPR): where the data are necessary to provide the contracted service or to take pre-contractual steps at the data subject's request.
• Compliance with a legal obligation (art. 6.1.c GDPR): under the tax (Act 58/2003, General Tax Act), commercial (Commercial Code) and employment legislation in force.

4. Data Recipients

Data will not be disclosed to third parties except where legally required, specifically to:

• The Spanish Tax Agency (AEAT).
• The General Treasury of Social Security (TGSS).
• Competent courts and tribunals.
• Technology service providers (processors), who strictly comply with the GDPR and with whom a data processing agreement exists under article 28 GDPR.

No international transfers of data outside the European Economic Area are carried out.

5. Retention Period

Personal data will be kept for as long as the contractual relationship lasts and, once it ends, for the applicable statutory limitation periods:

• 4 years: tax obligations (art. 66 General Tax Act).
• 5 years: personal actions with no special period (art. 1964 Civil Code).
• 6 years: accounting and commercial documentation (art. 30 Commercial Code).
• 10 years: prevention of money laundering (Act 10/2010).

6. Data Subject Rights

In accordance with the GDPR and the LOPDGDD, you may exercise the following rights:

• Access: obtain confirmation of whether your data are being processed and access them.
• Rectification: request the correction of inaccurate or incomplete data.
• Erasure: request the deletion of your data when they are no longer necessary.
• Restriction: request the restriction of processing in certain circumstances.
• Portability: receive your data in a structured, commonly used format.
• Objection: object to the processing of your data on grounds relating to your particular situation.

To exercise these rights, send an email to info@dplasesores.com attaching a copy of your ID card or equivalent identification document.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.

7. Security Measures

DPL ASESORÍA Y CONSULTORÍA, S.L.U. has adopted the technical and organisational measures necessary to guarantee the security and integrity of personal data, preventing their alteration, loss, unauthorised processing or access, in accordance with the state of the art, the nature of the data stored and the risks to which they are exposed.

8. Minors' Data

The services offered through this Website are not aimed at children under 14. DPL Asesores does not knowingly collect data from children under that age. If a parent or guardian becomes aware that a minor has provided personal data without their consent, they should contact us so that the data can be deleted immediately.

Last updated: August 2026.