1. Responsable del tratamiento
- Controller
- NAT BPO SL
- NIF
- B26663120
- Trading name
- Barcelona Tributario
- Address
- Carrer de Balmes, 32, Pral 2º, 08007 Barcelona
- Privacy
- info@barcelonatributario.com
- Telephone
- 623 446 002
2. Datos que podemos tratar
The form asks for your name, email address, telephone number, a message and confirmation that you have read the privacy information. We may also process information you subsequently provide by telephone or email and the necessary documentation if a professional relationship is established.
These fields are required to process a request through the form. If you do not provide them, the form cannot be sent and we cannot respond through that channel.
To deliver and protect the website, technical providers may record data such as IP address, date and time, requested resource, browser, device, security identifiers and incidents. These are not used to create commercial profiles.
If you accept analytics, Google Analytics may process online identifiers, approximate device information, browsing and usage events to generate aggregate statistics. The tag remains disabled without consent.
3. Finalidades
- Receive, organise and answer enquiries submitted by form, telephone or email.
- Assess the request, check potential conflicts of interest and prepare a proposal or engagement.
- Manage the professional relationship, communications, invoicing and related obligations once it is established.
- Meet legal obligations and valid requests, and establish, exercise or defend claims.
- Maintain the website's availability and security and prevent abuse, fraud and unauthorised access.
- Optionally measure general website use to identify improvements.
We do not sell or rent data, use it for behavioural advertising or send marketing communications following a general enquiry. We also do not make automated decisions with legal effects or profile users.
4. Bases jurídicas
- Pre-contractual steps: respond to a request made by the person concerned and assess a potential engagement.
- Performance of a contract: provide and administer services that have been formally agreed.
- Legal obligation: meet professional, tax and accounting duties and requests from competent authorities.
- Legitimate interests: protect the website and systems, prevent abuse, retain evidence and defend rights, after balancing the interests involved.
- Consent: activate Google Analytics when the user accepts it; consent can be withdrawn through Cookie preferences.
If a specific purpose requires consent in future, it will be requested separately and may be withdrawn without affecting processing lawfully carried out beforehand.
5. Conservación
Enquiries that do not lead to an engagement are retained for as long as necessary to respond, carry out reasonable follow-up and address potential liabilities; they are then deleted or access is restricted in accordance with applicable legal criteria and periods. Client data is retained throughout the relationship and, once it ends, for the periods required by professional, tax and accounting obligations and the limitation periods for liabilities.
Technical logs are retained for the minimum period necessary for security, diagnosis and abuse prevention, in accordance with providers' settings and policies. Access to restricted data is limited to meeting obligations and addressing claims until its final deletion.
6. Destinatarios, proveedores y transferencias
Data is not disclosed to third parties unless necessary to provide the service, required by law or supported by another valid basis. Providers acting on behalf of the controller may have access for hosting, forms, email, maintenance, security or support. On this website, Netlify provides hosting and content delivery, Formspree processes data when you submit the form, and Google Analytics generates usage statistics only when you accept analytics.
Netlify and Formspree may process data in the United States. Netlify states that it uses, as applicable, the EU-US Data Privacy Framework and the standard contractual clauses approved by the European Commission; it publishes its data processing agreement and its privacy policy. Formspree states that it hosts its services on AWS in the United States and relies on standard contractual clauses as a processor; you can consult its security and privacy information. You can request additional information or a copy of the available safeguards by writing to info@barcelonatributario.com. Advisers, collaborating professionals, courts or public authorities may also receive information when required by the engagement or the law.
7. Derechos de las personas
You may request access to your data, rectification or erasure, restriction of processing, portability where applicable and object to certain processing. You may also request not to be subject to decisions based solely on automated processes, although no such decisions are currently made.
To exercise your rights, write to info@barcelonatributario.comstating the right you wish to exercise and the information needed to locate your data. We may request proportionate proof of identity where essential. If you believe the processing does not comply with the law, you may lodge a complaint with theSpanish Data Protection Agency.
8. Datos de terceros y menores
Anyone providing another person's data must be entitled to do so and limit it to necessary information. The general form is not intended for minors. If an enquiry concerns a minor, their representative or another authorised person should make contact, without including sensitive information in the initial message.
9. Seguridad y actualización
Technical and organisational measures proportionate to the risks are applied, and access is limited to those who need to process the information. No internet-connected system is infallible; if you detect an incident involving your data, report it toinfo@barcelonatributario.com.
This policy may be updated to reflect legal, operational or provider changes. The date at the beginning identifies the current version.