Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data is:

If you have any questions about how we handle your personal data, please contact us at the email address above.

2. What Data We Collect

We collect only the personal data you voluntarily provide to us through our contact form:

• Full name — to identify who we are in contact with.
• Company name — to understand the business context of your enquiry.
• Country of origin — to provide relevant, jurisdiction-appropriate advice.
• Work email address — to reply to your enquiry.
• Free-text message — containing the details of your situation as you describe them.

We do not collect sensitive personal data (as defined in Article 9 of the GDPR), financial details, or any data about third parties unless you include them in your message.

3. Purpose of Processing

We use your personal data exclusively to:

• Respond to your enquiry about our payroll and HR compliance services in Spain.
• Provide you with an initial assessment or quotation relevant to your situation.
• Establish and maintain a professional relationship with you, where applicable.

We do not use your data for automated decision-making, profiling, or any form of unsolicited marketing without your separate, explicit consent.

4. Legal Basis for Processing

The processing of your personal data is based on the following legal grounds under Article 6 of the GDPR:

• Legitimate interest (Art. 6(1)(f) GDPR) — responding to a business enquiry you have initiated is a legitimate interest of both parties and does not override your rights.
• Pre-contractual steps (Art. 6(1)(b) GDPR) — where processing is necessary to take steps at your request prior to entering into a service contract.

5. Data Retention

We retain your personal data for as long as necessary to manage your enquiry and any resulting service relationship. Specifically:

• Enquiries that do not result in a contract: data is deleted within 12 months of the last communication.
• Enquiries that result in an active service contract: data is retained for the duration of the contract and for 5 years thereafter, in compliance with Spanish commercial law (Código de Comercio) and tax record-keeping obligations.

After these periods, your data will be securely deleted or anonymised.

6. Data Sharing and Transfers

We do not sell, rent, or share your personal data with third parties for their own commercial purposes. We may share data with:

• Our internal team — only those advisors who need access to handle your enquiry.
• Service providers acting as data processors — e.g. our email platform and CRM, who are bound by data processing agreements and GDPR obligations.
• Spanish public authorities — only when required by law (e.g. AEAT, TGSS), and only to the extent required.

Where any processor is located outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

7. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access (Art. 15) — to obtain a copy of the personal data we hold about you.
• Right to rectification (Art. 16) — to correct inaccurate or incomplete data.
• Right to erasure / "right to be forgotten" (Art. 17) — to request deletion of your data, subject to legal retention obligations.
• Right to data portability (Art. 20) — to receive your data in a structured, machine-readable format.
• Right to restriction of processing (Art. 18) — to limit how we use your data in certain circumstances.
• Right to object (Art. 21) — to object to processing based on legitimate interests.

To exercise any of these rights, please contact us at privacy@employingiberia.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish data protection authority: Agencia Española de Protección de Datos (AEPD).

8. Analytics Cookies

We use Google Analytics 4 and Microsoft Clarity to understand how visitors interact with our website. These tools are only activated after you give your explicit cookie consent via our cookie banner.

For full details on the cookies we use, please see our Cookies Policy.

9. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page will always indicate when it was last revised. We encourage you to review this page periodically.