Privacy policy

1. Data controller

Maria Luz Matilla Vigil, NIF 11418070L, Passeig Illetes 37, 07181 Illetes (Baleares), España. Contact for data protection matters: matillavigil@gmail.com.

2. What data we process and for what purpose

a) Orders via Gold Finanz GmbH (e.g. NIE application): identity and contact details, date and place of birth, nationality, marital status, occupation, parents' first names, address, ID or passport details and copies, reason for the application and the NIE issued. Purpose: submitting the application to the Spanish authorities (Policía Nacional, Oficina de Extranjería) under the power of attorney granted and reporting the status to Gold Finanz GmbH. Legal basis: Article 6(1)(b) GDPR (performance of the order) and (c) (legal obligations).

b) Enquiries via offer pages: the details provided in the form and, where applicable, a copy of your passport. Purpose: to process the enquiry and prepare the order. Legal basis: Article 6(1)(b) GDPR (pre-contractual measures) and your consent (Article 6(1)(a)), which you may withdraw at any time.

c) Customers and invoices: name, address, tax identification numbers and billing details. Purpose: invoicing and compliance with tax obligations, including VERI*FACTU invoicing records. Legal basis: Article 6(1)(c) GDPR (Law 37/1992, Royal Decree 1619/2012, General Tax Law).

d) Users of the secure area: email address, password (stored only as an encrypted hash), second factor, sign-in and access logs (time, IP address). Purpose: secure sign-in and traceability of access. Legal basis: Article 6(1)(f) GDPR (legitimate interest in security) and (c) (Article 32 GDPR).

e) Technical server logs when the website is accessed (IP address, time, URL). Purpose: operation and security. Legal basis: Article 6(1)(f) GDPR.

3. Source of the data

The data is provided by you or, where the order is placed via a partner of Gold Finanz GmbH (Germany), by Gold Finanz GmbH, which transmits it on your behalf.

4. Recipients

The competent authorities (Policía Nacional, Oficina de Extranjería, Agencia Tributaria). Gold Finanz GmbH, where the order was placed via them (status, NIE certificate, invoice).

Data processing takes place on a dedicated server, which is managed exclusively by the data controller and located in a data centre operated by Hetzner Online GmbH in Germany. The data centre operator has no access to the data, which is also stored in encrypted form.

Emails (e.g. invoices, access and offer links) are sent via the mail server of goneo Internet GmbH (Germany). No data is transferred to countries outside the European Economic Area.

5. Retention period

Copies of identity documents, passports and other documentation relating to an order are automatically deleted 6 months after the order is completed. Enquiries that do not result in an order are deleted after 6 months.

Other order data is kept for as long as claims arising from the order may be asserted. Invoices and invoice records are kept for the statutory periods (including art. 30 Commercial Code: 6 years; General Tax Law).

6. Your rights

You may exercise your rights of access, rectification, erasure, restriction of processing, data portability and objection, as well as withdraw your consent with effect for the future, by contacting matillavigil@gmail.com.

You have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.

7. Security

ID data, NIE, tax numbers and all uploaded documents are stored encrypted. The secure area can only be accessed with two-factor sign-in; access is logged. Data is transmitted exclusively in encrypted form (HTTPS).

8. Cookies

Only a technically necessary session cookie for signing in is set in the secure area. No analytics or advertising cookies are used, and no third-party content (e.g. fonts) is loaded.

9. Mandatory nature of data provision and automated decision-making

The data requested is necessary to process the order; without it, the application cannot be made. No automated decisions are made, nor are profiles created.