SpainDesk

Privacy Policy

Last updated: 2026-05-13

1. Data Controller

Data controller: Lex Dixit Tax and Legal, S.L. (CIF B 54821780), registered address: Avenida Catedrático Soler 3, Oficina 2, 03008 Alicante, Spain. SpainDesk is a brand of Lex Dixit Tax and Legal, S.L. Contact: office@lexdixit.com

For data protection matters, you may also contact us at: privacy@spain-desk.es

2. What Data We Collect

We collect only data you provide voluntarily:

  • Contact form: name, email address, phone number (optional), service of interest, message content
  • WhatsApp: your WhatsApp number and conversation content when you initiate contact
  • Analytics (opt-in only): anonymous usage data (pages visited, device type, country) — only with your consent
  • Technical data: IP address, browser type, and server logs retained for security and error-monitoring (max 30 days)

We do not collect: payment data, sensitive personal data, data from third-party social networks, or data from minors under 16.

3. Legal Basis for Processing

  • Consent (Art. 6(1)(a) GDPR) — analytics cookies, marketing communications
  • Legitimate interest (Art. 6(1)(f) GDPR) — processing inquiries, fraud prevention, security logs
  • Pre-contractual measures (Art. 6(1)(b) GDPR) — responding to consultation requests

4. How We Use Your Data

  • Responding to your consultation inquiries
  • Providing the advisory services you requested
  • Improving our website content and navigation (analytics, opt-in only)
  • Security and spam prevention (Cloudflare Turnstile — privacy-preserving, no personal data stored by Cloudflare)

We do not use your data for: unsolicited marketing, automated decision-making, profiling, or sale to third parties.

5. Data Sharing

We share data only with service providers acting as data processors under written agreement:

  • Formspree Inc. (form processing, USA — EU-US Data Privacy Framework compliant)
  • Cloudflare Inc. (security, Turnstile spam protection — privacy-preserving)
  • Google LLC (analytics, if consented — EU data residency configured)
  • Cloudflare Inc. (hosting provider — Cloudflare Pages, USA — EU-U.S. Data Privacy Framework)
  • WhatsApp / Meta Platforms Ireland Limited (messaging service, when user initiates contact via WhatsApp button): user-provided message content, phone number, profile name. Meta processes this data per the WhatsApp Business Privacy Policy and EU-U.S. Data Privacy Framework.

We do not sell, rent, or transfer your personal data to third parties for marketing or commercial purposes.

6. International Transfers

Some processors are based outside the EU/EEA (notably the USA). These transfers are covered by Standard Contractual Clauses (SCCs) or equivalent adequacy mechanisms (EU-US Data Privacy Framework). You can request details of the transfer safeguards at privacy@spain-desk.es.

7. Data Retention

  • Inquiry data: retained for 2 years from last contact, then securely deleted
  • Analytics data: 14 months maximum (Google Analytics default)
  • Security logs: 30 days
  • You may request earlier deletion at any time (see Your Rights below)

8. Your Rights Under GDPR

As a data subject, you have the right to:

  • Access — obtain a copy of the personal data we hold about you
  • Rectification — correct inaccurate or incomplete data
  • Erasure ("right to be forgotten") — request deletion of your data
  • Restriction — restrict processing in certain circumstances
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — at any time, without affecting prior processing

To exercise any right, email privacy@spain-desk.es. We respond within 30 days. You also have the right to lodge a complaint with the Spanish data protection authority: AEPD (Agencia Española de Protección de Datos).

9. Cookies

We use strictly necessary cookies (site security and functionality) and optional analytics cookies (only with your consent). See our Cookie Policy for full details.

10. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via a notice on our website. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

For any data protection questions or to exercise your rights:
Email: privacy@spain-desk.es
Subject line: "Data Protection Request"