Machine-assisted translation of this legal document. The Spanish original (“Política de privacidad”) prevails in case of any discrepancy.
Data controller
- Address
- C/ de les Alqueries de Bellver, 89, 46035 València (Valencia), España
- Privacy email
- hola@landesp.com
What data we may process
- Identification data: name, surname, date of birth, nationality and ID document data.
- Contact data: email, phone and address.
- Information about your situation in Spain: city, arrival date, purpose and data needed to determine relevant services or procedures.
- Academic and professional information: education, qualifications, employment and professional activity when necessary for the contracted service.
- Family information: when necessary for residency, family reunification or other procedures.
- Financial information: necessary for quotes, invoicing, payments or certain administrative procedures.
- Case documentation: passport, NIE, TIE, forms, certificates and any documentation you choose to provide.
- Account data: credentials and information related to use of the private area.
- Technical data: IP address, device, browser and security logs necessary to operate and protect the platform.
- Eligibility quiz answers, voluntarily provided to generate guidance on possible services or routes.
Special categories of data
Some administrative procedures may require documentation containing especially protected information or data relating to criminal records. Landesp only requests and processes this information when necessary for a legitimate purpose linked to the contracted service and when a sufficient legal basis exists, applying minimisation and restricted-access measures.
Purposes and legal basis
Eligibility quiz results are for guidance only and do not by themselves produce legal effects or constitute an administrative decision.
| Purpose | Legal basis |
|---|---|
| Answering enquiries and contact forms | Pre-contractual measures requested by the data subject; consent where applicable |
| Running the eligibility quiz and providing initial guidance | User request; consent where necessary |
| Managing the contractual relationship and providing the service | Performance of the contract and pre-contractual measures |
| Managing the client area | Performance of the contract |
| Invoicing and tax, accounting or legal obligations | Compliance with legal obligations |
| Coordinating professionals and providers needed for the service | Performance of the contract, legal obligation or consent, depending on the case |
| Platform security | Legitimate interest in protecting our systems and users |
| Marketing communications | Consent, where given, or applicable legal basis |
Mandatory fields
When a field is marked as mandatory, it is because it is necessary to process the corresponding request. Missing certain data may prevent us from providing the requested service.
How long we keep the data
We keep data only for as long as needed for the purpose for which we collected it. We may then keep it blocked for the periods needed to meet legal duties or potential liabilities.
As a guide, we keep client and case data during the contract and for the legal periods that apply afterwards. We keep invoicing data for the periods required by tax and accounting law. We keep marketing data until you withdraw consent or object to its use.
Who we may share data with
We do not sell your data to third parties. Technology providers that run the platform may access it. Their services cover hosting, databases, authentication and payments; they include Supabase, Stripe and Vercel. Lawyers, tax advisors or translators may access data when their work is needed for the service you contract. Public authorities may also access it when needed for the service you request or when the law requires it. These include immigration, police, consulates, social security, the tax agency, town halls and registries.
Depending on the case, these professionals may act as processors or as independent controllers. Where applicable, we will tell you their identity and terms.
International transfers
Some of our technology providers may process data from countries outside the European Economic Area. Where an international data transfer takes place, we use the mechanisms permitted under the GDPR, such as adequacy decisions or appropriate safeguards.
Collaborating legal professionals
When a case requires individualised legal advice handled by an independent lawyer or law firm, that professional may act as an independent controller for the data necessary to provide their services. In that case, we will give you the relevant privacy information for that professional.
Automated decisions
The quiz and other tools may use automated rules to provide initial guidance. We do not use these tools exclusively to make decisions that produce legal effects on you or similarly significantly affect you, unless a legal basis permits it and the legally required safeguards are applied.
Security
We apply technical and organisational measures appropriate to the risk to protect data against unauthorised access, loss, alteration or improper disclosure. Access to client documentation is limited to the people and providers who need it to provide the service.
Minors
Our services are primarily aimed at adults. When a service affects a minor, we process the data in accordance with applicable law and, where necessary, with the involvement of their legal representatives.
Marketing communications
We only send electronic promotional communications when a legal basis permits it. Each communication includes a simple mechanism to object or unsubscribe.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction, portability and withdrawal of consent by writing to hola@landesp.com. You can also file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).