Privacy Policy

Who we are

Easy210Spain is a managed tax filing service operated by Expat Abogados, a law firm registered in Moraira, Alicante, Spain. The data controller is Juan Bertomeu, ICALI registration #4643.

Contact: legal@expatabogados.com

What data we collect

• Account data: name, email address, password (hashed), phone number (optional)
• Case data: property address, tax year, country of residence, number of owners, service type
• Documents: passport scans, NIE certificates, property deeds, IBI receipts, rental contracts, and other tax-related documents you upload
• Payment data: processed by Stripe. We do not store card details.
• IBAN: if provided for SEPA domiciliation, encrypted at rest using Transparent Column Encryption
• Communication data: contact form submissions, consultation records

Why we process your data

• To provide the tax filing service you requested (legal basis: contract performance)
• To comply with Spanish tax and legal obligations (legal basis: legal obligation)
• To communicate about your case status and results (legal basis: contract performance)
• To send service-related notifications (legal basis: legitimate interest)

Where your data is stored

All data is stored within the European Union (Frankfurt, Germany) using Supabase managed infrastructure. Documents are stored with server-side encryption and accessed only through time-limited signed URLs.

Who has access

Only you and the legal team at Expat Abogados can access your case data and documents. We do not share your data with third parties except as required to file your tax declaration with the AEAT (Spanish Tax Agency) or as required by law.

Data retention

Tax-related documents and case records are retained for a minimum of 4 years after the relevant tax year, in compliance with Spanish tax legislation. You may request deletion of non-essential data at any time.

Your rights (GDPR)

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion (subject to legal retention requirements)
• Export your data in a portable format
• Object to processing based on legitimate interest
• Lodge a complaint with the Spanish Data Protection Agency (AEPD)

To exercise any of these rights, contact us at legal@expatabogados.com.

Cookies

Easy210Spain uses only essential cookies required for authentication and session management. We use Plausible Analytics, which does not use cookies and does not track personal data. No cookie consent banner is required.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated to registered users via email.