Machine-assisted translation of this legal document. The Spanish original (“Política de privacidad”) prevails in case of any discrepancy.
Data controller
- Privacy email
- hola@landesp.com
What data we may process
- Identification data: name, surname, date of birth, nationality and ID document data.
- Contact data: email, phone and address.
- Information about your situation in Spain: city, arrival date, purpose and data needed to determine relevant services or procedures.
- Academic and professional information: education, qualifications, employment and professional activity when necessary for the contracted service.
- Family information: when necessary for residency, family reunification or other procedures.
- Financial information: necessary for quotes, invoicing, payments or certain administrative procedures.
- Case documentation: passport, NIE, TIE, forms, certificates and any documentation you choose to provide.
- Account data: credentials and information related to use of the private area.
- Technical data: IP address, device, browser and security logs necessary to operate and protect the platform.
- Eligibility quiz answers, voluntarily provided to generate guidance on possible services or routes.
Special categories of data
Some administrative procedures may require documentation containing especially protected information or data relating to criminal records. Landesp only requests and processes this information when necessary for a legitimate purpose linked to the contracted service and when a sufficient legal basis exists, applying minimisation and restricted-access measures.
Purposes and legal basis
Eligibility quiz results are for guidance only and do not by themselves produce legal effects or constitute an administrative decision.
| Purpose | Legal basis |
|---|---|
| Answering enquiries and contact forms | Pre-contractual measures requested by the data subject; consent where applicable |
| Running the eligibility quiz and providing initial guidance | User request; consent where necessary |
| Managing the contractual relationship and providing the service | Performance of the contract and pre-contractual measures |
| Managing the client area | Performance of the contract |
| Invoicing and tax, accounting or legal obligations | Compliance with legal obligations |
| Coordinating professionals and providers needed for the service | Performance of the contract, legal obligation or consent, depending on the case |
| Platform security | Legitimate interest in protecting our systems and users |
| Marketing communications | Consent, where given, or applicable legal basis |
Mandatory fields
When a field is marked as mandatory, it is because it is necessary to process the corresponding request. Missing certain data may prevent us from providing the requested service.
How long we keep the data
Data is kept only for as long as necessary to fulfil the purpose for which it was collected. It may then be kept blocked for the periods necessary to meet legal obligations or potential liabilities.
As a reference: client and case data is kept for the duration of the contractual relationship and the applicable legal periods afterwards; invoicing data, for the periods required by tax and accounting law; and marketing data, until you withdraw consent or object to the processing.
Who we may share data with
We do not sell your data to third parties. It may be accessed by technology providers that operate the platform (hosting, database, authentication and payments, including Supabase, Stripe and Vercel), collaborating professionals such as lawyers, tax advisors or translators when their involvement is necessary for the contracted service, and public authorities — immigration, police, consulates, social security, the tax agency, town halls and registries — when necessary for the requested service or when there is a legal obligation.
Depending on the case, collaborating professionals may act as processors or as independent controllers; where applicable, we will inform you of their identity and terms.
International transfers
Some of our technology providers may process data from countries outside the European Economic Area. Where an international data transfer takes place, we use the mechanisms permitted under the GDPR, such as adequacy decisions or appropriate safeguards.
Collaborating legal professionals
When a case requires individualised legal advice handled by an independent lawyer or law firm, that professional may act as an independent controller for the data necessary to provide their services. In that case, we will give you the relevant privacy information for that professional.
Automated decisions
The quiz and other tools may use automated rules to provide initial guidance. We do not use these tools exclusively to make decisions that produce legal effects on you or similarly significantly affect you, unless a legal basis permits it and the legally required safeguards are applied.
Security
We apply technical and organisational measures appropriate to the risk to protect data against unauthorised access, loss, alteration or improper disclosure. Access to client documentation is limited to the people and providers who need it to provide the service.
Minors
Our services are primarily aimed at adults. When a service affects a minor, we process the data in accordance with applicable law and, where necessary, with the involvement of their legal representatives.
Marketing communications
We only send electronic promotional communications when a legal basis permits it. Each communication includes a simple mechanism to object or unsubscribe.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction, portability and withdrawal of consent by writing to hola@landesp.com. You can also file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).