Privacy policy

1. Who is responsible for processing your data

Hugo Madrid Rodríguez, with Spanish tax ID (NIF) 23845033J, trading as "Asesoría Madal", with an address at Carrer d'Anna M. Martínez Sagí, 30, 08041 Barcelona, Spain, and contact email contacto@asesoriamadal.es.

2. What data we process, for what purpose, and for how long

• Price simulator: your tax regime, invoice volume, whether you have employees, and whether you're interested in reporting. We store these answers together with a quote number, so we can help with your case if you contact us with that number, and to understand what kind of client profiles visit us. At the end of the simulator you can leave us your email so we can contact you: this is optional, and we only store it if you tick the box accepting this same policy, at the same step where you type it in. Legal basis: pre-contractual measures at the data subject's request (Art. 6(1)(b) GDPR). Retention: for as long as needed to send you the proposal and follow up on it.
• Call booking: if you book a call through our calendar, we process your name, email and phone number in order to contact you and prepare the call. This data is collected by an external provider (see point 4). Legal basis: pre-contractual measures at the data subject's request (Art. 6(1)(b) GDPR). Retention: until the call takes place and any subsequent follow-up.
• Direct email: if you write to us at contacto@asesoriamadal.es, we process the data you include in your message in order to reply. Legal basis: legitimate interest in handling business enquiries / pre-contractual measures (Art. 6(1)(b) GDPR). Retention: until the enquiry is resolved or, if no business relationship is formalised, for 6-12 months.
• WhatsApp: the website includes a button that opens a WhatsApp chat with our business number. When you click it you move to WhatsApp (app or web), and from then on the service is provided by WhatsApp under its own privacy policy; we receive no data from the click itself. If you write to us, we process your phone number, profile name and the content of your messages in order to reply. Legal basis: pre-contractual measures at the data subject's request (Art. 6(1)(b) GDPR). Retention: until the enquiry is resolved or, if no business relationship is formalised, for 6-12 months.
• Visit analytics: we use Umami, hosted on our own server, to count visits and most-read pages. It doesn't use cookies and doesn't identify you individually: the data is aggregated. More detail in the cookie policy.

3. Who we share your data with

• Vercel Inc.: hosts the website. A US-based company, certified under the EU-US Data Privacy Framework.
• Supabase: the database where simulator responses are stored. The instance is hosted on servers within the European Union.
• Calendly LLC: manages call bookings, whenever you book one. A US-based company, certified under the EU-US Data Privacy Framework.
• WhatsApp (Meta Platforms Ireland Ltd. and its group): messaging, only if you choose to write to us on WhatsApp. The messages you send go through their servers, which may be outside the European Union, under the safeguards Meta describes in its privacy policy.

We do not sell or share your data with third parties for advertising purposes.

4. Your rights

You can request access, rectification, erasure, restriction, objection and portability of your data by writing to contacto@asesoriamadal.es. You can also file a complaint with the Spanish Data Protection Agency (AEPD, aepd.es) if you believe we have not handled your request correctly.

5. Changes to this policy

We may update this document as the business is formally incorporated and new tools are added (for example, when Google Ads conversion tracking is switched on — see the cookie policy). We recommend checking it from time to time.