Privacy Policy

1. Data Controller

In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), the personal data you provide on this website will be processed by Holly G. Opatz, ID Z1701275Q, whose registered address is Carrer del Sant Esperit, 7, Palma, Spain. You can contact us at info@nomadtaxspain.com

2. Purpose of Processing

Your data will be used for the following purposes:

• Enquiry management: to respond to requests submitted via website forms or email.
• Professional services: to manage and deliver the tax, legal and relocation services you contract.
• Informative communications: to send newsletters and updates where you have given prior consent.
• Legal obligations & security: to comply with legal duties, prevent fraud and ensure network security.

Your data will not be processed for incompatible purposes without additional consent.

3. Legal Basis for Processing

• Consent (Art. 6 §1(a) GDPR): contact forms, newsletter sign‑ups and other marketing activities. You may withdraw consent at any time.
• Performance of a contract (Art. 6 §1(b)): data necessary to provide our services or take pre‑contractual steps at your request.
• Legal obligation (Art. 6 §1(c)): compliance with tax, anti‑money‑ laundering and bookkeeping laws, court orders or official requests.
• Legitimate interest (Art. 6 §1(f)): fraud prevention, network security and service improvement, provided such interests are not overridden by your rights.

4. Data Recipients

As a rule, your data will not be disclosed to third parties except when required by law.  Nevertheless, service providers that assist the controller (e.g. hosting, email, IT support, public administrations) may access your data when strictly necessary and under data‑processing agreements that guarantee confidentiality.

5. International Transfers

Data are preferably stored within the European Economic Area. When using third‑party services located outside the EEA (e.g. Google Workspace or Google Analytics in the United States), transfers rely on the European Commission’s Standard Contractual Clauses or any adequacy decision in force.

6. Data Retention

• Enquiries: one (1) year from the last interaction, unless you request earlier erasure.
• Clients: for the duration of the contractual relationship and subsequently for the statutory limitation period—generally five (5) years.
• Subscribers: until you unsubscribe.

After these periods, data will be securely deleted or anonymised.

7. Your Rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection by writing to info@nomadtaxspain.com and attaching a copy of your ID document.

If you believe your data have been misused, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security Measures

The controller applies appropriate technical and organisational measures (TLS encryption, backups, access controls, password policies, etc.) to safeguard the confidentiality and integrity of personal data.

9. Children’s Privacy

This website and its services are not directed to children under 14 years of age. We do not knowingly collect data from minors; if we discover such data, we will erase it immediately.

10. Changes to this Policy

We may update this Privacy Policy to reflect regulatory changes or data‑processing modifications. The revised version will be published at this URL with an updated revision date. We will notify you in advance if the changes are substantial.

11. Acceptance

By using this website you acknowledge that you have read and understood this Privacy Policy.