PRIVACY POLICY

In accordance with the provisions of the General Data Protection Regulation 2016/679 (GDPR) and Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD) dated December 5, 2018, we inform you of the following:

1. DATA CONTROLLER
   Identity: Cudna Hiszpania SLU with CIF B56959505, hereinafter "Controller"
   Address: Frigola 16, 1, 3. 46980, Paterna, Valencia
   Phone: +34 603 685558
   Contact Email: kontakt@espaytax.com

2. PURPOSE OF DATA PROCESSING
   The data you provide will be processed for the following purposes:

   • Managing the services offered through this website.

   • Informing about the website's activities, products, and services.

   • Executing, fulfilling, and performing the service agreement and responding to inquiries related to services requested through the website.

   • Customer service.

   In compliance with GDPR provisions, a record of data processing activities is maintained, detailing the processing actions and other circumstances as required by GDPR, based on the specified purposes. Personal data will not be used for purposes other than those related to the requested services or purchased products. No automated decisions will be made based on this profile.

3. LEGAL BASIS FOR DATA PROCESSING
   The legal basis for processing your data is:

   • Consent provided by the User by accepting this Policy and checking the appropriate box.

   • Legitimate interest in responding to inquiries or requests submitted through various contact channels.

   • A contractual or pre-contractual relationship in which the User has provided personal data necessary for processing requests or inquiries, making it necessary to maintain this relationship.

   • Legal obligations of the Controller requiring data processing in accordance with the provided services or for tax-related matters.

   The User may withdraw consent for the processing of personal data at any time. Withdrawal of consent will not affect the provision of services or performance of contracts with the Controller.

4. PROCESSED PERSONAL DATA AND ITS SOURCE
   The personal data processed is of an identifying nature and has been provided by the User through the contact form, email submissions, or features available on the website.
   Using the contact section, filling out forms, and utilizing website features is voluntary; however, certain fields are required for proper request processing. Refusal to provide required information may prevent the Controller from processing the request.

   The User guarantees that the data provided is true, accurate, and complete. Data will be canceled, deleted, or blocked if found to be incorrect, incomplete, or no longer necessary for processing purposes as per applicable regulations. If the provided personal data belongs to a third party, the User guarantees they have informed them of this Privacy Policy and obtained their consent for the aforementioned purposes. The User is responsible for the truthfulness and accuracy of the data they provide and agrees to keep it updated.

5. DATA PROTECTION FOR MINORS
   In compliance with GDPR and LOPDGDD, only individuals over 14 years of age can legally give consent to process their personal data. Only individuals over 14 years old may provide their personal data on this website. For minors under 14, parental or guardian consent is required.

6. PERSONAL DATA RETENTION PERIOD
   Personal data provided by the User will be retained as long as the User remains registered with the service, maintains a business relationship, until the User requests deletion, or for the legally established period. Data may also be retained if required to fulfill legal obligations or for the filing, exercising, or defending of claims.

   If the User withdraws consent or exercises their rights to oppose or delete, their data will be kept blocked for judicial purposes for the legally required periods to satisfy any claims arising from data processing. Withdrawal of consent will not affect the service provision or contract performance with the Controller.

7. CONFIDENTIALITY AND SECURITY OF PERSONAL DATA
   The Controller is committed to taking necessary technical and organizational measures according to the appropriate level of security to ensure the security of personal data and prevent its accidental or unlawful destruction, loss, alteration, unauthorized access, or disclosure.

   Personal data will be treated as confidential by the Controller, who commits to informing and ensuring compliance with confidentiality obligations by its employees, collaborators, and any person to whom data may be disclosed.

8. DATA TRANSFER AND RECIPIENTS OF PERSONAL DATA
   Your personal data will be transferred in cases provided by law, such as to public authorities to fulfill legal obligations directly affecting the Controller, or when necessary to fulfill the data processing purposes described above or provide essential services for business operations.

9. USER RIGHTS
   What rights do you have regarding your data?

   • The User has the right to confirm whether their personal data is being processed.

   • The User has the right to access their personal data, request rectification if inaccurate, or deletion if no longer necessary for the purposes for which they were collected.

   • In certain circumstances, the User may request restriction of their data processing; in such cases, data will only be retained for claims or defense purposes.

   • In certain situations, the User may object to their data processing, and the Controller will cease processing unless legally justified reasons exist or for claims or defense purposes.

   Where applicable, the User has the right to data portability, meaning the right to receive their processed personal data and store it on their own device.

   The User may exercise their rights to access, rectify, object, delete, restrict processing, and portability by sending a written request with a copy of their ID to confirm identity, with the title "GDPR Rights" to the address Frigola 16, 1, 3. 46980, Paterna, Valencia, or to the email address: kontakt@espaytax.com.

   Additionally, any complaints regarding personal data protection may be directed to the Spanish Data Protection Agency www.agpd.es, the supervisory authority in Spain.