Privacy Policy
Effective date: pending legal review (draft).
At SotoWorks S.L. we process your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). This policy explains what data we process, for what purpose and on what legal basis, who we share it with, how long we keep it and what rights you have.
1. Data controller
The controller of your data is SotoWorks S.L., with registered office at Sotovilla II, Av. del Conchudo, local 4, 11360 Sotogrande, Cádiz, España, tax ID (CIF) B93650752 (company tax ID to be confirmed). For data-protection matters you can contact us at info@sotoworks.es.
2. Categories of data we process
- Identity and contact data: name, surname, address, email and phone number.
- Identity-verification (KYC) documents: identity card or passport and other information required by anti-money-laundering law.
- Billing and payment data: tax details and the information needed to process payment (the full card number is handled directly by the payment provider).
- Incoming-mail metadata: sender, type of item and date of receipt.
- Website usage data: technical and browsing information collected through cookies and similar technologies (see the Cookie Policy).
3. Purposes of processing
- To provide the professional business address and mail-handling service.
- To manage your registration, your account and the contractual relationship.
- To meet identity-verification and anti-money-laundering obligations.
- To issue invoices and manage payments.
- To respond to your enquiries and communications.
- With your consent, to send you marketing communications and to compile website usage statistics.
4. Legal basis for processing
- Performance of the contract: to provide the service and manage your account.
- Compliance with a legal obligation: in particular anti-money-laundering law and tax and accounting obligations.
- Consent: for marketing communications and for analytics and marketing cookies, which you may withdraw at any time.
- Legitimate interest: to ensure the security of our systems and the proper delivery of the service.
5. Recipients and processors
To deliver the service we rely on providers acting as processors on behalf of SotoWorks S.L., referred to here generically by their role:
- Payment services provider, to process payments.
- Identity-verification (KYC) provider, to verify your identity.
- Cloud hosting provider, where the information is stored.
- Web analytics provider and, where applicable, advertising pixels, subject to your consent.
6. International transfers
As a general rule, our providers process data within the European Union or the European Economic Area. Where any processing involves a transfer to a third country, it will take place only if appropriate safeguards under the GDPR are in place, such as an adequacy decision of the European Commission or standard contractual clauses.
7. Retention periods
We keep your data for the duration of the contractual relationship and, afterwards, for the periods required by applicable law. In particular, anti-money-laundering records are generally kept for ten years. Tax and accounting data are kept for the periods set out in the relevant legislation.
8. Your rights
You may exercise the following rights in relation to your personal data:
- Access to your personal data.
- Rectification of inaccurate data.
- Erasure of your data where applicable.
- Restriction of processing.
- Portability of your data.
- Objection to processing.
- Withdrawal of consent at any time, without affecting the lawfulness of prior processing.
9. How to exercise your rights and complain
You can exercise your rights by writing to info@sotoworks.es, indicating the right you wish to exercise. We may ask you to verify your identity.
If you believe that the processing of your data does not comply with the law, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.
Contact
For any question about this policy or the processing of your data, you can contact us at:
info@sotoworks.es