{"id":988496,"date":"2025-02-19T13:37:15","date_gmt":"2025-02-19T13:37:15","guid":{"rendered":"https:\/\/sergomconsultors.com\/privacy-policy\/"},"modified":"2026-10-01T09:37:41","modified_gmt":"2026-10-01T09:37:41","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/sergomconsultors.com\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"988496\" class=\"elementor elementor-988496 elementor-1092\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5c90a95 e-flex e-con-boxed e-con e-parent\" data-id=\"5c90a95\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"vamtam-has-theme-widget-styles elementor-element elementor-element-94e3bf9 elementor-widget elementor-widget-text-editor\" data-id=\"94e3bf9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em>Last updated: 1 October 2026<\/em><\/p>\n<p>At Sergom Consultors we handle a lot of personal data: from people who write to us through the website and, above all, from clients who trust us with their taxes, accounts, payroll or paperwork. This page explains, with as little jargon as possible, what data we collect, why, how long we keep it and what you can do to control it.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-923a736 elementor-widget elementor-widget-heading\" data-id=\"923a736\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">1. Who is the data controller<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"vamtam-has-theme-widget-styles elementor-element elementor-element-a38fd54 elementor-widget elementor-widget-text-editor\" data-id=\"a38fd54\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul>\n<li><strong>Controller:<\/strong> CONSULTORIA Y DESARROLLO DE NEGOCIOS BCN, S.L.<\/li>\n<li><strong>Trading name:<\/strong> Sergom Consultors<\/li>\n<li><strong>Tax ID (NIF):<\/strong> B55490544<\/li>\n<li><strong>Address:<\/strong> C\/ Dos de Maig, 25, 3r 1a, 08172 Sant Cugat del Vall\u00e8s (Barcelona), Spain<\/li>\n<li><strong>Phone:<\/strong> <a href=\"tel:+34647955230\">+34 647 955 230<\/a><\/li>\n<li><strong>Email:<\/strong> <a href=\"mailto:info@sergomconsultors.com\">info@sergomconsultors.com<\/a><\/li>\n<\/ul>\n<p>We have not appointed a data protection officer because the law does not require us to. For any privacy matter, write to the email address above.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-301850c elementor-widget elementor-widget-heading\" data-id=\"301850c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">2. What data we process<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"vamtam-has-theme-widget-styles elementor-element elementor-element-5f55720 elementor-widget elementor-widget-text-editor\" data-id=\"5f55720\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul>\n<li><strong>If you contact us<\/strong> through the website, by phone, email, WhatsApp or video call: your name, phone number, email address and whatever you tell us about your enquiry.<\/li>\n<li><strong>If you are a client:<\/strong> identification and contact details (including your ID document), tax, financial and asset data, bank details, employment and social security data, data about family members when the service requires it (for example, an income tax return or an inheritance) and the digital certificates and powers of attorney you entrust to us.<\/li>\n<li><strong>Health data<\/strong>, only when the service requires it: sick leave in payroll management or a disability rating to apply a tax deduction.<\/li>\n<li><strong>If you subscribe to our newsletter:<\/strong> your name and email address.<\/li>\n<li><strong>If you send us your CV:<\/strong> the data you include in it.<\/li>\n<\/ul>\n<p>If you give us data about other people (family members, employees, partners or heirs), you must have informed them first and be entitled to share it.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-18f135d elementor-widget elementor-widget-heading\" data-id=\"18f135d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">3. Why we use your data and on what legal basis<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"vamtam-has-theme-widget-styles elementor-element elementor-element-8c38fb2 elementor-widget elementor-widget-text-editor\" data-id=\"8c38fb2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>a) To answer enquiries and call requests<\/strong> received through the website forms, the &#8220;Book a call&#8221; window, email, phone, WhatsApp or video call.<br><em>Legal basis:<\/em> your consent (Art. 6(1)(a) GDPR) and, if you are enquiring about hiring us, steps taken prior to entering into a contract (Art. 6(1)(b) GDPR).<\/p>\n<p><strong>b) To provide the services you hire us for:<\/strong> tax, accounting, employment, corporate, legal, administrative paperwork, grants, financing, insurance, inheritance, immigration and vehicle services. This includes representing you before public authorities with your digital certificate or the powers you grant us, giving you access to the client area and signing documents electronically.<br><em>Legal basis:<\/em> performance of the contract (Art. 6(1)(b) GDPR) and compliance with the legal obligations each procedure involves (Art. 6(1)(c) GDPR).<\/p>\n<p><strong>c) To process health data<\/strong> when a procedure requires it.<br><em>Legal basis:<\/em> compliance with employment and social security obligations (Art. 9(2)(b) GDPR) and, in other cases such as disability in an income tax return, your explicit consent (Art. 9(2)(a) GDPR).<\/p>\n<p><strong>d) To comply with anti-money laundering law:<\/strong> identifying you, verifying your identity, understanding your activity and keeping the records.<br><em>Legal basis:<\/em> legal obligation (Art. 6(1)(c) GDPR and Spanish Law 10\/2010 of 28 April).<\/p>\n<p><strong>e) To invoice and keep our own accounts.<\/strong><br><em>Legal basis:<\/em> legal obligation (Art. 6(1)(c) GDPR).<\/p>\n<p><strong>f) To send you marketing communications<\/strong> (newsletter, tax updates, deadline reminders and services) by email, SMS or WhatsApp.<br><em>Legal basis:<\/em> if you subscribed, your consent (Art. 6(1)(a) GDPR). If you are already a client, our legitimate interest in telling you about services similar to those you have hired (Art. 21.2 of Spanish Law 34\/2002, LSSI). Either way, you can unsubscribe at any time from any message.<\/p>\n<p><strong>g) To ask you for a review<\/strong> on Google after providing a service.<br><em>Legal basis:<\/em> our legitimate interest in hearing your opinion and improving (Art. 6(1)(f) GDPR). You can object at any time.<\/p>\n<p><strong>h) To assess your application<\/strong> if you send us your CV.<br><em>Legal basis:<\/em> your consent (Art. 6(1)(a) GDPR).<\/p>\n<p><strong>i) To manage our LinkedIn and Instagram profiles<\/strong> and reply to interactions.<br><em>Legal basis:<\/em> your consent when you follow us or write to us. Each network processes data under its own policy; for profile statistics, we are joint controllers with LinkedIn Ireland Unlimited Company and Meta Platforms Ireland Ltd.<\/p>\n<p>We do not make automated decisions or create profiles with your data.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b64ce42 elementor-widget elementor-widget-heading\" data-id=\"b64ce42\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">4. When we process data on behalf of our clients<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"vamtam-has-theme-widget-styles elementor-element elementor-element-1012f03 elementor-widget elementor-widget-text-editor\" data-id=\"1012f03\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>When we keep the accounts, run the payroll or manage the paperwork of a company or self-employed client, we process data about their employees, customers and suppliers on their behalf. In these cases the client is the data controller and Sergom acts as a data processor (Art. 28 GDPR). We always do so under a signed processing agreement that sets out the instructions, confidentiality, security measures and the return or destruction of the data when the service ends.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-907a70c elementor-widget elementor-widget-heading\" data-id=\"907a70c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">5. How long we keep your data<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"vamtam-has-theme-widget-styles elementor-element elementor-element-0f4205b elementor-widget elementor-widget-text-editor\" data-id=\"0f4205b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul>\n<li><strong>Enquiries that do not become an engagement:<\/strong> one year.<\/li>\n<li><strong>Clients:<\/strong> for as long as the relationship lasts and then for the legal periods: six years for accounting records (Art. 30 of the Spanish Commercial Code), four years for tax records (General Tax Law), extendable if proceedings are open, four years for employment and social security records, and ten years for anti-money laundering records from the end of the relationship (Art. 25 of Law 10\/2010).<\/li>\n<li><strong>Digital certificates and powers of attorney:<\/strong> for as long as the engagement lasts. When it ends or you revoke the authorisation, we delete them from our systems.<\/li>\n<li><strong>Health data:<\/strong> only as long as needed for the procedure and as required by the relevant legal obligation.<\/li>\n<li><strong>Newsletter:<\/strong> until you unsubscribe.<\/li>\n<li><strong>CVs:<\/strong> one year.<\/li>\n<\/ul>\n<p>After these periods, we keep the data blocked only while legal liability may arise, and then delete it.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9e7769b elementor-widget elementor-widget-heading\" data-id=\"9e7769b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">6. Who we share data with<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"vamtam-has-theme-widget-styles elementor-element elementor-element-34b9b5d elementor-widget elementor-widget-text-editor\" data-id=\"34b9b5d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>When the service requires it or the law obliges us, we share data with the Spanish Tax Agency, the Catalan Tax Agency, the Social Security General Treasury, the Public Employment Service (SEPE), the Commercial and Property Registries, notaries, local councils and other authorities, courts, and the Executive Service of the Commission for the Prevention of Money Laundering (SEPBLAC) where the law requires. We only share data with banks and insurers when you ask us to arrange financing or insurance, and always with your knowledge.<\/p>\n<p>The following providers may access data as processors, under contract and bound by confidentiality:<\/p>\n<ul>\n<li>Website hosting and maintenance: Addicional Marketing, S.L.<\/li>\n<li>Email and cloud storage: Microsoft 365 (Microsoft Ireland Operations Ltd.)<\/li>\n<li>Newsletter delivery: Acumbamail (Sitelabs Media, S.L.)<\/li>\n<li>Tax, accounting and payroll software<\/li>\n<li>Electronic signature platform and client area<\/li>\n<li>Messaging and video calls, including WhatsApp (WhatsApp Ireland Limited)<\/li>\n<\/ul>\n<p>We never sell or share your data for marketing purposes.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7f15052 elementor-widget elementor-widget-heading\" data-id=\"7f15052\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">7. International transfers<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"vamtam-has-theme-widget-styles elementor-element elementor-element-ae2eb15 elementor-widget elementor-widget-text-editor\" data-id=\"ae2eb15\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Some technology providers, such as Google (Analytics), Microsoft, WhatsApp, Meta or LinkedIn, may process data outside the European Economic Area, mainly in the United States. In those cases, transfers rely on GDPR safeguards: the European Commission&#8217;s adequacy decision on the EU-US Data Privacy Framework, for certified companies, or the standard contractual clauses approved by the Commission.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-881ed16 elementor-widget elementor-widget-heading\" data-id=\"881ed16\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">8. Your rights<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"vamtam-has-theme-widget-styles elementor-element elementor-element-6d76b07 elementor-widget elementor-widget-text-editor\" data-id=\"6d76b07\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>You can exercise the following rights at any time:<\/p>\n<ul>\n<li><strong>Access:<\/strong> find out whether we process your data and get a copy.<\/li>\n<li><strong>Rectification:<\/strong> correct inaccurate or incomplete data.<\/li>\n<li><strong>Erasure:<\/strong> ask us to delete it when it is no longer needed.<\/li>\n<li><strong>Objection:<\/strong> object to certain processing, such as marketing communications or review requests.<\/li>\n<li><strong>Restriction:<\/strong> ask us to keep it only for specific purposes.<\/li>\n<li><strong>Portability:<\/strong> receive the data you gave us in a structured, commonly used format.<\/li>\n<li><strong>Withdraw consent<\/strong> at any time, without affecting earlier processing.<\/li>\n<\/ul>\n<p>Write to <a href=\"mailto:info@sergomconsultors.com\">info@sergomconsultors.com<\/a> or by post to the address in section 1, saying which right you want to exercise. We will reply within one month. If we have reasonable doubts about your identity, we may ask you to prove it. We cannot delete some data while a law requires us to keep it; in that case, we will keep it blocked.<\/p>\n<p>If you think we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (<a href=\"https:\/\/www.aepd.es\" target=\"_blank\" rel=\"noopener\">www.aepd.es<\/a>). If you prefer, write to us first and we will try to put it right.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c6f8771 elementor-widget elementor-widget-heading\" data-id=\"c6f8771\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">9. Security and professional secrecy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"vamtam-has-theme-widget-styles elementor-element elementor-element-506bf2e elementor-widget elementor-widget-text-editor\" data-id=\"506bf2e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>We apply technical and organisational measures to protect data against loss, unauthorised access or alteration. The whole team is bound by a duty of confidentiality, and access to clients&#8217; digital certificates and documents is restricted to the people handling each file.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7731af1 elementor-widget elementor-widget-heading\" data-id=\"7731af1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">10. Minors<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"vamtam-has-theme-widget-styles elementor-element elementor-element-95e761d elementor-widget elementor-widget-text-editor\" data-id=\"95e761d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Our online services are not aimed at children under 14. When a service requires data about a minor, such as a family income tax return or an inheritance, it must be provided by their parents or guardians.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ec66a78 elementor-widget elementor-widget-heading\" data-id=\"ec66a78\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">11. Changes to this policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"vamtam-has-theme-widget-styles elementor-element elementor-element-7403e43 elementor-widget elementor-widget-text-editor\" data-id=\"7403e43\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>We may update this policy to reflect legal changes or changes to our services. The version in force will always be the one on this page, with the date of the last update.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>What data we process, why, how long we keep it and how you can exercise your rights.<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-988496","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/sergomconsultors.com\/en\/wp-json\/wp\/v2\/pages\/988496","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sergomconsultors.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sergomconsultors.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sergomconsultors.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sergomconsultors.com\/en\/wp-json\/wp\/v2\/comments?post=988496"}],"version-history":[{"count":1,"href":"https:\/\/sergomconsultors.com\/en\/wp-json\/wp\/v2\/pages\/988496\/revisions"}],"predecessor-version":[{"id":988497,"href":"https:\/\/sergomconsultors.com\/en\/wp-json\/wp\/v2\/pages\/988496\/revisions\/988497"}],"wp:attachment":[{"href":"https:\/\/sergomconsultors.com\/en\/wp-json\/wp\/v2\/media?parent=988496"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}