Who processes your data
Salama Legal SLP, tax identification number B25943473, registered office at C/ General Marina 14, 2.º izq., 52001 Melilla, Spain, email salamalegaltax@gmail.com, is the data controller. Salama Tax is a trading name of that firm and not a separate entity, so data collected through this website is processed by Salama Legal SLP.
What we process, and why
| Purpose | Data | Legal basis |
|---|---|---|
| Answering your enquiry and preparing a quotation | Name, email, telephone number and whatever you tell us about your situation | Your consent, and the pre-contractual steps you have asked us to take |
| Providing the service: keeping your records and filing your returns | Identification and tax number, property details, invoices, income and expenses | Performance of the contract |
| Meeting our own legal obligations | Invoicing data, anti-money-laundering checks where applicable, records kept for tax purposes | Legal obligation |
| Telling you about changes in the law that affect you | Email and telephone number | Our legitimate interest in keeping a client informed |
Where the legal basis is consent, you may withdraw it at any time, and withdrawing it does not affect the lawfulness of what was done before. Where the basis is our legitimate interest, you may object, and we will stop unless there are compelling grounds that override your interests.
Providing the data marked as necessary in a form is a condition of our being able to answer you. If you prefer not to give it, write to us instead and tell us as much or as little as you choose; you can always describe a situation in general terms before deciding whether to identify yourself.
Where the data comes from
Normally from you. In the course of an engagement we may also obtain data from public sources and official registers that we are entitled to consult, such as the Land Registry, the cadastre, the commercial register or, with your authorisation, your own file at the Agencia Tributaria. Where a third party gives us your data — a family member in an inheritance matter, for instance, or a co-owner of a property — the categories are the same as those set out in the table above.
How long we keep it
For as long as you are a client and, afterwards, for the periods during which a tax matter can still be reviewed and during which professional liability can still be claimed. The file is not deleted at the end of the engagement, because both you and we may need it.
Data relating to an enquiry that does not lead to an engagement is deleted after one year.
Who we share it with
- The Agencia Tributaria and any other authority to which we file what you have instructed us to file. This is the point of the service.
- Technology suppliers acting as processors on our behalf: email and storage (Google Ireland Limited) and form handling (FormCarry). They act only on our instructions and under a contract that requires them to.
- Administrative support staff bound by a processor contract and by a duty of confidentiality.
We do not sell personal data, we do not share it for advertising, and we do not use it to build profiles about you.
International transfers
Part of the administrative work may be carried out by personnel located outside the European Economic Area. Where that happens, the transfer is covered by the standard contractual clauses approved by the European Commission, together with the additional measures required by article 46 of the General Data Protection Regulation. You may ask us for a copy of those safeguards by writing to the address above.
Your rights
You may ask us for access to your data, for its rectification or erasure, for the restriction of processing or to object to it, and for portability, by writing to salamalegaltax@gmail.com. We will reply within one month. If the request is complex we may extend that period, and we will tell you if we do.
Two limits are worth stating honestly. Erasure does not override a legal obligation to keep records, so we cannot delete what the tax rules or the professional rules require us to retain. And portability applies to the data you provided to us, not to the work product we created from it.
If you believe we have not dealt with your request properly, you may complain to the Spanish Data Protection Agency (AEPD, www.aepd.es), which is the supervisory authority for Spain. You may also complain to the supervisory authority of the country where you live.
Security
We apply technical and organisational measures appropriate to the risk, including access control, encryption in transit, restricted storage and confidentiality obligations on everyone who handles a file. No system is immune, and if a breach occurred that was likely to result in a high risk to your rights we would notify you as well as the supervisory authority, within the periods the Regulation sets.
Professional secrecy goes further
Independently of everything above, what you tell us is covered by the professional secrecy of a lawyer, which is a stricter duty than data protection law. It is not qualified by a legitimate interest, it does not expire when the engagement ends, and it binds us personally as well as institutionally. In practice, this is the protection that matters most to the people who write to us.
For what this website stores in your browser, which is almost nothing, see the cookies page. For who owns the site and the professional rules we are subject to, see the legal notice.