Privacy policy
This English version is provided for information. In case of discrepancy, the Spanish version prevails.
1. Data controller
Eva Carroz Rincón, a sole trader providing services under the trade name Fiscal-Track, NIF 60813119S, address Paseo de la Castellana 77, 28046 Madrid (Spain). Email for data protection matters: eac@fiscal-track.com.
2. What data we process, why, and on what legal basis
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form | Name, email address, telephone, type of company, message and language | To answer your enquiry and, where relevant, prepare a proposal | Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and, for general enquiries, our legitimate interest in replying (Art. 6(1)(f) GDPR) | While the enquiry is handled and up to one year after the last contact if no professional relationship begins. If one begins, data are kept in line with the contract and the applicable legal periods. |
| Server logs | IP address, date and time, page requested, browser | To keep the website secure and working and to detect abuse | Legitimate interest (Art. 6(1)(f) GDPR) | 30 days, then deleted automatically |
| Website usage statistics | Page visited, referring page, browser, operating system, device type, screen size, language and approximate country or region. The IP address is not stored. | To understand in aggregate how the website is used, in order to improve it | Legitimate interest (Art. 6(1)(f) GDPR) | 13 months, then deleted automatically |
Form data are not stored on the web server: the message is sent by email to the owner's mailbox, and the server only records whether sending succeeded, without its content.
No automated decisions are made and no profiles are created.
3. Recipients
Data are not disclosed to third parties unless required by law. To provide the service, the owner uses the following processors, under the contracts required by Article 28 GDPR:
- Hetzner Online GmbH (Germany): website hosting.
- Brevo (France): sending the email generated by the contact form. Brevo keeps a technical record of each email for 60 days.
- Microsoft Ireland Operations Ltd. (Ireland): the owner's email service.
Where any of these providers or their sub-processors process data outside the European Economic Area, they do so with appropriate safeguards, such as a European Commission adequacy decision or standard contractual clauses.
4. Cookies, storage and statistics
This website does not use cookies and does not store information on your device. For aggregate usage statistics it uses Umami, a tool installed on the website's own server (stats.fiscal-track.com): the data are not shared with third parties and do not leave that server. Umami does not record your IP address and groups visits with an anonymous identifier that is renewed periodically. Its script only checks whether you have switched off measurement, without writing anything to your device, and it respects your browser's "Do Not Track" signal. The website therefore shows no cookie notice.
5. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to eac@fiscal-track.com, with proof of identity.
If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
6. Accuracy of data
Users guarantee that the data they provide are accurate and, if they include third parties' data, that they are entitled to do so.
7. Changes to this policy
The owner may update this policy, for example if providers or processing activities change. The version in force is always the one published on this page.
Last updated: 25 October 2026