Privacy policy

Last updated: 29 October 2026

This page explains what personal data we collect through www.npcasesoria.com, what we use it for and what rights you have.

1. Who is responsible

NPC ASESORIA FINANCIERA Y FISCAL SL, tax ID (NIF) B01679018, registered in the Barcelona Companies Registry, volume 47399, folio 167, section 8, sheet B 550644, represented by its director, Neus Pesudo Casas.

  • Address: C/ Les Corts 10, 08028 Barcelona, Spain
  • Phone: +34 651 99 64 03
  • Email: [email protected]

2. Applicable law

This policy complies with the EU General Data Protection Regulation 2016/679 (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD) and Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).

3. What data we process

  • The data you give us in our contact forms: name, email, phone and your message.
  • The data you enter when you book a call or a consultation in our online calendar.
  • The data you send us by email or WhatsApp.
  • Your email address, if you subscribe to our blog or newsletter.
  • Browsing data (for example, IP address and pages visited), through cookies, as explained in our Cookie policy.

We do not ask for special category data (health, beliefs, ethnic origin and similar) through the website.

4. What we use it for and on what legal basis

  • To answer your questions and your requests for information or a quote. Legal basis: your consent and steps taken at your request before a possible contract.
  • To manage the appointments you book (free call or paid consultation). Legal basis: steps before a contract and, for the paid consultation, the contract itself.
  • To send you blog updates or our newsletter, if you subscribe. Legal basis: your consent, which you can withdraw at any time with the unsubscribe link in every email.
  • To measure visits and improve the website with Google Analytics, only if you accept analytics cookies. Legal basis: your consent.
  • To protect the website and forms against spam and attacks. Legal basis: our legitimate interest in keeping the website secure.

If you hire our services, the contract will tell you how we process the data needed to provide them and to meet our legal obligations.

We do not make automated decisions or create profiles with your data.

5. How long we keep it

  • Enquiries and requests that do not lead to a contract: as long as needed to deal with them and no more than 5 years, unless you ask us to delete them sooner.
  • Blog or newsletter subscription: until you unsubscribe.
  • Clients: for the duration of the relationship and then for the periods required by law (for example, tax and company law).
  • Browsing data: the period stated in the Cookie policy.

6. Who we share it with

We do not sell or pass your data to third parties, unless the law requires it. To run the website we use providers that process data on our behalf, under a contract that obliges them to protect it and use it only to provide their service to us:

  • cdmon: website hosting.
  • Cloudflare: website security and speed.
  • Google: Google Analytics (visit measurement) and reCAPTCHA (form protection).
  • hu-manity.co: cookie consent management.
  • Cal.com: management of the appointments you book.
  • WhatsApp (Meta): if you message us on WhatsApp.

Some of these providers may process data outside the European Economic Area, for example in the United States. In that case, the transfer is covered by the EU-US Data Privacy Framework or by standard contractual clauses approved by the European Commission.

7. Your rights

At any time you can ask us for:

  • Access: to know whether we process your data and which data.
  • Rectification: to correct data that is inaccurate or incomplete.
  • Erasure: to delete your data when it is no longer needed, you withdraw your consent or you object to the processing.
  • Objection: to stop processing your data.
  • Restriction: to keep your data without using it, in the cases provided by law.
  • Portability: to receive your data in a structured, commonly used format, or have us send it to another controller.
  • Withdrawal of consent, without affecting anything done with it before.

Write to [email protected] or to C/ Les Corts 10, 08028 Barcelona, Spain, with the reference «RGPD-www.npcasesoria.com», saying which right you want to exercise and attaching proof of identity. If a representative acts for you, include their identification and proof of representation. We will reply within one month.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the supervisory authority of the country where you live or work.

8. Minors

Our services are not aimed at minors. Children under 14 need the consent of their parents or guardians to give us their data.

9. Security

We apply appropriate technical and organisational measures to protect your data against loss, alteration or unauthorised access. The website uses an SSL certificate, so data travels encrypted. If a security breach posed a high risk to your rights, we would tell you without delay. Everyone who works with us is bound by confidentiality.

10. Links to other websites

The website may link to other websites that we do not manage. Each has its own privacy policy.

11. Changes to this policy

We may update this policy because of legal changes or changes to our services. The current version will always be published here with its update date, and if a change affects something you consented to, we will let you know.

This is a translation of our Spanish privacy policy. If there is any difference between the two, the Spanish version prevails.