Privacy Policy

• Trading name: Move Spain
• Email: info@spainmover.com
• Data protection contact: privacy@spainmover.com

• Identity data: full name, date and place of birth, nationality, marital status, gender where required by a form
• Identity documents: passport or national identity card details and scans
• Civil status documents: birth certificates, marriage certificates and, where relevant, apostilles and sworn translations
• Contact data: email address, telephone number, current address and address in Mallorca
• Household data: details of family members included in an application
• Housing data: rental contracts, property deeds and owner authorisations for empadronamiento
• Transaction data: package purchased, payment status, invoices and government fee receipts
• Technical data: IP address, browser identification, device data, timestamps, audit and consent logs

Where documents reveal special categories of data, they are processed only insofar as strictly necessary for the administrative procedure requested, on the basis of Art. 9(2)(f) GDPR or your explicit consent.

• Performance of the contract (Art. 6(1)(b) GDPR): preparing applications and official forms, reviewing documents, coordinating appointments, communicating with you
• Legal obligation (Art. 6(1)(c) GDPR): accounting, tax and invoicing obligations
• Legitimate interest (Art. 6(1)(f) GDPR): platform security, fraud prevention, service improvement and evidence of accepted terms
• Consent (Art. 6(1)(a) GDPR): non-essential cookies and optional marketing communications, withdrawable at any time

Passport scans, birth certificates and comparable documents are stored in private, access-controlled storage. They are never publicly accessible, are retrieved only through short-lived signed links, and are visible only to authorised staff working on your file.

You may request earlier deletion of uploaded documents once your case is closed by writing to the data protection contact.

• Application documents: deleted 12 months after completion or cancellation of the case, unless a longer period is legally required
• Invoices and accounting records: retained for the statutory period under Spanish tax law (currently 6 years)
• Consent and acceptance logs: retained for the duration of the limitation period applicable to the contract
• Account data: deleted on request, subject to the retention periods above

Requests can be sent to privacy@spainmover.com and are answered within one month. You also have the right to lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (www.aepd.es).

• Access to your personal data and a copy of it
• Rectification of inaccurate or incomplete data
• Erasure where the data is no longer necessary
• Restriction of processing and objection to processing based on legitimate interest
• Data portability in a structured, machine-readable format
• Withdrawal of consent at any time, without affecting prior lawful processing

All processors act under a data processing agreement pursuant to Art. 28 GDPR and may process data only on our documented instructions.

• Cloud hosting and application infrastructure provider
• Managed database, authentication and encrypted file storage provider
• Transactional email provider
• Messaging provider for appointment notifications
• Payment service provider
• Where applicable: sworn translators, notaries and couriers engaged at your request

Data is hosted within the European Union wherever possible. Where a processor transfers data outside the European Economic Area, the transfer is covered by an adequacy decision or by the European Commission's Standard Contractual Clauses together with supplementary technical measures.

We apply encryption in transit and at rest, role-based access control, row-level database security, private storage buckets, audit logging and regular backups. Access to customer documents is limited to personnel who need it to perform the service.

The platform uses strictly necessary cookies for authentication and security. Analytics and marketing cookies are used only with your consent. See the Cookie Policy for details.

This policy may be updated. The current version is 1.0. Material changes are communicated by email or through the platform.