Privacy Policy

1. Data Controller

How To Spain S.L.
CIF: B-40634671
Av. de l'Ouest, 46, puerta 1, Ciutat Vella, 46001, Valencia, Spain
Email: [email protected]
Phone: +34 623 362 806

2. Personal Data We Collect

We may collect the following personal data when you interact with our website or services:

• Name, email address, phone number (when you contact us via WhatsApp or other channels)
• Nationality, passport/ID details (required for immigration services)
• Employment and income information (required for visa eligibility assessment)
• Payment information (processed securely via Stripe; we do not store card details)
• IP address, browser type, and usage data (collected automatically via cookies)

3. Purpose of Data Processing

We process your personal data for the following purposes:

• To provide immigration consultancy and visa application services
• To assess your eligibility for the Spanish Digital Nomad Visa
• To process payments for our services
• To communicate with you regarding your case or inquiries
• To comply with legal obligations under Spanish and EU law
• To improve our website and services

4. Legal Basis for Processing (GDPR Art. 6)

• Contractual necessity: Processing required to provide our services
• Legal obligation: Compliance with Spanish immigration law and tax regulations
• Legitimate interest: Improving our services and website functionality
• Consent: Where you have given explicit consent (e.g., marketing communications)

5. Data Sharing

We may share your data with:

• Spanish government authorities (as required for visa applications)
• Payment processor (Stripe) for transaction processing
• Professional partners (notaries, translators) when necessary for your case

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described above, or as required by law. Immigration case files are retained for a minimum of 5 years in accordance with Spanish regulations.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the Spanish Data Protection Agency (AEPD)

To exercise your rights, contact us at [email protected].

8. International Transfers

Your data may be processed in countries outside the EEA only when adequate safeguards are in place (e.g., Standard Contractual Clauses approved by the European Commission).

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

10. Contact

For any questions regarding this Privacy Policy, contact us at:
Email: [email protected]
Address: Av. de l'Ouest, 46, puerta 1, 46001 Valencia, Spain