EspalloEspallo

Privacy Policy

Last updated: June 2025

1. Data controller

Espallo is the data controller for the personal data we collect about you in connection with your use of our service. Contact: info@espallo.com

2. What data we process

We process the following categories of personal data:

  • Contact details: Name, email address, phone number
  • Identification details: Passport number, issue date, expiry date
  • Personal details: Date of birth, place of birth, nationality, gender, marital status
  • Address details: Home address, postal code, city, country
  • Digital signature: Image file of your digital signature
  • Technical data: IP address, browser type (via cookies)

3. Purpose and legal basis

Delivery of our service (contract, GDPR art. 6(1)(b)): We process your data to complete and submit your NIE application and to coordinate with our partner lawyers and notaries in Spain.
Legal obligation (GDPR art. 6(1)(c)): We are required to retain certain data for accounting purposes under Danish bookkeeping law.
Legitimate interest (GDPR art. 6(1)(f)): We process technical data to secure and improve our platform.

4. Disclosure of data

We disclose your personal data to the partner lawyers or notaries in Spain who process your NIE application. This is necessary to deliver our service.

We use the following data processors (vendors):

  • Supabase Inc. (USA): Databases and file storage. Transfers rely on Standard Contractual Clauses (SCCs) approved by the European Commission.
  • Vercel Inc. (USA): Hosting of the platform. Transfers rely on SCCs.

We never sell your personal data to third parties.

5. Retention

We retain your data for as long as necessary to deliver our service and comply with legal obligations:

  • Application data: 5 years after the case is closed (Danish bookkeeping law)
  • Account details: Deleted 2 years after your account is deactivated
  • Technical logs: 90 days

6. Your rights

Under the GDPR, you have the following rights:

  • Access: You can request a copy of your data
  • Rectification: You can have incorrect data corrected
  • Erasure: You can request deletion (subject to our legal obligations)
  • Restriction: You can request restriction of processing
  • Data portability: You can receive your data in a machine-readable format
  • Objection: You can object to processing based on legitimate interest

To exercise your rights, contact us at info@espallo.com. You can also file a complaint with the Danish Data Protection Agency (Datatilsynet): datatilsynet.dk, Borgergade 28, 5., 1300 Copenhagen K, Denmark.

7. Cookies

We use cookies to ensure our platform functions correctly and for analytics purposes. See our cookie policy for further details.