Privacy notice

This notice explains how Worldwide Framework handles personal data in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD).

Data controller

Company

WORLDWIDE FRAMEWORK, S.L.

Tax ID (NIF)

B13708292

Address

Calle Gremi Sabaters, 21, Bl. 24 2, Polígono Son Castelló, 07009 Palma de Mallorca, Illes Balears, Spain

Contact for data protection

tax@worldwideframework.com

What data we process

• Enquiries: the details you send through the contact form or by email (name, email address, company, country, the area you need help with and your message), and anything else you choose to include.
• Clients: identification and contact details, and the personal, tax, financial and business information needed to provide the agreed services, including identity checks required by law.
• Job applications: your CV and any information you send to our careers address.
• Website use: technical data that any web server receives (such as IP address, browser type and the page requested), held briefly in server logs for security and to keep the site running.

Please do not include sensitive data (such as health information) in an enquiry unless it is needed for your matter. If you send us information about other people, make sure you are entitled to share it.

Why we use it and on what legal basis

• To answer your enquiry and prepare a proposal: steps taken at your request before entering into a contract (GDPR art. 6.1.b).
• To provide our services to clients: performance of the contract (art. 6.1.b).
• To meet our legal obligations, including tax, accounting and anti-money-laundering obligations under Spanish Law 10/2010: legal obligation (art. 6.1.c).
• To assess job applications: steps taken at your request before a possible employment contract (art. 6.1.b) and, to keep your application for future vacancies, your consent (art. 6.1.a), which you may withdraw at any time.
• To keep the website secure and working: our legitimate interest (art. 6.1.f).

We do not use your data for automated decision-making or profiling, and we do not send marketing communications without your consent.

How long we keep it

• Enquiries that do not lead to an engagement: up to 12 months after our last contact, then deleted.
• Client data: for the duration of the engagement and afterwards for the periods required by law, generally up to 6 years for accounting and commercial records (Commercial Code, art. 30), 4 years or longer for tax purposes, and 10 years for anti-money-laundering records (Law 10/2010).
• Job applications: up to 12 months, unless you ask us to delete them sooner.
• Server logs: for a short period set by our hosting provider, for security purposes only.

Who receives your data

We do not sell personal data or share it for advertising. We share it only where needed:

• Service providers acting on our behalf under data processing agreements: Vercel Inc. (website hosting), Resend (delivery of contact form messages by email) and the providers of our email and IT systems.
• Public authorities, such as the Spanish Tax Agency, where required by law or by the service you engage us for.
• Independent professionals, only when you ask us to introduce you to them.

International transfers

Some of our providers are based in the United States or may process data there. Where this happens, the transfer is covered by the safeguards required by the GDPR: the provider’s certification under the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

Your rights

You may ask us at any time to access, rectify or erase your data, to restrict or object to its processing, or to receive it in a portable format. Where processing is based on consent, you may withdraw it at any time without affecting earlier processing. Write to the email address above, indicating the right you wish to exercise; we may ask for proof of identity. We will reply within one month.

If you believe your data has not been handled properly, you may complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Providing your data

The fields marked as required in the contact form are needed to reply to you; without them we cannot handle your enquiry. Our services are not directed at children under 14.

Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) on this website and access limited to the people who need it.

Changes to this notice

We may update this notice to reflect changes in the law or in how we work. The date of the latest update is shown at the top of the page.