This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your information when you use our Service, and informs you of your rights under applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR").
We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
Data Controller
For the purpose of this Privacy Policy and the GDPR, the Data Controller is:
Bureaucracy International Group B.V., a company registered in the Netherlands with the Dutch chamber of commerce number: KVK 88274276, located at Lange Wijngaardstraat 31-RD, 2011RK, Haarlem, Nederland. Our VAT number is NL864561702B01. Email: [email protected]
What Personal Data Do We Collect?
We may collect and process the following data:
- Identifying information: name, surname, date of birth, nationality, ID documents, postal address, email, phone number etc.
- Migration data: travel history, previous visas, passport, official documents, etc.
- Financial data: proof of income, bank statements, payslips, etc.
- Health data only when strictly necessary for certain migration procedures (e.g., medical tests).
- Browsing data: IP address, approximate location, browser, operating system, etc.
- Other documents: submitted directly by the client through our platform.
Legal Basis for Processing Personal Data
Under the GDPR, we must have a lawful basis to collect and use your personal data. We process your personal data based on one or more of the following legal grounds:
- Performance of a contract: When processing is necessary for the performance of a contract with you.
- Consent: When you have given us clear consent to process your personal data for a specific purpose (e.g., newsletter subscription).
- Legitimate interests: When the processing is necessary for our legitimate interests, provided your rights do not override those interests.
- Legal obligation: When we are legally required to process your data.
You have the right to withdraw your consent at any time.
Consent for Minors
Under the GDPR, if consent is used as the lawful basis for processing, we only process the data of children under the age of 16 with verified parental consent.
How Do We Collect This Data?
- Through online forms on our website.
- Through voluntary submission of documents by the user via our private platform.
- Through direct communication (newsletters, email, phone calls, messaging).
What Do We Use Your Data For?
We process your personal data for the following purposes, with your prior consent:
- To provide immigration and legal advisory services: contact you, manage your requests.
- To prepare and process visa or residence applications: manage your account, perform the contract.
- To communicate with official agencies or consulates.
- To comply with legal obligations.
- To prevent fraud and protect our services.
- To provide you with news, special offers and general information about other goods, services and events which we offer, unless you have opted not to receive such information.
Do We Share Your Data With Third Parties?
Yes, but only when strictly necessary to provide the service:
- Migration authorities, embassies, consulates.
- Technology service providers (under confidentiality agreements).
- Legal advisors or external collaborators under contract (tax advice, health insurance etc.) with your permission.
- Third parties for operational services (translators, copying and printing services, courier services, postal services).
We will never sell or rent out your personal data.
Where Do We Store Your Data?
Data is stored in our own secure platform, hosted on servers that comply with European security standards. We apply appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of the data.
How Long Do We Retain Your Data?
Data will be retained as long as necessary to fulfill the purposes for which it was collected, and subsequently for the legally required timeframes. In general:
- Administrative data: up to 10 years.
- Visa documentation: up to 5 years.
- Health data: only while necessary, then deleted.
What Are Your Rights?
You may exercise the following rights:
- Access: know exactly what data we process about you.
- Rectification: correct inaccurate data.
- Erasure: request the deletion of your data.
- Objection: object to the processing of certain data.
- Portability: receive your data in electronic format.
- Restriction: request restricted processing under certain conditions.
To exercise your rights, please contact us at: [email protected]. Include a copy of your ID so we can verify your identity.
Personal Data Transfer
The company will take all reasonable steps to ensure that your data is treated securely and in accordance with this privacy policy. No transfer of your personal data will take place to an organisation or country unless adequate controls are in place to ensure the security of your data.
If data needs to be transferred outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place, in accordance with the GDPR, such as standard contractual clauses or other adequacy mechanisms.
Business transactions: If the company is involved in a merger, acquisition or asset sale, you will be asked for your consent in advance to share or transfer your personal information in connection with these transactions.
Cookies and Similar Technologies
We use Cookies and similar tracking technologies to track the activity on our Service and store certain information. The technologies we use may include:
- Cookies or Browser Cookies. A cookie is a small file placed on your device. You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. Cookies can be "Persistent" or "Session" Cookies.
- Necessary or Essential Cookies: Essential to provide you with services available through the Website and to authenticate users.
- Notice Acceptance Cookies: To identify if users have accepted the use of cookies on the Website.
- Functionality Cookies: To allow us to remember choices you make, such as login details or language preference.
Information Security
We implement technical and organizational security measures to protect data against loss, misuse, unauthorized access, disclosure, or alteration. While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet is 100% secure.
Links to Other Websites
Our Service may contain links to other websites that are not operated by us. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content or privacy policies of any third party sites.
Changes to This Privacy Policy
We may update this policy at any time. We will notify users of any significant changes through our website or via electronic means. Changes are effective when posted on this page.
Contact Us
For questions or concerns about this Privacy Policy or how we handle your data, please contact us: [email protected]
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local data protection authority.