1. Data controller

ControllerKUBERANEX, S.L.
Tax ID (NIF)B-27678309
Registered officePasseig dels Til·lers, 44-46, 1º-1ª, 08520 Les Franqueses del Vallès (Barcelona), Spain
Emailcontact@kuberanex.com
Data Protection Officer (DPO)Not required given the current size of the company. Enquiries to contact@kuberanex.com

2. Personal data we process

KUBERANEX, S.L. processes only personal data that the user provides voluntarily through the channels made available for that purpose. Specifically, we may process the following categories of data:

2.1 Data provided through the contact form

2.2 Data provided by direct email

2.3 Technical browsing data (cookies)

Only if the user accepts the use of cookies, we may collect technical browsing data in anonymised form. Please consult our Cookie Policy for further information.

Important: KUBERANEX, S.L. does not process special categories of data as defined in Article 9 GDPR (data concerning health, ethnic origin, religious beliefs, sexual orientation, biometric data, etc.). Should processing of such data become necessary in the context of a service relationship, the data subject's explicit consent will be obtained.

3. Purposes and legal bases of processing

We process your personal data for the following purposes:

3.1 Management of enquiries and contacts

Purpose: to respond to enquiries, requests for information or other requests made by the user through the contact form, by email or through the call booking system.

Legal basis: legitimate interest of the controller in attending to the requests received (Art. 6.1.f GDPR). Where applicable, consent of the data subject (Art. 6.1.a GDPR).

3.2 Provision of contracted services

Purpose: management, administration and delivery of the financial and accounting advisory services contracted by the client.

Legal basis: performance of a contract to which the data subject is a party (Art. 6.1.b GDPR).

3.3 Compliance with legal obligations

Purpose: to comply with the legal and tax obligations applicable to the controller, including the retention of accounting and commercial documentation.

Legal basis: compliance with a legal obligation applicable to the controller (Art. 6.1.c GDPR), in particular under the Spanish General Tax Law, the Commercial Code and anti-money laundering regulations.

3.4 Commercial communications

Purpose: sending commercial communications regarding KUBERANEX, S.L.'s own services, only where the user has given express consent.

Legal basis: consent of the data subject (Art. 6.1.a GDPR). The user may withdraw consent at any time, without affecting the lawfulness of prior processing.

4. Data retention periods

Personal data will be retained for the time strictly necessary for the purpose for which it was collected and, in any case, for the legally established periods:

Once the indicated periods have elapsed, the data will be securely erased or anonymised.

5. Recipients of the data

KUBERANEX, S.L. does not sell, transfer or rent personal data to third parties for commercial purposes. Data may be disclosed only to:

6. International data transfers

The use of Netlify involves the transfer of data to the United States. Such transfer is covered by the Standard Contractual Clauses approved by the European Commission (Implementing Decision (EU) 2021/914), which provide adequate safeguards for the protection of personal data.

The user may obtain information on the safeguards applicable to these transfers by contacting us at contact@kuberanex.com.

7. Rights of the data subject

In accordance with the GDPR and the LOPDGDD, the user has the right to exercise the following rights:

Right of access

To know whether we are processing your personal data and to obtain a copy of it.

Right of rectification

To request the correction of inaccurate or incomplete data.

Right of erasure ("right to be forgotten")

To request the deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.

Right to restriction

To request that we suspend the processing of your data in certain circumstances.

Right to data portability

To receive your data in a structured, commonly used and machine-readable format, and to transmit it to another controller.

Right to object

To object to the processing of your data in certain cases, including processing for direct marketing purposes.

Right to withdraw consent

To withdraw at any time the consent previously given, without affecting the lawfulness of prior processing.

Rights in relation to automated decisions

Not to be subject to decisions based solely on automated processing, including profiling.

To exercise any of these rights, the user may contact KUBERANEX, S.L. by:

The request must be accompanied by a copy of a national ID card, passport or equivalent identification document. The Company will respond within a maximum period of one month from receipt of the request, which may be extended by a further two months where necessary taking into account the complexity and number of requests.

The user also has the right to lodge a complaint with the competent supervisory authority. In Spain, the competent authority is the Spanish Data Protection Agency (AEPD), with offices at C/ Jorge Juan, 6 – 28001 Madrid, accessible at www.aepd.es.

8. Security measures

KUBERANEX, S.L. has adopted the technical and organisational measures necessary to ensure the security of personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data stored and the risks to which it is exposed, in accordance with the GDPR and applicable regulations.

The measures implemented include:

9. Cookies

The Website uses first- and third-party cookies. For more information on the cookies used, their purpose, duration and how to manage your preferences, please consult our Cookie Policy.

10. Commercial communications

KUBERANEX, S.L. will not send commercial communications by electronic means without the prior express consent of the recipient, in accordance with Article 21 of the Spanish LSSI-CE. Where the user has provided their data in the context of a prior contractual relationship, we may send commercial communications regarding our own services similar to those contracted, unless the user objects to it.

At any time, the user may object to receiving commercial communications by sending an email to contact@kuberanex.com with the subject line "Unsubscribe from commercial communications".

11. Minors

KUBERANEX, S.L.'s services are directed at businesses and professionals. We do not knowingly collect personal data from minors under 14 years of age. If we become aware of having received data from a minor under 14 without parental consent, we will proceed to its immediate deletion.

12. Updates to the privacy policy

This Privacy Policy may be updated at any time to reflect legislative, jurisprudential or sector-practice changes. In the event of substantial changes, we will inform affected users through the available means. The date of last update is shown in the header of this document.