Privacy Policy

VENDL Business Solutions, S.L. ("Vendl"), registered office at C/ General Espartero 86, 7ºDr, 03012 Alicante (Spain), CIF B-26807131, registered in the Mercantile Registry of Alicante (sheet A-203775), is the controller for processing your personal data. For any inquiries, contact us at admin@vendl.es or by phone at +34 614 25 54 86. The authoritative version of this policy is the Spanish one; this translation is provided for convenience.

We have not designated a Data Protection Officer as the criteria in Article 37 GDPR do not apply to our processing. For any matter concerning your personal data, contact us directly at admin@vendl.es.

To provide online accounting services, we process:

• Identification data: first name, last name, DNI/NIE, NIF, CIF, date of birth.
• Contact data: email, phone, address.
• Financial data: bank account, tax data, activity description.
• Technical data: IP address, language, access logs, session identifiers.

We process your data exclusively to provide the contracted accounting services, generate contracts, manage documents in Google Drive, send operational notifications, and comply with our legal obligations (tax, accounting, and anti-money-laundering).

We process your data under the following legal bases of Article 6 GDPR: (a) performance of a contract (Art. 6.1.b) for portal operation, contract generation, document management and communication with your manager; (b) compliance with legal obligations (Art. 6.1.c) for tax, accounting and anti-money-laundering retention; (c) consent (Art. 6.1.a) for browser push notifications, which you can withdraw at any time from your browser settings; (d) legitimate interest (Art. 6.1.f) for service security, fraud prevention and technical access logs.

Sensitive data (DNI/NIE, NIF, CIF, phone, bank account) is stored encrypted with AES-256-GCM. Documents are kept in Google Drive using a dedicated service account with daily backups. We retain data for the period required to comply with applicable legal obligations: a minimum of 6 years for tax records (Spanish Commercial Code and General Tax Law) and up to 10 years for anti-money-laundering records that we are required to keep as an obligated entity under Spanish Law 10/2010.

To provide the service we share strictly necessary data with the following providers, all of them bound by a data processing agreement (Art. 28 GDPR). Where a provider may transfer data outside the European Economic Area (e.g., Google to its US parent), such transfers are made under the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).

• Google Ireland Limited — document storage in Google Drive and outgoing email via Google Workspace (servers in the EU).
• IONOS Cloud GmbH (Germany) — hosting of the portal and database on EU-based infrastructure.
• Browser-vendor push services (Apple, Google and Mozilla) — technical delivery of notifications to your device when you opt in. Only the technical subscription identifier is transmitted, not the message content.

At any time you may exercise the following rights regarding your personal data:

• Access: request a copy of the data we process about you.
• Rectification: correct inaccurate data.
• Erasure ("right to be forgotten"): delete your data when it is no longer necessary.
• Portability: receive your data in a structured format.
• Objection and restriction: object to processing or request its limitation.

To exercise any of these rights, contact us at admin@vendl.es or submit a request from your user dashboard. We will respond within one month at the latest. If you consider that the processing of your data does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

We only use strictly necessary cookies to keep you signed in and ensure the portal works correctly. We do not use tracking, advertising, or third-party cookies.

If we update this policy, we will notify you in the portal and, where applicable, by email. The date of the latest version is shown at the top of this document.