Last Updated: November 2024
Introduction
My Move Spain (“we”, “us”, or “our”) operates the website https://mymovespain.com and provides Spanish residency visa and immigration consultancy services. We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website or engage our immigration consultancy services.
Who We Are
Business Name: My Move Spain
Website: https://mymovespain.com
Services: Spanish residency visa consultancy, immigration services, and conveyancing support
Contact: +44 7703 015 309
For any questions regarding this Privacy Policy or our data practices, please contact us using the details provided at the end of this document.
Information We Collect
Personal Information You Provide
When you engage our services or use our website, we may collect the following personal information:
Contact Information:
- Full name: MyMoveSpain
- Email address: info@mymovespain.com
- Phone number: +44 7703 015 309
- Postal address 19 Golding Gardens, East Peckham, Tonbridge, Kent, TN12 5PB
- Spanish address: Monteclara 1, La Manga Club, Cartagena, Murcia, 30389,
Spain. - Nationality: British and country of residence: Spain
Immigration Application Data:
- Passport details and copies
- Birth certificates and family documentation
- NIE (Número de Identificación de Extranjero) applications and numbers
- Marriage certificates or proof of relationship status
- Financial information (bank statements, proof of income, investment documentation)
- Employment history and contracts
- Educational qualifications
- Criminal record certificates
- Medical records or health insurance documentation
- Property ownership documents
- Tax records and residency certificates
Communication Records:
- Correspondence via email, phone, or our contact forms
- Notes from consultations and meetings
- Your preferences regarding our services
Website Usage Data:
- IP address
- Browser type and version
- Device information
- Pages visited and time spent on pages
- Referring website
- Geographic location data
Information from Third Parties
We may receive information about you from:
- Spanish government authorities (consulates, immigration offices)
- Legal professionals or notaries
- Financial institutions
- Translation services
- Your authorized representatives
How We Use Your Information
We process your personal data for the following purposes:
Service Delivery (Legal Basis: Contract Performance & Legitimate Interest)
- Processing visa and residency applications on your behalf
- Communicating with Spanish authorities and consulates
- Providing immigration consultancy and legal guidance
- Managing your client file and case progression
- Scheduling consultations and appointments
Legal Obligations (Legal Basis: Legal Compliance)
- Complying with Spanish immigration laws and regulations
- Meeting anti-money laundering requirements
- Responding to legal requests from government authorities
- Maintaining records as required by law
Business Operations (Legal Basis: Legitimate Interest)
- Responding to inquiries and providing customer support
- Processing payments and managing invoicing
- Improving our services and website functionality
- Sending service updates and important notifications
- Internal record-keeping and administration
Marketing (Legal Basis: Consent)
- Sending newsletters about Spanish immigration law changes
- Providing updates on new visa categories or services
- Sharing relevant content and resources
You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.
Legal Basis for Processing
Under GDPR, we process your personal data based on:
- Contract Performance: Processing necessary to fulfill our consultancy agreement with you
- Legal Obligation: Processing required to comply with Spanish and EU immigration laws
- Legitimate Interest: Processing necessary for our business operations, provided your rights are not overridden
- Consent: Where you have given explicit permission (e.g., for marketing communications)
How We Protect Your Data
Given the highly sensitive nature of immigration data, we implement robust security measures:
Technical Security
- SSL encryption for all data transmission
- Secure, encrypted cloud storage systems
- Password-protected client portals
- Regular security audits and updates
- Multi-factor authentication for staff access
- Firewall and anti-malware protection
Organizational Security
- Staff training on data protection and confidentiality
- Strict access controls (need-to-know basis)
- Confidentiality agreements with all employees and contractors
- Secure document destruction procedures
- Regular data protection impact assessments
Physical Security
- Locked filing cabinets for physical documents
- Restricted access to office premises
- Secure disposal of sensitive materials
While we take every reasonable precaution, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you promptly of any data breaches as required by law.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:
Active Client Files: During the period we are providing services to you and for the duration of your visa/residency validity
Completed Cases: We retain client files for a minimum of 7 years after case completion to comply with legal and regulatory requirements
Financial Records: 10 years as required by Spanish tax law
Marketing Communications: Until you unsubscribe or withdraw consent
After these retention periods, we will securely delete or anonymize your personal data unless we are legally required to retain it longer.
Sharing Your Information
We will only share your personal data when necessary and in the following circumstances:
Service Providers & Third Parties
- Spanish immigration authorities and consulates (for visa processing)
- Legal professionals, notaries, and gestoría services
- Translation and document certification services
- Payment processors
- Secure cloud storage providers
- Email and communication platforms
All third parties are bound by confidentiality obligations and data protection agreements.
Legal Requirements
We may disclose your information if required by law, court order, or government authority, or to protect our legal rights.
Business Transfers
In the event of a merger, acquisition, or sale of our business, your data may be transferred to the new owner, subject to the same privacy protections.
We will never sell your personal data to third parties for marketing purposes.
International Data Transfers
As an immigration consultancy dealing with Spanish authorities, your data may be transferred to Spain and other EU countries. All transfers within the EU are protected by GDPR.
If we transfer data outside the EU/EEA, we will ensure appropriate safeguards are in place, such as:
- EU Standard Contractual Clauses
- Adequacy decisions by the European Commission
- Your explicit consent
Your Rights Under GDPR
You have the following rights regarding your personal data:
Right of Access
Request a copy of the personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete data
Right to Erasure (“Right to be Forgotten”)
Request deletion of your personal data, subject to legal retention requirements
Right to Restriction of Processing
Request that we limit how we use your data
Right to Data Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent
Withdraw consent at any time where we rely on consent as the legal basis
Right to Lodge a Complaint
File a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority
To exercise any of these rights, please contact us using the details below. We will respond within one month of receiving your request.
Please note that we may need to verify your identity before processing certain requests, and some rights may be limited by legal obligations (e.g., we cannot delete data required for legal compliance).
Cookies and Tracking Technologies
What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They help us improve your browsing experience and analyze website traffic.
Cookie Consent Management
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.
The legal basis for processing personal data in this context are Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of cookies and similar technologies used and the related consents.
Types of Cookies We Use
Essential Cookies: Required for website functionality (cannot be disabled)
- Session management
- Security features
- Load balancing
Analytics Cookies: Help us understand how visitors use our site (with your consent)
- Google Analytics or similar tools
- Page performance monitoring
- User behavior analysis
Marketing Cookies: Track your activity for advertising purposes (with your consent)
- Social media pixels
- Retargeting campaigns
- Conversion tracking
Preference Cookies: Remember your settings and choices
- Language preferences
- Cookie consent choices
Managing Cookies
You can control cookies through:
- Our cookie consent banner when you first visit
- Your browser settings (blocking or deleting cookies)
- Opt-out tools provided by third-party services
Note: Disabling essential cookies may affect website functionality.
For more information about managing cookies, visit: www.allaboutcookies.org
Third-Party Websites and Services
Our website may contain links to external websites, including:
- Spanish government immigration portals
- Partner services (banks, insurance providers)
- Social media platforms
- Resource websites
We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal information.
Embedded Content
Our website may include embedded content from other platforms (e.g., YouTube videos, social media posts, Google Maps). These third-party services may collect data about your interaction with the embedded content, especially if you have an account with them and are logged in.
Website Comments and User-Generated Content
If our website allows comments or user contributions:
Information Collected:
- Name and email address (as provided in the comment form)
- IP address and browser user agent (for spam detection)
- Gravatar profile picture (if you use Gravatar services)
Visibility: Approved comments and your associated profile picture become publicly visible on our website.
Retention: Comments and metadata are retained indefinitely to automatically approve follow-up comments and prevent spam.
Third-Party Services: Comment data may be checked by automated spam detection services.
Your Rights: You can request deletion of your comments at any time by contacting us.
Children’s Privacy
Our services are not directed to individuals under 18 years of age. While we may process information about minors as part of family visa applications (provided by parents/guardians), we do not knowingly collect personal data directly from children.
If we become aware that we have inadvertently collected personal data from a child without parental consent, we will take steps to delete it promptly.
Data Breach Notification
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:
- Notify the relevant supervisory authority within 72 hours
- Inform affected individuals without undue delay
- Provide details of the breach and steps being taken
- Offer guidance on protective measures you can take
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. We will:
- Post the updated policy on this page with a new “Last Updated” date
- Notify you of significant changes via email or website notice
- Obtain new consent where required by law
We encourage you to review this Privacy Policy regularly to stay informed about how we protect your data.
Contact Us & Data Protection Officer
If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal information, please contact us:
Email: [Insert your contact email]
Phone: [Insert your phone number]
Address: [Insert your business address]
Data Protection Inquiries: [Insert DPO email if you have a designated Data Protection Officer]
Response Time: We aim to respond to all privacy-related inquiries within 5 business days and formal data subject requests within 30 days as required by GDPR.
Your Consent
By using our website and engaging our services, you acknowledge that you have read and understood this Privacy Policy.
For Marketing Communications: Where required, we will obtain your explicit consent before sending promotional materials. You can withdraw consent at any time.
For Service Delivery: By engaging our immigration consultancy services, you authorize us to process your personal data as described in this policy and as necessary to provide those services.
My Move Spain is committed to protecting your privacy and handling your sensitive immigration data with the highest level of care and confidentiality.
This privacy policy is compliant with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).