Privacy Policy

1. Data controller

2. Data Protection Officer (DPO)

The Data Protection Officer is AURIS CONSULTORÍA LEGAL I TRIBUTARIA S.L.P., Tax ID (NIF) B65951055 (www.aurisadvocats.com). For any query regarding the use of your personal data, you may contact the DPO at: xavi@aurisadvocats.com.

3. What data do we collect?

The personal data we collect can be grouped into the following categories:

• Basic and contact data: first name, surname(s), identity document or tax identification number (RFC, NIT, RUC or national ID, depending on the country), email address, billing address and telephone number.
• Financial and economic data: details of payments, refunds and commercial transactions carried out with us.
• Data essential to the service: information needed to identify the user to the business from which the invoice is requested, such as tax details and address.
• Technical data: IP address, browser and version, time zone, operating system and technology used during access.
• Browsing data: information about how you browse when you visit our platform.
• Marketing and communication preferences: preferences for receiving communications and consents given.

We will never collect personal data that is specially protected or considered sensitive.

4. How do we collect your data?

Most of your information is provided directly by you through web forms, email or telephone. We may also obtain information from:

• Companies in our group: APOLLO SOLUTIONS S.L.
• Third parties that have previously obtained your express consent.
• Cookies enabled on our website (see our Cookie Policy).

5. Purpose and legal basis of processing

6. Who do we share your data with?

We may need to share your information with:

• Companies in our group: APOLLO SOLUTIONS S.L.
• Subcontracted service providers, such as payment gateways (Stripe).
• Businesses we notify of the user's invoice request.
• Banking institutions we work with.
• Law enforcement authorities where we are legally required to do so.

All providers are contractually bound to us and guarantee compliance with the security measures necessary to safeguard your personal information.

7. Where do we host your information?

All information you provide to us will be hosted on the servers of Amazon Web Services (AWS). Where an international transfer of data is necessary, such transfer will be subject to the safeguards required by the personal data protection legislation applicable in each country (standard contractual clauses, adequacy decisions or other mechanisms provided for by the applicable rules, etc.).

8. How long do we keep your data?

Your data will be kept for as long as the commercial relationship lasts or until you exercise your right to cancellation, objection or restriction of processing. Retention periods are aligned with legal liability limitation periods:

9. How do we protect your information?

We guarantee the implementation of appropriate physical, organisational and technological security measures to prevent your information from being accidentally lost, used or accessed in an unauthorised way. We limit access to your data to persons authorised to process it, and all staff involved in processing are bound by a duty of confidentiality. We apply technical procedures to detect and respond to potential security breaches, notifying the competent supervisory authority where required.

10. Your rights (ARCOLP)

The personal data protection legislation applicable in your country guarantees you the right to exercise, free of charge and at any time, the following rights (access, rectification, updating, cancellation or erasure, objection and, where applicable, portability):

• Access:Receive a copy of your personal information.
• Rectification:Request the correction of errors in your personal information.
• Cancellation / Erasure (right to be forgotten):Request that we delete your personal information in certain situations.
• Restriction:Request the restriction of the processing of your data.
• Objection:Object to processing for direct marketing or based on legitimate interest.
• Portability:Receive your information in a structured, readable format, or have it transmitted to a third party.
• Automated decision-making:Not to be subject to decisions based solely on automated processing which produce legal effects.

To exercise any of these rights, write to: privacy@consiguetufactura.com or contact the DPO directly at xavi@aurisadvocats.com. You must attach legally valid proof of your identity.

11. How to stop receiving commercial communications

You may withdraw your consent to receive commercial communications at any time by using the opt-out option available on our website or by sending an email with the subject line "unsubscribe" to privacy@consiguetufactura.com. In accordance with applicable legislation, we never send SPAM.

12. Supervisory authority

If you wish to lodge a complaint regarding data protection, you may contact the data protection authority competent in your country (in Mexico, the INAI; in Colombia, the Superintendencia de Industria y Comercio; in Ecuador, the Superintendencia de Protección de Datos Personales).

13. Changes to the privacy policy

APOLLO reserves the right to amend this policy to adapt it to legislative or case-law developments. Changes will be published on this page together with the corresponding update date.