Privacy policy
Last updated: 24 September 2026
This policy explains how your personal data is handled when you use this website or contact me, in line with the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Who is responsible for your data
- Controller
- Oriol Sureda Hospital
- Tax ID (NIF)
- 48096837L
- Address
- Carrer Pep Ventura, 38-40, 08329 Teià (Barcelona), Spain
- info@oriolsureda.com
2. What data I collect
- When you get in touch through the contact form, by email or by WhatsApp: your name, email address or phone number, and whatever you choose to tell me about your situation.
- If you become a client: the identification, financial and tax data needed to keep your accounts and prepare and file your returns.
This website does not use analytics or tracking tools and does not collect data automatically for profiling.
3. Why I use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and arranging a first call | Your consent (art. 6.1.a GDPR), given when you contact me |
| Providing the accounting and tax services we agree on | Performance of a contract (art. 6.1.b GDPR) |
| Keeping records and filing returns with the tax authorities | Legal obligation (art. 6.1.c GDPR) |
4. How long I keep it
- Enquiries that don't lead to a service: for as long as needed to answer them and for a maximum of one year afterwards.
- Client data: for the whole relationship, and afterwards for the periods required by law, such as four years for tax purposes (Spanish General Tax Law) and six years for accounting records (Spanish Commercial Code). It is then securely deleted.
5. Who I share it with
Your data is never sold or used for advertising. It is only shared:
- With the Spanish Tax Agency (AEAT) and other public bodies, when filing on your behalf or when the law requires it.
- With the service providers I rely on to work: website hosting, email (Google) and, if you choose to write to me there, WhatsApp (Meta). They process data under their own data protection terms.
Some of these providers may transfer data outside the European Economic Area, for example to the United States. Where this happens, it relies on safeguards recognised by the European Commission, such as the EU-US Data Privacy Framework or standard contractual clauses.
6. Your rights
You can at any time ask to access, correct or delete your data, restrict or object to its processing, receive it in a portable format, or withdraw your consent. Write to info@oriolsureda.com saying which right you want to exercise. I may ask you to confirm your identity.
If you think your data has not been handled properly, you can file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
7. Security
I apply reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access, in line with the confidentiality expected from a tax advisor.
8. Changes
This policy may be updated when the law or the way I work changes. The date at the top shows the latest version.