Privacy Policy

1. Data Controller

The identifying data of the data controller for your personal data are set out below:
Name: Maria Gené Gil
NIF (Tax ID no.): 43142790B
Postal address: apartado de correos 11 117, 07010 Palma (Balearic Islands, Spain).
E-mail: mglingua@gmail.com

2. Processing Purposes, Legal Grounds and Storage Periods

Your personal data will be processed for the following purposes:

2.1. Managing Requests for Information and Quotes

Where you contact the website owner via e-mail, telephone or WhatsApp to request information or a quote, the owner processes your personal and contact details (name, surname, e-mail and phone no.) in order to deal with your request and send the relevant quote to you.
Legal Grounds: Take steps at the request of the data subject prior to entering into a contract (Art. 6.1.b GDPR).
Storage Period: Data will be stored during the relationship of mutual interest and, where no contract is agreed, for a maximum period of 12 months from the last date of contact.

2.2. Language Service Provision

Where you contract the services of the website owner, the latter processes your identifying, contact and tax details, and where applicable, the information contained in the documents submitted for translation, editing or any other language service, for the purpose of performing the contracted service, managing the contractual relationship and issuing the relevant invoice.
Legal Grounds: Entering into a contract (Art. 6.1.b GDPR) and compliance with legal accounting and tax obligations (Art. 6.1.c GDPR).
Storage Period: During the effective period of the contractual relationship and, afterwards, during the legally established time limits for compliance with tax and accounting obligations (a minimum of five (5) years in line with applicable tax regulations) and to submit or defend against complaints (a general limitation of three (3) years for personal lawsuits in line with the Spanish Civil Code).

2.3. Supplier Management

Where you are a supplier or professional collaborator (e.g. a courier firm or collaborating translator), the website owner processes your identifying, contact and tax details in order to manage the business relationship, make orders, process payments and comply with the relevant legal obligations.
Legal Grounds: Entering into a contract (Art. 6.1.b GDPR) and compliance with legal obligations (Art. 6.1.c GDPR).
Storage Period: During the effective term of the contractual relationship and, afterwards, in accordance with the applicable legal storage time limits.

2.4. Third-party Data Processing (Data Processor)

In performing professional language services, the website owner may access personal data contained in the documents submitted by clients to perform the commissioned language service. In these instances, the website owner acts as the data processor on behalf of the client, who has the status of data controller for the data in question.
In accordance with Article 28 in the GDPR, the owner:

  1. Processes the personal data only on documented instructions from the controller-client and solely for the purpose of performing the commissioned language service.
  2. Ensures that persons authorised to process the personal data have committed themselves to confidentiality in providing the service.
  3. Takes all technical and organisational measures required pursuant to Article 32 in the GDPR to ensure a suitable security level for the relevant risk.
  4. Not engage another processor without prior specific or general written authorisation of the controller-client for all or part of the relevant services.
  5. Assists the controller-client in ensuring compliance with data protection obligations, including requests to exercise rights from data subjects and the notification of a personal data breach.
  6. Deletes or returns all the personal data to the controller after the end of the provision of the language service, in accordance with the instructions of the controller-client, unless Union or Member State law requires storage of the personal data.

The specific data processing terms and conditions are formalised in the relevant contract or other legal act on data processing (Art. 28 GDPR), a template of which is available for the parties to sign before the start of the service provision. Interested clients may request this document via the contact methods set out in this policy.

3. Data Recipients

Your personal data may be sent to the following recipients:

  1. Courier and postal services: Where you request a hard copy of sworn translations, it will be necessary to provide your name, postal address and, where applicable, contact telephone number to the relevant postal service to enable the delivery. Legal grounds: entering into a contract (Art. 6.1.b GDPR).
  2. Selected banking institutions or payment providers: Your personal and payment details will be sent to the selected banking institutions and/or payment providers. Legal grounds: entering into a contract (Art. 6.1.b GDPR).
  3. Tax authorities and public bodies: Your tax details may be sent to the relevant public administrations in compliance with legal obligations on invoicing, taxation and accounting. Legal grounds: compliance with legal obligations (Art. 6.1c GDPR).
  4. Collaborating translators: In specific instances and where the contracted service provision so requires, certain content in the submitted documents may be shared with external collaborating translators. In these instances, the collaboration shall be governed by a data processor contract that ensures data confidentiality and security. Legal grounds: entering into a contract (Art. 6.1.b GDPR).

No international data transfers are performed to third countries outside the European Economic Area.

4. Data Processors

In order to provide specific services, the data controller uses the following service providers who act as data processors:

  1. Google (Google Ireland Limited): For e-mail service provision via Gmail. Google acts as a data processor in accordance with its data processing terms and conditions.
  2. Electronic invoicing platform connected to FACe: B2Brouter, headquartered in Spain, to issue electronic invoices to public bodies.

5. Rights of the Data Subject

You have the right to exercise the following rights regarding the processing of your personal data:

  1. Right of Access: Obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data.
  2. Right to Rectification: Obtain the rectification of inaccurate personal data and have incomplete personal data completed.
  3. Right to Erasure: Obtain the erasure of your personal data where, amongst other reasons, they are no longer necessary in relation to the purposes for which they were collected.
  4. Right to Object: Object, on grounds relating to your particular situation, to processing of personal data.
  5. Right to Restriction of Processing: Obtain restriction of processing of your data in the legally established circumstances.
  6. Right to Data Portability: Receive the personal data concerning you, in a structured, commonly used and machine-readable format and transmit those data to another controller.

In order to exercise any of these rights, please contact the data controller at the following e-mail address: mglingua@gmail.com; alternatively, please write to the provided postal address and attach a copy of your ID document or equivalent.
In turn, you are hereby informed that you have the right to submit a complaint to the Spanish Data Protection Agency (www.aepd.es) where you believe the processing of your data fails to comply with current regulations.

6. Security Measures

The data controller has implemented all appropriate technical and organisational measures to ensure personal data security and avoid any unauthorised alteration, loss, processing or access thereto, in line with current technology, the nature of the data and the risks to which they are exposed. These measures include Redundant Array of Independent Disks (RAID) systems, periodic external backups and controlled access to computer equipment.

7. Cookies

This website does NOT use any type of cookies or tracking technology. Neither proprietary nor third-party cookies are installed on users’ devices. In this sense, users are not required to accept or configure them.

8. Changes to the Privacy Policy

The data controller reserves the right to change the current privacy policy in order to adapt it to new legislation or case law, as well as any changes to business operation. Any change shall be published on this webpage.

Last update: May 2026.