Privacy Policy
Data Controller
Òptim Tax SLU, a company with registered office at Carrer Prat de la Creu nº 8, office 103, Andorra la Vella (AD500), is the data controller for your personal data. This privacy policy provides information regarding the processing of personal data of our clients, potential clients, and users who contact us through any website form, in accordance with Law 29/20221, of October 28, on Qualified Personal Data (LQPD) and the General Data Protection Regulation (GDPR).
Purposes and Legal Bases
Processing of Data for Client Representatives, Sole Traders, or Liberal Professionals
If you are a client of Òptim Tax SLU, because you have accepted a professional services proposal from us or have purchased a product from Òptim Tax SLU, we will process your data as indicated below:
Purpose of Processing: We process your data to maintain, fulfill, develop, control, and execute the contractual relationship we have with the company you represent, a client of Òptim Tax SLU, or with you, if you are a sole trader or liberal professional.
Legal Basis for Processing: We have a legitimate interest in processing your data as a contact point for a client of Òptim Tax SLU.
Processing of Data for Contact via Form or Email
If you have provided your data through the Òptim Tax SLU website contact form to ask a question or get in touch with us, we will process your data as indicated below:
Purpose of Processing: We process your data to provide you with assistance and support, whether you are a client or a potential client of Òptim Tax SLU.
Legal Basis for Processing: Òptim Tax SLU has a legitimate interest in assisting and responding to any client or potential client who raises a query through one of our forms.
Processing of Data for Candidates Submitting their CV via Email or Web Form
If you are a job candidate at Òptim Tax SLU and have sent us your CV via email, we will process your data as indicated below:
Purpose of Processing: We process your data to consider your current or future application for a job position at Òptim Tax SLU.
Legal Basis for Processing: Your consent by voluntarily submitting your CV to Òptim Tax SLU.
Your data will not be communicated or transferred to third parties unless there is a legal obligation. Only our technology service providers, contracted for auxiliary services, will have access to your personal data; these act as data processors and will have committed to complying with the applicable regulatory provisions on data protection at the time of their engagement.
We inform you that international transfers are not foreseen except for storage purposes, and in any case, will be based on an adequacy decision and/or appropriate safeguards, standard contractual clauses, binding corporate rules, and/or a request for approved and recognized certifications or codes of conduct.
Privacy Policy for Integration with Google
Use of the Gmail API
Òptim Tax SLU uses the Google Gmail API to provide email sending functionalities on behalf of users. The conditions for this processing are specified below:
Scope Used
gmail.send: This scope allows the application to send emails on behalf of the user using their Gmail account.
Purpose of Processing
- Sending Emails: We use this scope exclusively to send emails that the user has expressly requested through our application.
- Service Functionality: Access is strictly limited to allowing the user to send emails from our platform using their Gmail account.
Legal Basis for Processing
The processing is based on the user’s express consent, which is granted when they authorize the application to access their Gmail account through Google’s OAuth authentication process.
Accessible Data
With the gmail.send scope, Òptim Tax SLU
- Can: Send emails on behalf of the user
- Cannot: Read, modify, or delete existing emails from the user’s account
- Cannot: Access the inbox, sent items, or any other email folder
- Cannot: Access contacts or other account information
Storage and Retention
- Òptim Tax SLU does not permanently store the content of emails sent through the service
- Access tokens are retained only as long as necessary to provide the service
- The user can revoke access at any time through their Google account settings
Sharing with Third Parties
Data processed through the Gmail API is not shared with third parties, except when necessary for the technical operation of the service (for example, with Google to effect the sending).
Revocation of Consent
The user can revoke consent and access to their Gmail account at any time:
- Through our application settings
- Directly from the security settings of their Google account at myaccount.google.com
Compliance with Google Policies
PROGDEV SLU commits to complying with:
- Google API Policies
- The Gmail API Terms of Service
- Google’s Limited Use Requirements for User Data
Data Retention
The data retention period will be the minimum legally established and, where applicable, until you withdraw your consent.
Òptim Tax SLU does not use profiling methods or make automated decisions.
Confidentiality and Security Measures
Personal data that may be collected directly from the data subject will be treated confidentially and will be incorporated into the corresponding processing activity owned by Òptim Tax SLU.
In compliance with current regulations, the company guarantees that it has adopted all necessary technical and organizational measures to maintain the required level of security, considering the nature of the personal data processed. The company demonstrates its commitment to the protection of personal data and user privacy, and implements the technical and organizational security measures available to it to safeguard your information.
Accuracy and Updating of Your Data
You declare that all data provided by yourself is lawful, adequate, relevant, accurate and, if necessary, updated. The provision of data that does not meet the aforementioned requirements will exempt Òptim Tax SLU from liability.
Rights of Data Subjects
Current regulations grant you the following rights: right of access, rectification, erasure, and objection regarding your personal data:
Right of Access: The right to access your personal data to know what is being processed and the processing operations carried out with them.
Right to Rectification: The right to rectify or complete any data that is inaccurate or incomplete.
Right to Erasure: The right to request that your personal data be erased from our systems and files, where possible.
Right to Object: The right to object to the processing of your personal data when your data has not been provided directly by you.
Right to Restriction of Processing: The right to request the restriction of processing when the data is not accurate. When it has not been provided by you and you object to its erasure and instead request the restriction of use. When the data is no longer necessary for processing, but you need it for the establishment, exercise, or defense of legal claims. When you have objected to the processing, while we verify that the legitimate interest of Ciutadans Compromesos Generals is valid according to the regulations.
Right to Data Portability: When processing is carried out by automated means, you have the right to request that your personal data be transmitted to another data controller.
You may exercise all indicated rights free of charge, either by: writing an email to the email address dpd@optimtax.com or by contacting us by postal mail at Carrer Prat de la Creu nº 8, office 103, Andorra la Vella (AD500). You must specify which right you wish to exercise, as well as your identification data. In the event that we need additional data to verify your identity, we will inform you. You may file a complaint with the Andorran Data Protection Agency.