Get my Spain plan

Privacy policy

Last updated: 20 October 2026.

This policy explains how personal data is processed on the website axenspain.com, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

1. Data controller

  • Controller: Anna Khusnutdinova, self-employed professional (autónoma), trading as AXEN SPAIN.
  • Address: Rambla de Catalunya, 15, 3-2, 08007 Barcelona, Spain.
  • Contact email: axenspain@gmail.com.

The owner’s other identification details are given in the Legal notice.

2. What data we process

  • Request form: full name, WhatsApp number, email, the areas of interest you select, the description of your situation, the language of the form and your acceptance of this policy.
  • Communications: the data you provide when you write to us on WhatsApp, by email or on social media, and the content of those conversations.
  • Clients: the data needed to provide the services ordered and for invoicing.
  • Technical data: when you visit the website, the hosting provider may log technical connection data, such as your IP address, browser and the date and time of access, to keep the service secure and working.

Please do not include special categories of data (for example, health data) in the description of your situation unless they are needed to deal with your enquiry. If you choose to include them, we will process them only for that purpose and on the basis of your explicit consent.

If you give us data about other people (for example, family members or children), you must have their permission or, for minors, be their parent or legal guardian.

  • Responding to your request and contacting you to prepare a consultation or a service proposal. Legal basis: pre-contractual steps taken at your request and your consent when you submit the form (Art. 6(1)(b) and 6(1)(a) GDPR).
  • Providing the services ordered and coordinating them with the professionals involved. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • Meeting legal obligations, for example tax and accounting obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • Keeping the website secure and preventing abuse and automated submissions. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

We do not make decisions based solely on automated processing and we do not create profiles. We do not send marketing communications without your prior consent.

4. How long we keep data

  • Requests that do not lead to a contract: 12 months from the last communication, after which they are deleted.
  • Client data: for as long as the relationship lasts and then for the periods required by applicable law (for example, tax and commercial law) and those needed to deal with possible claims.
  • Technical connection data: for the periods applied by the hosting provider for security reasons.

5. Mandatory data

The form fields marked with an asterisk are needed to deal with your request. Without them we will not be able to reply.

6. Recipients and providers

We do not sell your data or share it with third parties for marketing purposes. Only to the extent necessary, the following may have access to it:

  • Service providers (data processors): Netlify, Inc., for website hosting and receiving form submissions; Google, for email and handling requests (for example, Gmail and Google Workspace / Google Drive).
  • WhatsApp (Meta): if you choose to contact us on WhatsApp, the conversation takes place through that service, subject to its own privacy policy.
  • Partner professionals and organisations (for example, lawyers, gestores, notaries, insurers or medical centres): only when needed to provide the service you request, and after informing you beforehand.
  • Public authorities and courts: where there is a legal obligation.

7. International transfers

Some providers (such as Netlify or Google) may process data outside the European Economic Area, for example in the United States. In that case, transfers are covered by the safeguards provided for in the GDPR, such as the adequacy decision for the EU-US Data Privacy Framework for participating companies or the standard contractual clauses approved by the European Commission.

8. Your rights

You can at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent, without affecting the lawfulness of processing carried out before withdrawal.

To do so, write to axenspain@gmail.com stating which right you wish to exercise. We may ask for additional information to verify your identity.

If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency, Agencia Española de Protección de Datos (www.aepd.es).

9. Minors

AXEN SPAIN’s services are intended for adults. Data about minors is processed only when provided by their parents or legal guardians as part of the service requested (for example, school enrolment of children).

10. Security

We apply appropriate technical and organisational measures to protect personal data against loss, unauthorised access and misuse, taking into account the state of the art and the risks of the processing.

11. Changes to this policy

We may update this policy to reflect changes in the law or in our services. The date of the last update is shown at the top of the document.

12. Languages

This policy is available in Spanish, Russian and English. In the event of any discrepancy between versions, the Spanish version shall prevail.

Get my Spain plan
WhatsAppGet my Spain plan