Privacy Policy

Data relating to

Document

Retention

Clients and suppliers

Invoices, contracts, commercial correspondence, banking documentation and expense notes.

Minimum retention obligation of 6 years, depending on applicable limitation periods.

Tax documents and records

Documents and records with tax relevance.

Previous 4 tax years, according to the General Tax Law.

Human Resources

Payroll, employment contracts, CVs, training records, working time records and employee files.

According to applicable employment, tax and commercial regulations. Generally between 4 and 10 years depending on the document.

Marketing

Databases or website visitors.

For as long as the processing lasts.

Access control and video surveillance

Visitor records and video surveillance images.

Generally 30 days, unless retention is required due to legal proceedings or serious incidents.

Accounting

Accounting books and documents, annual accounts, corporate agreements, financial statements and audit reports.

6 years according to the Commercial Code.

Corporate documentation

Deeds, articles of association, corporate resolutions, powers of attorney, share purchase agreements and corporate books.

Recommended throughout the life of the company and at least 6 years after dissolution and liquidation.

Tax documentation

Documents supporting tax activity, income and expense records, invoices, receipts and tax returns.

Minimum 4 years. In some cases, retention for 10 years is recommended.

Health and safety

Medical records and occupational health records.

5 years, according to applicable clinical documentation regulations.

Insurance

Insurance policies.

Between 2 and 10 years depending on the type of insurance.

Legal

Intellectual and industrial property documents, contracts, permits, licenses, certificates and confidentiality agreements.

According to the applicable limitation period and duration of the obligation.

Data protection regulations

Records proving compliance with data protection requirements, rights requests, access logs and consent records.

During the processing and, in general, 3 additional years.

Internet traffic data

User identifiers, IP addresses, phone numbers, date, time and type of communication.

1 year according to applicable electronic communications data retention regulations.

Biometric data

Fingerprint or facial recognition data, where applicable and legally permitted.

Only for the time necessary for the purpose of processing, according to applicable regulations.

Guests

Guest or traveller check-in records.

3 years according to applicable citizen security and accommodation registration regulations.