KFM Libertax

Privacy policy

Last updated: September 2026

Data controller

Controller: Kévin Foix Marosi (KFM Libertax), Tax ID 73398479M, registered address at Calle San Mateo, 24, 44459 Camarena de la Sierra (Teruel). Contact email: kevin.foix@kfmlibertax.es.

Data collected and purpose

The contact form collects the identification and contact details provided by the user (name, email, phone and the description of their enquiry), for the sole purpose of handling the request and, where applicable, arranging a preliminary analysis session.

The self-employed registration form also collects the DNI or NIE, full address, IBAN, a description of the activity and photos of the identity document (front and back) and of the data subject holding it, in order to register them in the Special Scheme for Self-Employed Workers (RETA), register them with the Spanish Tax Agency and obtain their digital certificate for individuals.

The company formation form collects the contact person’s details (name, DNI or NIE, phone and email), the details of the company to be formed (proposed names, legal form, registered office, number of shareholders, share capital and type of contribution, management body, planned hires, IBAN and activity), photos of each shareholder’s identity document and of each shareholder holding it and, where applicable, proof of the capital contribution, in order to form the company and register it with the Companies Register. The person submitting the form declares that they are authorised by the other shareholders to provide their data.

The e-invoicing data sheet collects the details of the person requesting the service (name or company name, tax ID, phone and email) and the tax details of the invoice recipient (name or company name, tax ID, address, phone and email), the details of the transaction to be invoiced and, where direct debit is requested, the IBAN and mandate reference, in order to issue the invoice on behalf of the requester and, where applicable, generate the SEPA direct debit file. Whoever fills in the sheet declares that the data is accurate, that they are authorised to provide it and that they have informed their customer of this processing.

The data is not used to send commercial communications, nor is it used for profiling.

Legal basis

Processing of contact form data is based on the data subject’s consent (art. 6.1.a GDPR), given by ticking the acceptance box and submitting the form, and on pre-contractual measures taken at the data subject’s request (art. 6.1.b GDPR).

Data from the service data sheets (self-employed registration, company formation and e-invoicing) is processed to perform the professional service requested (art. 6.1.b GDPR) and, for invoicing, to comply with legal invoicing and record-keeping obligations (art. 6.1.c GDPR).

Recipients

Contact form submissions are handled through the Web3Forms service, which acts as data processor and forwards the message to the controller’s email address.

The service data sheets (self-employed registration, company formation and e-invoicing) are sent directly from this website’s server to the controller’s email address, with no intermediary service; the web and email hosting provider acts as data processor.

For e-invoicing, the issued invoice and, where applicable, the SEPA direct debit file are delivered to the person who requested the service, who forwards them to their customer and their bank. Issued invoices are kept for the legally required periods.

To complete the self-employed registration, the necessary data will be disclosed to the General Treasury of Social Security, the Spanish Tax Agency (AEAT) and the certification service provider issuing the digital certificate.

To form the company, the necessary data will be disclosed to the notary executing the deed, the Companies Register, the Spanish Tax Agency (AEAT) and the certification service provider issuing the company’s digital certificate. No data is disclosed to other third parties except where legally required.

Retention

Data is kept only for as long as necessary to handle the request and, where applicable, for the duration of the subsequent professional relationship, after which the legally required retention periods apply.

Rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to kevin.foix@kfmlibertax.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).