1. Data Controller
Irisel Consulting S.L.U.
[Full address]
Tax ID: [●]
Email: [●]
2. Purpose of Processing
We process personal data for:
Managing contact requests
User account administration
Providing invoice digitization services
Legal compliance
3. Legal Basis
Contract performance (Art. 6(1)(b) GDPR)
Legal obligation (Art. 6(1)(c) GDPR)
Legitimate interest (Art. 6(1)(f) GDPR)
4. Categories of Data
Identification data
Professional data
Data included in invoices uploaded by customers
5. Retention
Account data: during contractual relationship
Invoices: as defined in service agreement
Contact data: up to 24 months if no contract exists
6. Recipients
We do not sell or transfer data to third parties except when legally required.
Technology providers may access data as data processors.
7. International Transfers
Where providers outside the EEA are used, appropriate safeguards under GDPR apply.
8. Data Subject Rights
You may exercise your rights of access, rectification, erasure, restriction, objection, and portability by contacting [email].
You may also lodge a complaint with the Spanish Data Protection Authority.
9. Security Measures
We implement appropriate technical and organizational measures including:
Encryption in transit (TLS)
Encryption at rest
Role-Based Access Control (RBAC)
1. Subject Matter
Provision of invoice digitization and data extraction services.
2. Duration
Linked to the main service agreement.
3. Nature of Processing
Receipt, storage, automated analysis, and structuring of data.
4. Categories of Data
Identification data
Tax data
Banking information included in invoices
5. Processor Obligations
Irisel Consulting S.L.U.:
Processes data only on documented instructions
Ensures confidentiality
Implements appropriate technical and organizational measures
Notifies personal data breaches without undue delay
Does not engage subprocessors without authorization
6. Subprocessors
List available upon request.
7. Deletion
Upon termination, data shall be deleted or returned as instructed.