Privacy Policy (GDPR)

Version 1.0 — DRAFT pending review by a lawyer/legal translator. [BRACKETED] fields to be completed.

1. Controller: MY RECOMY SL, Tax ID (CIF) B93904688, Av. Fuente Nueva 8, Madrid, Spain, hola@myrecomy.com.
2. Data processed: identification and contact; role and profile; business/professional data; bookings and purchases; receipts/invoices; ratings; tax data (tax identification, country, tax documentation, residence certificates, W-8BEN/W-9 forms); supporting documents; referrals; usage data; payment data via Stripe (cards not stored).
3. Purposes: provide the service; bookings, payments and commissions; compliance with tax obligations (invoicing, withholdings, DAC7 reports and equivalents); identity verification (KYC); fraud prevention; notifications; support.
4. Legal basis: performance of the contract; legal obligation (tax, DAC7, KYC/AML); consent (commercial, cookies); legitimate interest (security/anti-fraud).
5. Retention: while the account exists and during legal periods (tax/commercial).
6. Recipients/processors: technology providers (hosting, Stripe for payments and identity verification, email/SMS, push, analytics), with data processing agreements (DPA). Identity verification and biometric data: processed by Stripe (Stripe Identity) under its policy. International transfers with safeguards (standard contractual clauses).
7. Disclosure to authorities: income data may be disclosed to tax authorities when required by law (DAC7, 1099, etc.).
8. Rights: access, rectification, erasure, objection, restriction, portability (hola@myrecomy.com); complaint to the Spanish DPA (AEPD) or the authority of your country.
9. Minors: the service is not directed at minors; their data is not knowingly registered.
10. Security: encryption in transit (HTTPS), role-based control, PIN, access logging.

Cookie Policy

Technical cookies (necessary) and, with prior consent (banner), analytics/advertising cookies. Non-essential rejected by default. Table: [to be completed].