Legal
Privacy policy
Last updated: Julio 2026
1. Who is the data controller of your data?
- Controller: Filnet (trade name)
- Address: Avenida Camí Nou 268, Xirivella, 46950 Valencia, Spain
- Email: legal@filnet.app
- Data Protection Officer (DPO): you can contact our DPO at legal@filnet.app
2. What data do we collect and for what purpose?
At Filnet we process the personal data that you voluntarily provide to us when you register, contact us or use our services. The data categories and their purposes are:
| Purpose | Data processed | Legal basis |
|---|---|---|
| User account creation and management | Name, email, password (hash), company, tax ID, phone | Performance of contract |
| Provision of incorporation and advisory services | Company data, corporate documentation, contact data | Performance of contract |
| Customer service and support | Name, email, content of the enquiry | Legitimate interest / Performance of contract |
| Sending commercial communications | Email, name | Explicit consent |
| Service analysis and improvement (anonymous) | Anonymised browsing data | Legitimate interest |
3. How long do we keep your data?
We keep personal data for the time strictly necessary to fulfil the purpose for which it was collected and, afterwards, for the legal limitation periods of obligations (typically 5-6 years for corporate and tax documentation).
Data processed for marketing purposes is kept until you withdraw your consent.
4. Do we share your data with third parties?
We do not sell or rent your personal data. We only share it in the following cases:
- Essential service providers: cloud infrastructure (Supabase), transactional email services, payment gateways. All of them act as data processors under contract and with GDPR safeguards.
- Local advisors: the professionals assigned to your incorporation process access exclusively the data necessary for your file.
- Legal obligation: when required by law, court order or a competent authority.
5. International data transfers
Some of our providers may have servers outside the European Economic Area. In such cases, we ensure that adequate safeguards exist (standard contractual clauses, Privacy Shield certification or an adequacy decision by the European Commission).
6. What rights do you have and how to exercise them?
In accordance with the GDPR and the LOPDGDD, you may exercise the following rights:
- Access: know which of your data we process.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request the deletion of your data ("right to be forgotten").
- Restriction: restrict processing in certain circumstances.
- Portability: receive your data in a structured format and transfer it to another controller.
- Objection: object to processing, including profiling.
- Withdrawal of consent: revoke previously given consent at any time.
To exercise any of these rights, send an email to legal@filnet.app with the subject "GDPR rights request", attaching a copy of your ID or equivalent identification document. We will respond within a maximum period of 30 days.
If you consider that we have not properly addressed your rights, you can file a complaint with the Spanish Data Protection Agency (AEPD).
7. Security measures
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include:
- Encryption of data in transit (TLS 1.3) and at rest (AES-256).
- Two-factor authentication for administrative access.
- Periodic security and compliance audits.
- Continuous team training in data protection.
8. Changes to this policy
We may update this Privacy Policy periodically. We will notify you of any substantial change through the email associated with your account or by means of a prominent notice on the Website.
9. Contact
For any questions about this Privacy Policy:
- Email: legal@filnet.app
- Address: Avenida Camí Nou 268, Xirivella, 46950 Valencia, Spain