3. Personal Data We May Process

Klira will only process data that is appropriate, relevant, and necessary for each purpose. Depending on the channel used and the service requested, the following categories of data may be processed:

• Identification data: name, surname, DNI/NIE/passport, or other documents when required for the procedure.
• Contact information: phone number, email address, postal address, and professional messaging channels.
• Data related to inquiries, files, administrative documentation, companies, self-employed individuals, vehicles, or requested services.
• Billing data, payment, budget, contractual relationship, and commercial communications when applicable.
• Technical data: IP address, device identifiers, cookies, browsing and security logs, in accordance with the Cookie Policy.

4. Specially Protected Data and Sensitive Documents

In certain cases, the client may provide sensitive documentation or specially protected data, such as identity documents, residency, employment history, financial, family, health, or administrative information.

Klira will only request this type of information when necessary to analyze, prepare, or coordinate the requested service, applying principles of minimization, confidentiality, and restricted access.

If it is not necessary to provide a complete document, Klira may request that non-relevant information be redacted before submission.

Inquiry Handling

Respond to messages received through forms, chat, phone, email, social media, or professional messaging platforms.

Initial case assessment

Understand the user's needs, identify basic documentation, and clearly propose the next steps.

Provision and coordination of services

Organize documentation, monitor progress, and coordinate actions with management firms, lawyers, sworn translators, DGT professionals, or other collaborators as appropriate.

Administrative and Contractual Management

Prepare budgets, manage orders, issue invoices, maintain service communications, and keep records.

Legal Compliance

Comply with tax, accounting, commercial, data protection, fraud prevention, security obligations, and requirements of competent authorities.

Improvement and Safety

Maintain website security, prevent abuse, analyze technical incidents, and improve the quality of customer service channels.

7. Source of the data

Data usually comes directly from the user or client when they fill out forms, use the chat, call, write by email, or submit documentation for a service.

They may also come from collaborating professionals, public administrations, official platforms, or third parties authorized by the interested party, always within the scope of the requested service.

8. Accuracy and Updating of Data

The user guarantees that the provided data is truthful, accurate, complete, and up-to-date. If third-party data is provided, the user declares having sufficient authorization and informing those individuals when necessary.

Klira may request clarifications or additional documentation when the information provided is incomplete, contradictory, or insufficient to deliver the service securely.

Professional Collaborators

When the case requires it, the necessary data and documents may be provided to management firms, advisory services, licensed lawyers, sworn translators, authorized DGT professionals, or other specialists involved in the provision of the service.

Administrations, courts, and agencies

Data may be communicated to public administrations, official bodies, authorities, registries, courts, or competent entities when necessary for the procedure, when there is a legal obligation, or at the request of the data subject.

Technology Providers

Klira may use providers for hosting, email, storage, CRM, backups, security, analytics, or productivity tools, acting as data processors under confidentiality and security commitments.

Legal Obligations

The data may be shared with banks, advisory firms, the Tax Agency, Social Security, or other third parties when necessary for invoicing, collection, accounting, regulatory compliance, or the defense of rights.

10. International Transfers

As a general rule, Klira will seek to use suppliers located within the European Economic Area or those that provide adequate guarantees.

If technological tools are used whose providers may process data outside the European Economic Area, Klira will ensure that valid mechanisms in accordance with the GDPR are in place, such as adequacy decisions, standard contractual clauses, or other applicable safeguards.

11. Retention Periods

The data will be retained for as long as necessary for the purpose for which it was collected and, subsequently, for the periods required by applicable regulations or as long as liabilities may arise.

• Uncontracted inquiries: for the time necessary to respond and provide reasonable follow-up.
• Clients and files: during the service relationship and the legal retention periods for claims defense.
• Invoicing and accounting: for the periods required by tax, commercial, and accounting regulations.
• Commercial consents: until consent is withdrawn or an unsubscribe request is made.
• Technical records and security: for the necessary period to analyze incidents, prevent abuses, and ensure security.

Access

Know if we process your data and obtain information about such processing.

Correction

Request the correction of inaccurate or incomplete data.

Removal

Request the deletion of your data when it is no longer necessary or legally appropriate.

Opposition and Limitation

Oppose certain treatments or request that their use be temporarily limited.

Portability

Receive your data in a structured format when appropriate and permitted by the legal basis.

Withdrawal of consent

Withdraw consent at any time, without affecting the lawfulness of the processing carried out prior to its withdrawal.

13. Security and Confidentiality

Klira implements reasonable technical and organizational measures to protect data against loss, unauthorized access, alteration, disclosure, or improper destruction. These measures include access control, confidentiality criteria, document organization, responsible use of digital tools, and review of communication channels.

However, no system connected to the Internet can guarantee absolute security. Users should avoid sending unnecessary information, use secure devices, and report any detected incidents or errors.

14. Forms, chat, and contact channels

The forms and chat on the website are intended to collect the minimum necessary information to evaluate the request and contact the user. Users should not submit third-party data or particularly sensitive documents unless required for the initial inquiry.

When the inquiry progresses to a specific service, Klira may request additional documentation in an orderly and proportionate manner according to the procedure.

15. Commercial Communications

Klira will only send electronic commercial communications when there is consent, a prior relationship with the client, or an applicable legal basis. Each communication will include an easy way to unsubscribe or withdraw consent.

The withdrawal of consent does not affect communications that are strictly necessary to manage a contracted service or fulfill legal obligations.

16. Cookies and Similar Technologies

The website may use necessary technical cookies and, where applicable, analytical, personalization, or marketing cookies, provided that the appropriate consent has been obtained. Specific information is detailed in the Cookie Policy.

17. Minors

Klira's services are not specifically intended for minors. If a minor needs to make an inquiry or carry out a procedure, it must be done with the involvement of their legal representatives when applicable.

18. Changes to this Privacy Policy

Klira may modify this Privacy Policy to adapt it to regulatory, technical, organizational, or service-related changes. The current version will be the one published on this page, indicating the date of the latest update.