Privacy policy

Last updated: 20 August 2026

Note on this translation

This is a courtesy translation. The binding version of this policy is the Spanish one, available at easynest.es/privacidad.

Data subjects

Individual clients, employees, professionals and company representatives.

Processing — What do we do with your personal data?

In compliance with Regulation (EU) 2016/679 and the Spanish Organic Law on Personal Data Protection, we inform you that your personal data may be subject to any of the following processing operations:

  • TR04 — Advertising campaigns (Legal basis: Law 34/1988 of 11 November, General Advertising Act).
  • TR08 — Collecting feedback from data subjects (Legal basis: Regulation (EU) 2016/679 and the Spanish Data Protection Act).
  • TR03 — In-house recruitment (Legal basis: Royal Legislative Decree 3/2015 of 23 October, consolidated text of the Employment Act).
  • TG01 — In-house accounting and bookkeeping, as controller (Legal basis: Royal Decree 1514/2007 of 16 November, General Accounting Plan).
  • TG25 — Data collection for in-house tax management (Legal basis: Law 58/2003 of 17 December, General Tax Act).
  • TG12 — In-house payroll management: data collection (Legal basis: Royal Legislative Decree 1/1994 of 20 June, consolidated text of the General Social Security Act).
  • TR09 — Assurance of technical and organisational measures in the software used (Legal basis: Regulation (EU) 2016/679 and the Spanish Data Protection Act).
  • TE08 — Personal Data Protection (Legal basis: Regulation (EU) 2016/679 and Organic Law 3/2018).
  • TE02 — Occupational risk prevention (Legal basis: Law 31/1995 of 8 November on the Prevention of Occupational Risks).
  • TE07 — Document destruction (Legal basis: Regulation (EU) 2016/679).
  • TV01 — Sales / Provision of services (Legal basis: commercial and tax legislation).
  • TE03 — Transport and parcel delivery services (Legal basis: Royal Decree of 22 August 1885 publishing the Commercial Code).
  • TR05 — Email (Legal basis: Commercial Code and other applicable legislation).
  • TR01 — Information requests received (Legal basis: Commercial Code and other commercial provisions).
  • TR07 — Management of security incidents and/or breaches (Legal basis: Regulation (EU) 2016/679 and the Spanish Data Protection Act).
  • TE04 — Management of in-house legal matters (Legal basis: applicable commercial and employment legislation).
  • TE01 — Maintenance of IT systems (Legal basis: Commercial Code).

Controller — Who are we?

We are the controller of your data. We therefore inform both data subjects and the competent authorities, expressly, precisely and unequivocally, of the following details regarding the controller:

  • Company name: TABOGO CAPITAL SL.
  • Tax ID (N.I.F.): B13879648
  • Registered address: Calle Doctor Castelo, 33 - B, 9 C, 28009 Madrid, Spain
  • Email: contact@easynest.es

Purposes — What do we use your personal data for?

In this organisation we may process your personal data exclusively for the purposes set out below:

  • Verifying that all necessary technical measures are in place for the correct management of personal data with the software used.
  • Sending commercial and/or advertising information by email.
  • Handling requests for information received from the data subject about our products or services.
  • Exclusive management of internal incidents detected in complying with GDPR requirements.
  • Running advertising campaigns to promote our services and/or products.
  • Collecting feedback from data subjects.
  • Recruitment to fill the necessary job vacancies.
  • Complying with all requirements laid down in the Occupational Risk Prevention Act.
  • Sending parcels and correspondence.
  • Managing any legal matter affecting the company.
  • Managing, maintaining and repairing IT storage systems.
  • Actions required for in-house payroll management.
  • Actions required for in-house tax and accounting management.
  • Complying with the storage limitation principle for personal data.
  • Complying with the requirements of Regulation (EU) 2016/679 and Organic Law 3/2018.
  • Administrative management of individual clients.
  • Carrying out the sale or provision of the contracted service.

A commercial or user profile may be built on the basis of the information provided or obtained. We expressly state that profiles will never be built using the data of a minor.

The personal data you provide will be retained for the duration of the contractual relationship or, where applicable, until you exercise your right to object or withdraw the consent given. To do so, you may go to the relevant section of our website or send an email to the address given in the section on the controller.

Lawfulness — Why do we use them?

We are entitled to process your personal data on the following grounds:

  • Your unequivocal, informed and express consent, where legally required. Withdrawing it will never affect processing carried out on a different legal basis, nor the lawfulness of processing carried out before the withdrawal.
  • A legal obligation of the controller.
  • Performance of the contract for the provision of services and/or the sale of the corresponding products entered into by you.
  • The legitimate interest of the controller. That interest rests on a prior balancing test between the legitimate interest of the controller and the interests, rights and freedoms of data subjects. This test involved assessing the interest, assessing the impact of the processing on data subjects, balancing the two, and implementing additional safeguards. As the final balance favours the controller, the processing may be carried out in accordance with applicable data protection legislation.

For any questions or clarifications, you may contact us at contact@easynest.es.

Recipients — Who may we share your personal data with?

Your personal data will be disclosed to the following companies and bodies:

  • Spanish Tax Agency (Agencia Tributaria)
  • State Public Employment Service (SEPE)
  • General Treasury of the Social Security (TGSS)
  • Spanish Data Protection Agency (AEPD)
  • Banks and savings banks

Your personal data will not be transferred to any third country or international organisation.

Origin — What data do we process and how did we obtain it?

Your personal data will be included in the following files owned by the organisation:

  • FG01 In-house accounting
  • FG02 In-house payroll management
  • FG15 In-house tax management. Data collection
  • FE01 IT maintenance
  • FE02 Occupational risk prevention
  • FE03 Transport and delivery
  • FE04 In-house legal matters
  • FR01 Information requests received
  • FR03 In-house recruitment
  • FR04 Advertising campaigns
  • FR05 Email
  • FR07 Management of security incidents and/or breaches
  • FR08 Collecting feedback from data subjects
  • FR09 Software and hardware assurance
  • FE07 Document destruction
  • FE08 Personal Data Protection
  • FP01 Clients

The personal data we process in our organisation comes from the following source: the data subject themselves.

Rights — What rights can you exercise?

We guarantee that you may exercise the rights available to you in relation to the processing of your personal data. In particular, you have the right to:

  • Obtain confirmation as to whether your data is being processed.
  • Exercise the right of access to the personal data we hold, obtaining information on the purposes of the processing, the categories of data processed, the possible recipients, the retention period, the origin of the data and, where applicable, the existence of profiling or automated decision-making.
  • Exercise the right to rectification. To that end, we remind you that the personal data we hold must always be a faithful reflection of reality, so do not hesitate to exercise this right should any data change or need to be cancelled. You warrant that the personal data you have provided to us by any means is true and accurate, and you undertake to notify us of any change to it; you are solely liable for any loss or damage caused to the controller or to any third party as a result of communicating erroneous, inaccurate or incomplete information.
  • On grounds relating to your particular situation, object to the processing of your data, in which case our organisation will stop processing it unless there are legitimate grounds preventing this.
  • Request the erasure of your personal data when, among other reasons, it is no longer necessary for the purposes described above or we no longer have a legal basis to process it.
  • Request the portability of your data where the processing is carried out by automated means and provided you are linked to our organisation by a contract or have given consent for the processing. In such cases you have the right to receive your personal data in a structured, commonly used and machine-readable format, or to have it transmitted directly to another controller where technically feasible.
  • In certain circumstances, request the restriction of the processing of your data, in which case we will retain it solely for the exercise or defence of claims.
  • Object to automated decision-making, including profiling.

These rights may be exercised free of charge, except in the cases provided for by law, by means of a written request signed by you or, where applicable, by your representative, addressed to the controller at the addresses provided for that purpose in the first section, or in person at any of our premises.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the relevant supervisory authority. You may also apply to the courts to claim compensation.

Finally, you have the right to withdraw your consent as easily as you gave it. To do so, you may go to our website, where you will find the information needed to cancel the authorisation granted to us quickly and easily. You may also send an email to the address given in the section on the controller.

We also inform you that, for each processing operation, the possible threats and impacts that may arise are identified, mitigating or where possible eliminating the potential harm through the corresponding security measures, which are reviewed periodically to determine their effectiveness.

Our control system also allows us to comply with the principles governing the processing of your data, being able to demonstrate to the data subject the principles of purpose limitation, storage limitation, data minimisation and integrity and confidentiality.

Lastly, we inform you that you will periodically receive surveys allowing us to learn your opinion on any suggestion relating to the processing of your personal data, and to comply with the principles of transparency and accuracy of the data processed.

For any questions or clarifications, you may contact us at contact@easynest.es.

Cookies

The use of cookies on this website is covered by a separate document: cookie policy.

← Back to home