Who Is Responsible for Your Data
The controller is Collatz Solutions LLC, a Wyoming limited liability company trading as Advisors in Spain.
Registered address: 30 N Gould Street, Sheridan, Wyoming 82801, United States.
Privacy and data-protection email: privacy@advisorsinspain.com.
Madrid, Spain is a market and service location for Advisors in Spain. It is not the controller’s registered address or, by itself, an establishment of Collatz Solutions LLC.
Last updated: September 9, 2026
Data We Collect
When you submit an enquiry, we may collect:
- Whether the enquiry concerns an individual or a business, and an optional company name.
- The service requested, the relevant Spanish region, your stage or timeline and the page from which you submitted the form.
- Your name, email address and optional phone or WhatsApp number.
- The situation you describe. Inheritance forms may also request the relationship to the deceased and date of death.
- The form wording and acknowledgements presented to you, the choices you made and the submission time.
Please do not put medical information, criminal-record information, identity documents or other highly sensitive information in the initial free-text field. A professional who needs such material should request it later through an appropriate channel.
We also process limited technical information needed to deliver and protect the website. This can include request time, IP address, browser or device information, requested URL, security signals and error information. Cloudflare Turnstile processes technical signals to distinguish genuine submissions from automated abuse.
The calculators ordinarily run in your browser. The property-cost calculator can create a share link containing calculator inputs. Anyone receiving that link can read those values. Cloudflare Web Analytics does not log URL query strings.
Why We Use Your Data
We use personal data for the following purposes and legal bases:
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry and assessing and coordinating the service steps you request | Steps requested before a possible contract, or our legitimate interest in answering genuine enquiries where that basis is more appropriate |
| Identifying and introducing a suitable independent professional | Steps requested by you before an engagement; consent where the form or applicable law specifically requests it |
| Contacting you through email or WhatsApp as requested | Steps requested by you and, where required, consent |
| Operating, securing and troubleshooting the website and forms | Our legitimate interests in security, fraud prevention and reliable service delivery |
| Recording the enquiry acknowledgement and the Terms and Privacy Notice versions presented with it | Compliance with legal obligations and our legitimate interest in demonstrating what governed an enquiry |
| Maintaining referral, payment, complaint and commercial records | Contractual steps, legal obligations and our legitimate interests in administering and defending commercial relationships |
| Producing limited aggregate traffic and website-performance statistics through Cloudflare Web Analytics | Our legitimate interests in understanding and maintaining the website, to the extent personal data is processed |
We do not use automated lead scoring at launch. People review and sort enquiries manually. We do not make a solely automated decision that produces a legal or similarly significant effect on you.
Who Receives Your Data
We disclose only the information reasonably needed for the applicable purpose.
- Suitable independent professionals and firms. Depending on the enquiry, this may be an independent lawyer, tax adviser, accountant, gestor, immigration professional or another suitable specialist. The professional decides whether to accept the matter and acts under its own engagement terms and privacy notice. You are told the identity of the proposed professional or firm when the referral is made.
- Cloudflare. Cloudflare provides website delivery, security, Turnstile, privacy-preserving Web Analytics and, where configured, storage for enquiries.
- Resend. Resend delivers the email notification generated when an enquiry is submitted.
- WhatsApp and Meta. If you ask to communicate through WhatsApp, the number and message data are also handled under WhatsApp’s applicable terms and privacy arrangements.
- Professional advisers and authorities. We may disclose information to our legal, accounting or security advisers, courts, regulators or public authorities where reasonably necessary or legally required.
Collatz Solutions LLC may receive a referral or coordination payment from an independent professional if you engage them. That commercial arrangement does not authorize the professional to use your data for an unrelated purpose.
Our provider list may change as the service develops. We update this notice when a new recipient materially changes how personal data is handled.
Cookies and Website Measurement
The current website does not use Google Analytics, Google Tag Manager or Cloudflare Zaraz. It does not set an Analytics identifier in cookies, local storage or session storage.
We use Cloudflare Web Analytics to produce aggregate statistics about visits, pages, referrers, country, device and browser categories, page-load performance and Core Web Vitals. The performance beacon is delivered by Cloudflare and, because the site is proxied through Cloudflare, reports to the same-origin /cdn-cgi/rum endpoint. Cloudflare states that Web Analytics does not collect or use visitors’ personal data, does not fingerprint visitors and does not track individuals across websites.
Cloudflare Web Analytics does not receive enquiry-form contents, custom enquiry events or URL query strings. We do not use it to create profiles or make decisions about individual enquiries.
Turnstile is a separate security control. The current widget uses a short-lived, single-use response token and has pre-clearance disabled. A clean-browser production audit on August 28, 2026 found no cf_clearance cookie or other cookie created by the website. If a Cloudflare security challenge is triggered separately, Cloudflare may use strictly necessary security technology to protect the service.
Because the current configuration has no optional cookies or comparable persistent Analytics identifiers, the website does not display an Analytics consent banner. See the Cookie Notice for the current technology list. We will update the notice and introduce consent controls before enabling any non-essential storage, cross-site tracking, advertising measurement or other optional technology that requires consent.
International Data Handling
Collatz Solutions LLC is established in the United States. Cloudflare, Resend, WhatsApp and the independent professionals involved in a referral may process information in the United States, the European Economic Area, the United Kingdom, Spain or other countries relevant to their operations.
Where European or UK transfer rules require safeguards, we use the recipient’s applicable data-processing terms, adequacy framework, standard contractual clauses, UK addendum or other lawful mechanism. You may request information about the safeguards relevant to your data by emailing privacy@advisorsinspain.com.
Cloudflare Workers KV, if used for enquiry records, is a globally distributed service and is not described as EU-only storage.
How Long We Keep Data
Our current retention schedule is:
- Enquiries that are not referred: up to 90 days after the last contact, followed by deletion or effective anonymization.
- Full enquiry following a referral: while referral coordination remains active and ordinarily for no more than 90 days after the handoff or last coordination contact, followed by deletion or effective anonymization unless a dispute or legal obligation requires more.
- Commercial referral record: a minimized record of the referral, professional, date, status, fee or commission, relevant correspondence and notice evidence for up to six years after the final transaction.
- Enquiry acknowledgement evidence: with the related enquiry or minimized commercial record for the applicable period above.
- Cloudflare Web Analytics: aggregate dashboard reports are available to us for up to six months. Cloudflare states that unsampled beacon data is stored for seven days before longer-term aggregation.
- Operational and security logs: ordinarily no more than 30 days, unless a specific incident or legal hold requires longer retention.
Anonymization means that neither we nor another person can reasonably identify you from the retained information, including by combining it with other data reasonably available to us. Removing only a name while retaining identifying contact or case details is not anonymization.
We may retain a record longer where reasonably necessary for an active complaint, legal claim, fraud investigation, tax requirement or other legal obligation. We restrict it to that purpose and delete or anonymize it when the hold ends.
Your Rights
Depending on the law applicable to you, you may have the right to:
- Obtain information about and a copy of your personal data.
- Correct inaccurate or incomplete information.
- Request deletion in applicable circumstances.
- Restrict processing in applicable circumstances.
- Receive data you provided in a portable format where the portability right applies.
- Object to processing based on legitimate interests.
- Withdraw consent at any time where consent is the legal basis.
- Complain to a competent data-protection authority.
Email privacy@advisorsinspain.com to exercise a right or raise a privacy complaint. You do not need to submit the referral form, agree to professional disclosure or provide more identity information than reasonably necessary to verify the request.
The independent professional receiving a referral normally controls its subsequent professional file separately. Requests concerning that file should be directed to the professional, although we will help identify the correct contact where reasonably possible.
Contact and Complaints
Send privacy requests and complaints to privacy@advisorsinspain.com. We acknowledge data-protection complaints within 30 days and investigate and respond without undue delay.
People in Spain may complain to the Agencia Espanola de Proteccion de Datos. People elsewhere may complain to the supervisory authority responsible for their location. UK users may complain to the Information Commissioner’s Office.
We may update this notice when the service, recipients or law changes. The updated date identifies the version in effect. Material changes are published before they apply where advance notice is reasonably possible.