Privacy Policy

Data Controller

Company name: DIGITAL NOTARY ADVISORY LLC

FEI/EIN number: 30-1406860

Registered office: 30 N Gould St, Suite R, Sheridan, WY 82801, Wyoming, USA

Email: [email protected]

Establishment in Spain: DIGITAL NOTARY ADVISORY LLC, SUCURSAL ESPAÑA · CIF W0360733J · Paseo de Gràcia, 12, 1.º, 08007 Barcelona

The processing of data relating to users in the European Economic Area is carried out by the branch in Spain, which is the establishment responsible for the purposes of Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018.

Types of Data Collected

Among the types of Personal Data that www.notario.org collects, either directly or through third parties, are the following:

• Identification data: first name, surname, DNI/NIE number, date of birth
• Contact data: email address, telephone number, postal address
• Professional data: profession, company name, NIF/CIF (Spanish tax ID)
• Browsing data: IP address, website usage data
• Billing and payment data: amount, date and receipt of the transaction. Card details are processed directly by the payment gateway, not by Notario.org

Purpose of Processing

User data is collected to enable the Data Controller to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests, as well as for the following purposes:

• Provision of online notarial services
• Contact with the User
• Payment processing
• Usage statistics and analysis
• Compliance with legal obligations

Legal Basis for Processing

Each processing operation relies on a different legal basis. These are the ones we apply:

• Performance of a contract or of pre-contractual measures (Art. 6(1)(b)): handling your request for a quotation, processing the instruction, coordinating the transaction with the notary's office and providing the contracted service.
• Compliance with a legal obligation (Art. 6(1)(c)): tax and accounting obligations, and those arising from anti-money laundering legislation.
• Consent (Art. 6(1)(a)): commercial communications, non-essential cookies and contact via WhatsApp where you authorise it. You may withdraw it at any time.
• Legitimate interest (Art. 6(1)(f)): site security, fraud prevention and service improvement, always after weighing up your rights.

Recipients of the Data

Notario.org does not sell your data, nor does it disclose it to third parties for commercial purposes. In order to provide the service, it is disclosed to:

• The Spanish notary's office to which your instruction is referred, which is the party that authorises the document and is answerable for it as an independent public official.
• Land and Commercial Registries, tax authorities and other public bodies, where the contracted procedure so requires.
• Suppliers acting as data processors under a contract signed in accordance with Art. 28: hosting and email, payment gateway, instant messaging and the internal management system.
• Banking and insurance institutions, solely where the contracted transaction requires it.

Payments are processed through an external payment gateway. Notario.org does not collect or store your card details: it retains only the receipt of the transaction and its amount.

International Transfers

Processing is generally carried out within the European Economic Area. Where a supplier processes data outside the EEA, or where the US parent company accesses it for administrative purposes, the transfer is covered by an adequacy decision of the European Commission or by standard contractual clauses, together with any additional safeguards that may be appropriate. You may request a copy of those safeguards by writing to [email protected].

Retention Periods

We retain data only for as long as is strictly necessary for each purpose:

• Enquiries and quotations that do not result in a contract: one year from the last contact.
• Contracted files: for the duration of the relationship and, thereafter, for the limitation period applicable to claims arising from the contract.
• Accounting and tax records: six years, in accordance with the Commercial Code, and four years for tax purposes.
• Records subject to anti-money laundering legislation: ten years.
• Data processed on the basis of your consent: until you withdraw it.

Security Measures and Compliance

We apply technical and organisational measures covering encryption, access control, incident management and ongoing staff training. Processing activities are documented in the Record of Processing Activities provided for in Art. 30 of the GDPR, we have external specialist data protection advice and our processes are subject to periodic audits. Compliance with the GDPR and the LOPDGDD is certified by Proyectos, Formación y Servicios, S.L., most recently renewed on 16 April 2026.

Methods and Place of Processing

Processing Methods

The Data Controller will process User Data in an appropriate manner and will adopt suitable security measures to prevent unauthorised access, disclosure, alteration or destruction of the Data.

Retention Period

Personal Data will be processed and stored for as long as is necessary for the purposes for which it was collected, and may be retained for longer where required by a relevant legal obligation or on the basis of the Users' consent.

Data Subject Rights

Users may exercise certain rights in relation to the processing of their Data by the Data Controller (ARCO Rights: access, rectification, cancellation, opposition, as well as the additional GDPR rights):

• Right of access: To obtain confirmation as to whether their data is being processed
• Right to rectification: To correct inaccurate or incomplete data
• Right to erasure: To request the deletion of their data
• Right to restriction: To restrict the processing of their data
• Right to object: To object to the processing of their data
• Right to data portability: To receive their data in a structured format
• Withdrawal of consent: To withdraw the consent given at any time, without this affecting the lawfulness of processing carried out beforehand

To exercise these rights, you may contact the Data Controller at: [email protected]

If you consider that your data is not being processed correctly, you may lodge a complaint with the Agencia Española de Protección de Datos (the Spanish data protection authority) (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).

We do not take automated decisions or carry out profiling that produces legal effects concerning you.