Privacy Statement

This Privacy Statement aims to inform users about the processing of personal data collected through the website nindalegal.com, in strict compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Identity of the Data Controller

Owner: MUKTI SL

Tax ID: B23853823

Postal address: Av. Eduard Toldrà 37, block L, ground floor 1, 08800 Vilanova i la Geltrú (Barcelona).

Email for privacy inquiries: info@nindalegal.com

2. Principles Applied to Data Processing
In processing your personal data, MUKTI SL will apply the following principles required by the GDPR:

Principle of lawfulness, fairness, and transparency: We will always require your prior consent to process your data or base our processing on a legal obligation or contractual relationship, informing you with complete transparency.

Principle of data minimization: We will only request the data strictly necessary for the required purposes.

Principle of storage limitation: Data will be kept only for as long as necessary for the purposes of processing.

Principle of integrity and confidentiality: Your data will be processed in a way that ensures appropriate security and preserves its confidentiality against unauthorized access or alteration.

3. Purpose of Processing and Legal Basis

We process the data you provide for the following purposes and legal bases (Art. 6.1 GDPR):

Managing inquiries and contact: Resolving queries, requests, or comments submitted through web forms or email. Legal basis: Explicit consent of the data subject (Art. 6.1.a GDPR).

Pre-contractual and contractual management: Preparing quotes, engagement letters, and providing the requested professional services. Legal basis: Performance of a contract or taking pre-contractual measures (Art. 6.1.b GDPR).

Compliance with legal obligations: Responding to requests from tax, judicial, or applicable sectoral regulatory authorities. Legal basis: Compliance with a legal obligation (Art. 6.1.c GDPR).

Cybersecurity and website maintenance: Monitoring web traffic to prevent fraud, cyberattacks, and ensure server stability. Legal basis: Legitimate interest of the data controller (Art. 6.1.f GDPR).

4. Data Retention Periods

The personal data provided will be retained as long as there is a mutual interest in maintaining the purpose of the processing and for the period during which legal liabilities may arise from the services provided:

Accounting and tax data: 6 years (Art. 30 of the Commercial Code).

Data relating to the provision of services: Up to 5 years after the completion of the engagement (Art. 1964 of the Civil Code), or 10 years if the activity is subject to Anti-Money Laundering regulations.

Once these periods have expired, the data will be duly blocked and subsequently securely destroyed.

5. Recipients and Processors

MUKTI SL will not transfer your personal data to third-party companies for commercial or advertising purposes, nor to any third party except where expressly required by law. However, for the proper provision of services and website operation, we share your data with technology providers (e.g., web hosting, IT maintenance, or administrative services) who act as Data Processors. All of them operate under strict confidentiality and data processing agreements (Art. 28 GDPR). In the event of international data transfers, these will only be carried out to countries with an adequate level of data protection or through the adoption of Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Use of Generative Artificial Intelligence (AI)

Following the guidelines and recommendations of the Spanish Data Protection Agency (AEPD) regarding the use of Artificial Intelligence systems:

MUKTI SL guarantees that it does not introduce personal, sensitive, or confidential information of its clients into public or open generative Artificial Intelligence platforms.

If the Website incorporates automated user support tools, this will be expressly stated. MUKTI SL does not make automated decisions or create profiles that produce legal effects for the user without corresponding human review and supervision.

7. Exercising Your Rights (ARCO-POL Rights)

You have the right to obtain confirmation as to whether MUKTI SL is processing personal data concerning you. You may exercise the following rights at any time:

Access: To know what personal data of yours we are processing
o.

Rectification: Request the correction of inaccurate or incomplete data.

Erasure (“Right to be Forgotten”): Request the deletion of your data when it is no longer necessary for the purposes for which it was collected.

Objection: Object to the processing of your data for personal reasons.

Restriction of processing: Request the temporary suspension of the processing of your data.

Portability: Receive your data in a structured, commonly used, and machine-readable format.

You may exercise these rights by sending a written request, along with a copy of your ID card, passport, or equivalent document, to the email address info@nindalegal.com or to the postal address Av. Eduard Toldrà 37, block L, ground floor 1, 08800 Vilanova i la Geltrú (Barcelona).

Likewise, if you believe that the processing of your data does not comply with current regulations or your rights have been violated, you have the right to file a complaint with the competent Supervisory Authority (Spanish Data Protection Agency – www.aepd.es).