Sand Soft Dev · Praza da Tellada 11, 36209 Vigo, Pontevedra, Spain
Sand Soft Dev, Praza da Tellada 11, 36209 Vigo, Pontevedra, Spain. Email: info@sandsoftdev.com. Phone: +34 886 139 354. NIF: B-XXXXXXXX. Registered in the Registro Mercantil de Vigo.
This Privacy Policy complies with: Reglamento General de Protección de Datos (RGPD, Regulation (EU) 2016/679); Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales (LOPD-GDD); Ley 34/2002 de Servicios de la Sociedad de la Información y de Comercio Electrónico (LSSI-CE); and any applicable regional legislation of Pontevedra, Galicia. The supervisory authority is the Agencia Española de Protección de Datos (AEPD), C. Jorge Juan 6, 28001 Madrid, www.aepd.es.
3.1 Contact and Account Data: Name, surname, email address, phone number, company name (if applicable), and billing address. Collected when you request a quote, place an order, or contact us. 3.2 Document Data: The content of documents you send for translation. This may include personal data of third parties (names, addresses, identification numbers in legal documents, medical data in health documents). We process this data solely for the purpose of providing translation services and treat all document content as strictly confidential. 3.3 Payment Data: Payment is processed by Stripe (PCI DSS Level 1 certified). We do not store full card numbers. We receive: last 4 digits, card brand, transaction amount, date, and Stripe customer ID. 3.4 Communication Data: Content of emails, contact form submissions, and chat messages. 3.5 Technical Data: We use Plausible Analytics (cookieless, EU-hosted). No personal data is collected for analytics purposes.
4.1 Service Delivery (Art. 6(1)(b) RGPD — contractual necessity): Processing translation orders, delivering completed translations, managing revisions, issuing invoices, providing customer support. 4.2 Legal Obligations (Art. 6(1)(c) RGPD): Tax reporting, invoice retention (Ley 58/2003 General Tributaria), anti-money laundering where applicable. 4.3 Legitimate Interest (Art. 6(1)(f) RGPD): Improving our services, preventing fraud, ensuring IT security. 4.4 Consent (Art. 6(1)(a) RGPD): Marketing communications (newsletter). You may withdraw consent at any time.
All documents submitted for translation are treated with the highest level of confidentiality. Specifically: (a) all translators sign binding Non-Disclosure Agreements (NDAs) before receiving any client documents; (b) documents are transmitted via encrypted channels (TLS 1.3) and stored on encrypted servers (AES-256); (c) documents are accessible only to the assigned translator(s) and project manager; (d) documents are permanently deleted from our systems within 30 days of project completion unless you request extended retention; (e) we will sign your NDA or confidentiality agreement before receiving documents upon request; (f) for legal, medical, and financial documents containing sensitive personal data, we apply additional access restrictions and audit logging.
You have the right to: (a) Access your personal data (Art. 15); (b) Rectification of inaccurate data (Art. 16); (c) Erasure ("right to be forgotten," Art. 17); (d) Restriction of processing (Art. 18); (e) Data portability (Art. 20); (f) Object to processing (Art. 21); (g) Withdraw consent at any time (Art. 7(3)); (h) Lodge a complaint with the AEPD. To exercise your rights, email info@sandsoftdev.com with subject "RGPD Request" or write to: Praza da Tellada 11, 36209 Vigo, Pontevedra, Spain. We will respond within 30 days. Identity verification may be required.
Client data: Duration of business relationship + 5 years (statute of limitations, Art. 1964 Código Civil). Invoices and financial records: 6 years (Art. 30 Código de Comercio). Documents submitted for translation: Deleted 30 days after project completion unless extended retention requested. Communication records: 3 years. Marketing consent records: Duration of consent + 3 years.
Your data is primarily processed within the EU/EEA. If a translation requires a translator based outside the EEA, we ensure adequate protection through: Standard Contractual Clauses (SCCs) approved by the European Commission; or an adequacy decision by the European Commission for the recipient country. You will be informed before any international transfer takes place.
We implement: TLS 1.3 encryption for all data in transit; AES-256 encryption for data at rest; multi-factor authentication for staff accounts; regular security audits; encrypted backups stored in EU data centers; NDA agreements with all staff and subcontractors; and documented incident response procedures.
Data Protection Contact: info@sandsoftdev.com. Postal: Praza da Tellada 11, 36209 Vigo, Pontevedra, Spain. Phone: +34 886 139 354. Supervisory authority: AEPD, www.aepd.es.
Last updated: March 2026.
Online · Vigo