Privacy Policy
1. Identification of the Data Controller
In compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), users of this website are hereby provided with the following information:

Data Controller
The data controller carries out her professional activities as a self-employed person, providing services to individuals and businesses, both domestic and international.

This Privacy Policy governs the processing of personal data provided by users via the website, by email, telephone, instant messaging, video conferencing, social media, in person or through any other channel enabled for the provision of services.

2. Commitment to the protection of personal data
The protection of privacy and personal data is a fundamental principle underpinning Daria Kalmykova Veselieva’s professional activities.

All processing of personal data is carried out in accordance with the principles set out in the GDPR:

  • Lawfulness, fairness and transparency.
  • Purpose limitation.
  • Data minimisation.
  • Accuracy.
  • Storage limitation.
  • Integrity and confidentiality.
  • Proactive accountability.
Only data that is appropriate, relevant and strictly necessary to provide the services contracted or requested by the customer will be collected.
Personal data will not be used for purposes other than those for which it was collected, unless there is a legal obligation to do so or the data subject has given their prior consent.

3. Scope of application
This Privacy Policy applies to all processing of personal data carried out by the data controller in relation to the following services, amongst others:

  • Administrative agency services.
  • Advice and administrative assistance to Spanish and foreign nationals.
  • Document translation.
  • In-person or remote interpreting.
  • Processing of immigration procedures.
  • Obtaining and renewing NIE numbers, certificates and other administrative documentation.
  • Dealing with public authorities.
  • Handling of procedures relating to the Directorate-General for Traffic.
  • Dealing with the Tax Authority, Social Security and other public authorities.
  • Document management.
  • Assistance with opening bank accounts and other financial matters relating to the services contracted.
  • Property search.
  • Property management and brokerage.
  • Coordination with partner estate agents.
  • Coordination with notaries, land registries, financial institutions, solicitors and other professionals involved in the transaction requested by the client.
  • Responding to enquiries made via the website, email or social media.
Use of the website implies acceptance of this Privacy Policy insofar as it applies to the processing of the user’s personal data.

CHAPTER 2. PERSONAL DATA PROCESSED, PURPOSES AND LEGAL BASIS

4. Categories of personal data processed
Depending on the service requested, Daria Kalmykova Veselieva may process the following categories of personal data:

4.1 Identifying data
  • First name and surname.
  • National Identity Card (DNI), Foreigner Identification Number (NIE) or passport.
  • Date and place of birth.
  • Nationality.
  • Signature.
  • Photograph, where required for administrative purposes.

4.2 Contact details
  • Postal address.
  • Email address.
  • Landline or mobile telephone number.
  • Preferred language of communication.

4.3 Administrative and documentary details
Where necessary for the provision of the contracted service, the following may be processed, amongst others:
  • Proof of residence.
  • Criminal record certificates.
  • Birth, marriage or death certificates.
  • Residence permits.
  • Visas.
  • Driving licences.
  • Vehicle registration documents.
  • Deeds.
  • Contracts.
  • Powers of attorney.
  • Administrative certificates.
  • Documents required by any public authority.

4.4 Economic and financial data
Where required by the contracted service, the following may be processed:
  • Bank details.
  • Proof of income.
  • Payslips.
  • Tax returns.
  • Information required for invoicing.
  • Details relating to payments and receipts.
  • Financial information required for property transactions.

4.5 Data relating to properties
In services relating to the property sector, data relating to the following may be processed:
  • Homes.
  • Commercial premises.
  • Land.
  • Garages.
  • Cadastral references.
  • Deeds.
  • Sales contracts.
  • Tenancy agreements.
  • Energy performance certificates.
  • Land registry information.
  • Planning documentation.
  • Other documentation required for the property transaction.

4.6 Data contained in documents to be translated
Documents provided by clients for translation or interpreting may contain personal data of various kinds, including identifying, administrative, employment, academic and financial data, or any other information included in the original document.
These documents will be processed solely for the purpose of providing the contracted service and will be treated in strict confidence.


4.7 Special categories of data
As a general rule, no special categories of personal data will be requested.
However, certain documents provided voluntarily by the customer for the provision of the service (for example, medical certificates, court rulings or administrative documentation) may contain specially protected data.
In such cases, such data will be processed only where it is essential for the performance of the requested service and in accordance with the safeguards provided for in current legislation.

5. Purposes of processing
Personal data will be processed for the following purposes:


5.1 Provision of administrative services
To manage administrative files, prepare documentation, submit applications to public bodies, carry out administrative procedures and provide any other service requested by the client.


5.2 Translation and interpreting services
To translate official or private documents.
To provide face-to-face or remote interpreting services.
Arranging certified translations where required.
Maintain communication with the client throughout the execution of the assignment.


5.3 Immigration Services
Preparing and processing procedures relating to:
  • NIE.
  • Residence permits.
  • Family reunification.
  • Citizenship.
  • Visas.
  • Certificates.
  • Renewals.
  • Any other administrative procedures requested.

5.4 Administrative procedures
Handling procedures with:
  • The Tax Agency.
  • Social Security Treasury.
  • Directorate-General for Traffic.
  • Local councils.
  • The Regional Government of Andalusia.
  • Notaries.
  • Public Registers.
  • Consulates.
  • Other relevant public authorities.

5.5 Property management
Where a client requests assistance with the purchase, sale or letting of a property, their personal data may be processed for the following purposes:
  • Search for suitable properties.
  • Arrange viewings.
  • Coordinate meetings.
  • Requesting documentation.
  • Verify eligibility.
  • Prepare contractual documentation.
  • Coordinate the transaction with the various professionals involved.
5.6 Communication with partner estate agents
Where necessary to provide the requested service, personal data may be disclosed to partner estate agents for the sole purpose of:
  • locate properties;
  • arrange viewings;
  • process offers;
  • draft contracts;
  • coordinate sale or letting transactions;
  • provide the property brokerage services requested by the client.
Only the data strictly necessary for each action will be disclosed, whilst at all times respecting the principle of data minimisation.


5.7 Disclosure to necessary third parties
Where required for the provision of the service, data may be disclosed to:
  • Notaries.
  • Registry offices.
  • Public authorities.
  • Banks.
  • Solicitors.
  • Legal representatives.
  • Collaborating agents.
  • Courier companies.
  • Partner translators.
  • Other professionals whose involvement is necessary to carry out the contracted service.

5.8 Customer service
Handling enquiries received via:
  • web form;
  • email;
  • telephone;
  • WhatsApp;
  • social media;
  • video conference;
  • face-to-face support.

5.9 Administrative and accounting management
Issuing quotes.
Process invoices.
Collect fees.
Comply with tax, accounting and administrative obligations.
Handle issues relating to the provision of the service.


5.10 Sending commercial information
Where the data subject has given their consent or there is another valid legal basis, communications relating to the services offered may be sent.
The data subject may withdraw this consent at any time.


5.11 Browsing the website
Whilst browsing this website, certain technical data, such as the IP address, browser identifiers, device information and browsing data, may be processed for the purpose of ensuring the website functions properly, improving the user experience and, where the data subject has given their consent, obtaining usage statistics through analytics tools.


For specific information on the cookies and similar technologies used by this website, their purposes, duration, providers and how to manage or withdraw consent, please refer to the Cookies Policy.

6. Legal basis for processing
The processing carried out is based on one of the following legal bases set out in Article 6 of the General Data Protection Regulation:

Performance of a contract
Where processing is necessary to provide the services contracted by the customer.

Taking steps prior to entering into a contract
Where the data subject requests information, quotations or actions prior to entering into a contract.

Compliance with legal obligations
Where there is an obligation imposed by tax, commercial, administrative, fraud prevention, money laundering prevention legislation or any other applicable legal provision.

Consent of the data subject
For the sending of marketing communications, the use of certain electronic means or any other processing requiring express authorisation.

Legitimate interest
To improve the quality of services, ensure system security, manage incidents, prevent fraudulent use and manage customer relations appropriately, provided that such interest does not override the data subject’s fundamental rights and freedoms.

CHAPTER 3. RECIPIENTS OF THE DATA, TRANSFERS, DATA PROCESSORS AND RETENTION

7. Recipients of personal data
As a general rule, personal data provided by customers will not be sold, transferred or disclosed to third parties, except where such disclosure is necessary for the provision of the contracted service, where there is a legal obligation, or where the data subject has given their consent.
Depending on the service requested, the data may be disclosed to the following recipients:

  • Relevant public authorities.
  • State Tax Administration Agency.
  • General Treasury of the Social Security.
  • Directorate-General for Traffic.
  • Local councils.
  • Regional Government of Andalusia.
  • Immigration Offices.
  • Public Registers.
  • Notaries.
  • Consulates.
  • Banks.
  • Insurance companies.
  • Professional firms involved in the transaction.
  • Solicitors, legal representatives or advisers where necessary for the proper provision of the service.
In all cases, only those personal data that are strictly necessary to fulfil the relevant purpose will be disclosed.

8. Disclosure of data to partner estate agents
Where the client requests services relating to the search for, purchase, sale or letting of property, it may be necessary to disclose certain personal data to partner estate agents.

The sole purpose of such disclosures is to facilitate the provision of the service requested by the client and may be carried out, amongst other things, to:

  • identify properties suited to the client’s needs;
  • organise viewings;
  • verify the availability of properties;
  • submit offers to purchase or let;
  • prepare the necessary documentation for the transaction;
  • co-ordinate the signing of contracts;
  • manage the sale or letting of the property.
The data provided will be limited to that which is essential for each specific action, applying at all times the principle of data minimisation as set out in the General Data Protection Regulation.

The recipient estate agents will act as independent data controllers with regard to the processing they carry out as part of their own professional activities and must also comply with current data protection legislation.

9. Communication with notaries, registries and financial institutions
Where required for the provision of the contracted service, personal data may be disclosed to:
  • Notaries.
  • Land registries.
  • The Commercial Register.
  • Banks.
  • Valuation firms.
  • Partner agencies.
  • Public authorities.
  • Official bodies.
The sole purpose of these communications will be to correctly process the administrative, legal or property-related procedures entrusted to us by the client.

10. Data processors
In the course of its professional activities, the data controller may engage external service providers who have access to personal data solely for the purpose of providing specific services.

Among others, the following providers may act as data processors:
  • web hosting;
  • email;
  • cloud storage;
  • back-up services;
  • IT maintenance;
  • invoicing software;
  • document management software;
  • videoconferencing services;
  • electronic signature platforms;
  • courier and parcel services;
  • computer-assisted translation services, where necessary.
All these service providers will only have access to the data strictly necessary for the provision of the contracted service and will be subject to the relevant confidentiality and security obligations through the contracts provided for in Article 28 of the General Data Protection Regulation.

11. International data transfers
As a general rule, the data controller will ensure that personal data is processed within the European Economic Area.

However, certain technology providers used to provide the services may store or process information from third countries.

Where this occurs, only providers offering adequate safeguards in accordance with the General Data Protection Regulation will be used, including, where applicable:

  • adequacy decisions adopted by the European Commission;
  • standard contractual clauses;
  • binding corporate rules;
  • or any other mechanism recognised by the applicable legislation.
In particular, certain services used whilst browsing the website, such as analytics tools or the loading of typefaces from third-party providers, may involve international data transfers. You can find detailed information by consulting the Cookies Policy.

12. Confidentiality of documentation
All documentation provided by clients will be treated with the utmost confidentiality.
Documents received for the provision of administrative, translation, interpreting or property management services will be used solely for the purpose of carrying out the requested assignment.

The data controller undertakes not to disclose or use such documentation for purposes other than those expressly authorised by the client or required by law.
Similarly, all persons who collaborate professionally in the provision of the services shall be subject to the corresponding duty of confidentiality.

13. Retention of personal data
Personal data will be retained only for as long as is necessary to fulfil the purpose for which it was collected and, subsequently, for the periods established by law to address any potential legal liabilities.

As a guide:
  • Data relating to enquiries made via the website will be retained for a maximum of twelve months, unless the data subject requests its erasure beforehand.
  • Data arising from quotations that have not been accepted may be retained for a maximum of one year to deal with any subsequent enquiries.
  • Data arising from the provision of professional services will be retained for as long as the contractual relationship remains in force and, once it has ended, for the periods required by the applicable tax, commercial, civil and administrative regulations.
  • Documentation relating to tax obligations will be retained for the periods specified in tax legislation.
  • Documentation necessary for defence against potential claims may be retained in a restricted form for as long as legal action may be taken.
Once the statutory retention periods have expired, the data will be deleted or, where appropriate, securely anonymised.

14. Principle of data minimisation and accuracy
The data controller will only request personal data that is appropriate, relevant and limited to what is necessary for each service.

Customers undertake to provide truthful, accurate and up-to-date information, and to notify the Data Controller of any changes that may affect the proper provision of services.

Where data relating to third parties is provided, the customer declares that they have the necessary authorisation to do so and undertakes to inform those third parties in advance of the content of this Privacy Policy where required under current legislation.

CHAPTER 4. RIGHTS OF DATA SUBJECTS, SECURITY, MINORS AND FINAL PROVISIONS

15. Rights of data subjects
Any person whose personal data is processed by Daria Kalmykova Veselieva may, at any time and free of charge, exercise the rights recognised by current data protection legislation.

In particular, they may exercise the following rights:

Right of access
To obtain confirmation as to whether or not their personal data is being processed and, where applicable, to access information relating to the processing carried out.

Right to rectification
To request the correction of any personal data that is inaccurate, incomplete or out of date.

Right to erasure
To request the erasure of your personal data where any of the circumstances set out in the applicable legislation apply, including, amongst others, where the data is no longer necessary for the purpose for which it was collected or where you withdraw the consent on which its processing was based, provided there is no other legal basis for its retention.

Right to object
To object to the processing of your personal data where the circumstances set out in the General Data Protection Regulation apply.

Right to restriction of processing
To request that the processing of your data be restricted in the cases provided for by law, with the data being retained solely for the purpose of exercising or defending legal claims or for compliance with legal obligations.

Right to data portability
To receive the personal data you have provided in a structured, commonly used and machine-readable format, and to request, where technically feasible, its direct transmission to another data controller.

Right to withdraw consent
Where processing is based on the data subject’s consent, the data subject may withdraw that consent at any time, without this affecting the lawfulness of any processing carried out prior to that withdrawal.

Right not to be subject to automated decision-making
Data subjects have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning them or similarly significantly affect them.

At present, Daria Kalmykova Veselieva does not make decisions based solely on automated processing, nor does she carry out profiling intended to produce legal effects on data subjects.

16. How to exercise your rights

Rights may be exercised by submitting a written request to:

Data controller
Daria Kalmykova Veselieva
Email: contact@dariakalmykova.com
The request must state:
  • First name and surname.
  • Identity document.
  • The right you wish to exercise.
  • Contact address for receiving the reply.
  • Where applicable, supporting documentation for the request.
Where there are reasonable doubts as to the applicant’s identity, additional documentation may be requested for the sole purpose of verifying that identity.
Requests will be dealt with within the timeframes set out in current legislation.

17. Right to lodge a complaint
If the data subject considers that the processing of their personal data does not comply with the applicable regulations, they may lodge a complaint with the competent supervisory authority.
In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD), without prejudice to any other administrative or judicial remedies to which they may be entitled.

18. Security measures
Daria Kalmykova Veselieva implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the nature of the data processed, the scope of the processing and the risks to the rights and freedoms of individuals.

Among other measures, procedures are in place designed to:

  • preserve the confidentiality of the information;
  • prevent unauthorised access;
  • protect the integrity of documents;
  • ensure the availability of information when required;
  • restrict access to data to authorised persons only;
  • make backup copies where appropriate;
  • manage incidents relating to information security appropriately.
However, the user must be aware that no IT security measure can guarantee absolute protection against all existing risks.

19. Duty of confidentiality
All persons involved in the provision of services, whether as collaborators, suppliers or external professionals, shall be subject to the corresponding duty of confidentiality with regard to the information and documentation to which they have access.

This duty shall continue even after the professional relationship has ended.

Documentation provided by clients shall be used exclusively for the purpose for which it was provided and shall not be disclosed to third parties except in the circumstances set out in this Privacy Policy or where there is a legal obligation to do so.

20. Accuracy of the data provided
The user guarantees that the personal data provided is accurate, complete and up to date.

It shall be the user’s responsibility to notify us of any changes affecting the accuracy of the data whilst the services are being provided.

Where the user provides personal data relating to third parties, they declare that they have the necessary authorisation to do so and undertake to inform those individuals in advance of the processing of their data, where required by current legislation.

21. Minors
The services offered via this website are generally intended for persons aged eighteen or over.

Personal data relating to minors will not be deliberately collected without the consent of their legal guardians or carers where such consent is legally required.

Should it come to light that a minor’s personal data has been processed without complying with the requirements set out in the applicable regulations, such data will be deleted as soon as possible.

22. Links to third-party websites
The website may contain links to third-party websites for information purposes only or to facilitate the provision of certain services.

Daria Kalmykova Veselieva is not responsible for the privacy policies, content or practices of such websites, and therefore recommends that users review their respective privacy policies before providing personal data.

23. Social media
Daria Kalmykova Veselieva may maintain professional profiles on various social media platforms.

Interactions carried out via these platforms will be subject both to this Privacy Policy and to the terms and policies established by each social media platform.

Users are advised to consult the privacy policies of the relevant platform before providing personal information via these channels.

24. Amendments to the Privacy Policy
This Privacy Policy may be amended where necessary to bring it into line with legislative changes, the guidelines of supervisory authorities, changes to the services provided or improvements to internal data protection procedures.

The current version will always be the one published on the website.

Where amendments substantially affect the rights of data subjects or the processing of their personal data, appropriate measures will be taken to provide notice of this where required by the applicable regulations.

25. Applicable law and jurisdiction
This Privacy Policy shall be governed by and interpreted in accordance with Spanish law and European Union regulations on the protection of personal data.

Without prejudice to the right of consumers and users to bring proceedings before the courts having jurisdiction under current legislation, any dispute arising from the use of the website or the interpretation of this Privacy Policy shall be submitted to the competent courts in accordance with Spanish procedural law.

26. Date of entry into force
This Privacy Policy shall come into force upon its publication on the website and shall remain in force until it is replaced by a subsequent, duly updated version.

Last updated: July 2026.