Privacy Policy
This Privacy Policy describes how KOA Advisory SL processes personal data through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Last updated: 3 May 2026
1. Data Controller
Identity: KOA Advisory SL NIF: B21921036 Registered office: Plaza de España 11, 1º, 07002 Palma de Mallorca, Illes Balears, Spain Email: we.are@koa-advisory.com Phone: +49 1511 722604 Sole Director: Mr. Michael Brahmst Data Protection Officer (DPO): Not appointed, as KOA Advisory SL is not subject to the obligation set out in Article 37 GDPR / Article 34 LOPDGDD. For any data protection inquiry, please contact we.are@koa-advisory.com.
2. Data We Process
Server log files and anonymised visitor statistics, collected by our hosting provider IONOS SE (Deploy Now): referrer, requested page, browser type and version, operating system, device type, time of access, and IP address, which is anonymised immediately upon receipt and used only to approximate geographic location. This dashboard does not set or read cookies. Purpose: technical operation, security, and understanding site usage. Legal basis: legitimate interest, Art. 6(1)(f) GDPR. Retention: per IONOS's standard log retention, currently up to 30 days. Contact form submissions, via this website's contact form (processed by Formspree): name, company, email address and message content, used to respond to your inquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and your consent when submitting the form, Art. 6(1)(a) GDPR. Retention: until the inquiry is resolved, plus statutory limitation periods of up to 6 years where commercial documentation obligations apply.
3. Recipients of Data
Personal data is not transferred to third parties except where legally required, or to service providers acting as data processors under a written agreement compliant with Article 28 GDPR, in particular our hosting provider IONOS SE (Deploy Now), our email provider, and Formspree, Inc., which processes contact form submissions on our behalf.
4. International Data Transfers
IONOS SE hosts this website exclusively in its own ISO-certified data centres in Germany and the European Union; no third-country transfer takes place for hosting or visitor statistics. Formspree, Inc., which processes contact form submissions on our behalf, hosts its infrastructure with Amazon Web Services in the United States. As a data processor, Formspree relies on Standard Contractual Clauses (Art. 46(2)(c) GDPR) as the legal safeguard for this transfer outside the European Economic Area. Formspree has also achieved SOC 2 Type II certification and encrypts data at rest and in transit.
5. Your Rights
In accordance with Articles 15–22 GDPR and the LOPDGDD, you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent at any time, without affecting the lawfulness of processing carried out before such withdrawal. You may exercise these rights free of charge by writing to we.are@koa-advisory.com, providing proof of identity. You also have the right to lodge a complaint with the Spanish Data Protection Authority: Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es.
6. Data Security
KOA Advisory SL applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk (Art. 32 GDPR). The website uses SSL/TLS encryption (minimum TLS 1.2).
7. Provision of Data and Consequences
Providing your data through the contact form is voluntary. However, the name, email address and message fields are necessary to identify you and respond to your inquiry; without them, we cannot process your request. No other consequence results from choosing not to contact us.
8. Automated Decision-Making and Profiling
KOA Advisory SL does not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you, within the meaning of Article 22 GDPR.
9. Updates
This Privacy Policy may be updated to reflect changes in legislation or in our processing activities. The latest version is always available on this website.
Cookie Policy (Política de Cookies)
This website does not use cookies, browser local storage, analytics scripts, marketing pixels or any other tracking or storage technology, and does not require a cookie consent banner. The only usage insight we collect is the anonymised, cookie-free visitor statistics described in Section 2 above, generated by our hosting provider directly from server log files. No identifier is placed on your device and no cross-site tracking takes place. If this changes in the future, for example by adding an analytics or marketing tool that does use cookies, we will update this policy and request your consent through a cookie banner before activating it.