Legal · Last updated 3 May 2026

Privacy Policy

Política de Privacidad

This Privacy Policy describes how KOA Advisory SL processes personal data through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data Controller

Identity: KOA Advisory SL NIF: B21921036 Registered office: Plaza de España 11, 1º, 07002 Palma de Mallorca, Illes Balears, Spain Email: we.are@koa-advisory.com Phone: +49 1511 722604 Sole Director: Mr. Michael Brahmst

Data Protection Officer (DPO): Not appointed, as KOA Advisory SL is not subject to the obligation set out in Article 37 GDPR / Article 34 LOPDGDD. For any data protection inquiry, please contact we.are@koa-advisory.com.

2. Data We Process

Server log files and anonymised visitor statistics, collected by our hosting provider IONOS SE (Deploy Now): referrer, requested page, browser type and version, operating system, device type, time of access, and IP address, which is anonymised immediately upon receipt and used only to approximate geographic location. This dashboard does not set or read cookies. Purpose: technical operation, security, and understanding site usage. Legal basis: legitimate interest, Art. 6(1)(f) GDPR. Retention: per IONOS's standard log retention, currently up to 30 days.

This website has no contact form and collects no data you enter. If you contact us by email, we process your email address and the content of your message solely to answer it. Legal basis: Art. 6(1)(b) and (f) GDPR. Retention: until the inquiry is resolved, plus statutory limitation periods of up to 6 years where commercial documentation obligations apply.

3. Recipients of Data

Personal data is not transferred to third parties except where legally required, or to service providers acting as data processors under a written agreement compliant with Article 28 GDPR, in particular our hosting provider IONOS SE (Deploy Now) and our email provider.

4. International Data Transfers

IONOS SE hosts this website exclusively in its own ISO-certified data centres in Germany and the European Union; no third-country transfer takes place for hosting or visitor statistics.

This website loads no external resources: fonts, styles and scripts are served from our own domain. No data is transmitted to third-country providers by visiting these pages.

5. Your Rights

In accordance with Articles 15–22 GDPR and the LOPDGDD, you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent at any time, without affecting the lawfulness of processing carried out before such withdrawal.

You may exercise these rights free of charge by writing to we.are@koa-advisory.com, providing proof of identity.

You also have the right to lodge a complaint with the Spanish Data Protection Authority: Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es.

6. Data Security

KOA Advisory SL applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk (Art. 32 GDPR). The website uses SSL/TLS encryption (minimum TLS 1.2).

7. Provision of Data and Consequences

Contacting us is entirely voluntary. If you write to us by email, your email address and the content of your message are necessary for us to answer; without them we cannot respond. No other consequence results from choosing not to contact us.

8. Automated Decision-Making and Profiling

KOA Advisory SL does not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you, within the meaning of Article 22 GDPR.

9. Updates

This Privacy Policy may be updated to reflect changes in legislation or in our processing activities. The latest version is always available on this website.

Cookie Policy (Política de Cookies)

This website does not use cookies, browser local storage, analytics scripts, marketing pixels, embedded third-party fonts or any other tracking or storage technology, and does not require a cookie consent banner.

The only usage insight we collect is the anonymised, cookie-free visitor statistics described in Section 2 above, generated by our hosting provider directly from server log files. No identifier is placed on your device and no cross-site tracking takes place.

If this changes in the future, for example by adding an analytics or marketing tool that does use cookies, we will update this policy and request your consent through a cookie banner before activating it.