Privacy Policy

Last updated: March 2026

1. Data controller

Costa Assist

Insulindestraat 63A01

3038 JE Rotterdam, Nederland

KvK: 97346314

Costa Assist is responsible for the processing of personal data as described in this privacy policy. If you have questions, please contact us using the details above.

2. What personal data we process

Costa Assist processes personal data because you use our services and/or because you provide this data to us.

Contact details

First and last name
Email address
Phone number
Address details (Netherlands and/or Spain)

Identification data

Date of birth
Nationality
Passport or ID card number
NIE number (Spanish identification number)
BSN (only if legally required)

Financial data

Bank account number (for invoicing)
Invoice details

Communication data

Content of emails, messages and notes related to the assignment
Data you fill in on our contact or intake form

Website data

IP address (anonymized)
Browser type and device data
Page visits and click behavior (via functional cookies)

3. Legal basis for processing

Costa Assist processes your personal data based on the following legal grounds (Article 6 GDPR):

Performance of the agreement: processing is necessary to execute the assignment.
Legal obligation: processing is necessary to comply with fiscal retention obligations.
Legitimate interest: processing to improve our services and secure our website.
Consent: when you have expressly given consent. You can withdraw this at any time.

4. What we use personal data for

Executing the assignment and initiating procedures with Spanish and Dutch authorities
Maintaining contact about the progress of your file
Invoicing and financial administration
Sending relevant information about our services
Improving our website and services
Complying with legal obligations

5. Sharing with third parties

Costa Assist does not share your personal data with third parties without your explicit consent, unless necessary for the execution of the assignment or legally required.

Spanish government agencies: Policía Nacional, Agencia Tributaria, Seguridad Social, ayuntamiento.
Notaries and legal advisors: for property purchases or legal procedures.
Accountant: for invoicing and fiscal obligations.
IT and hosting providers: for secure storage and processing of data.
Translators: if document translation is necessary.

We conclude a data processing agreement with all processors to ensure the security and confidentiality of your data.

6. Transfer outside the EU

Costa Assist processes personal data within the EEA. If transfer outside the EEA is necessary, we ensure appropriate safeguards (SCCs or adequacy decision).

7. Security of personal data

Costa Assist takes appropriate technical and organizational measures:

SSL/TLS encryption on our website
Secure storage of documents and data
Access restriction (need-to-know basis)
Regular evaluation of security measures

8. Retention periods

File data: duration of assignment + max. 2 years
Invoices and financial data: max. 7 years
Website data (cookies): see Cookie Policy
Contact form data: max. 6 months after handling

After expiry, data is securely deleted or anonymized.

9. Automated decision-making

Costa Assist does not use automated decision-making or profiling.

10. Your rights

Under the GDPR, you have the following rights:

Right of access (Art. 15)
Right to rectification (Art. 16)
Right to erasure (Art. 17)
Right to restriction of processing (Art. 18)
Right to object (Art. 21)
Right to data portability (Art. 20)
Right to withdraw consent

Requests by email to info@costaassist.com. We respond within 30 days.

11. Cookies

Our website uses cookies. See our Cookie Policy for a full overview.

12. Changes

Costa Assist reserves the right to change this privacy policy. In case of significant changes, we inform active clients by email.

13. Complaints

Contact us at info@costaassist.com
File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

See also our Terms and Conditions and our Cookie Policy.