Privacy Policy
This policy covers the website pescada.io and the Pescada portal at app.pescada.io. It explains what personal data we process, why, and what rights you have.
1. Who we are
Pescada is provided by Voixa Consultors S.L., tax ID B24744351, Carrer de Pallars 193, 08005 Barcelona (“Pescada”, “we”). Privacy contact: privacy@pescada.io.
2. Our two roles
- Controller. For visitors to this website and for the people at accounting firms that use Pescada or ask us about it, we decide how their data is used.
- Processor. For the documents and data inside a firm’s workspaces, including the firm’s clients and their staff, the accounting firm (or its client) is the controller. We process that data only on the firm’s instructions, under our Data Processing Agreement. If you are a client of an accounting firm, send requests about your documents to your firm; we will help them answer.
3. Data we process as controller
| Who | Data | Kept for |
|---|---|---|
| Website visitors | IP address, browser, pages requested and time, in our web server’s security logs | Up to 30 days |
| Users at customer firms | Name, work email, firm, role; activity in the portal; billing and contract details | While the contract lasts, then 6 years for accounting and evidence purposes |
| People who contact us | Name, email, company and what you write to us | 12 months, or longer if it leads to a contract |
This website sets no cookies and uses no analytics or advertising tools. Fonts are served from our own server. The portal uses one strictly necessary cookie that keeps you signed in for up to 30 days.
4. Why we use it and on what legal basis
- To provide Pescada to customer firms and their users: performance of a contract (GDPR Art. 6(1)(b)).
- To keep the service secure and to keep the tamper-evident activity log that records who sent, opened and confirmed each document: our legitimate interest and that of our customers (Art. 6(1)(f)).
- To invoice and keep accounting records: legal obligation (Art. 6(1)(c)).
- To answer enquiries and demo requests: steps at your request before a contract, and our legitimate interest (Art. 6(1)(b) and (f)).
We do not make decisions that have legal or similarly significant effects on you by automated means alone.
5. Who receives the data
We use the service providers listed on our Sub-processors page to host the service, store files, send email and read documents. They act on our instructions under data processing agreements. We disclose data to public authorities only where the law requires it.
6. Transfers outside the EU
The service is hosted in Germany and files are stored in the EU. Some providers are based in the United States; those transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses. The details for each provider are on the Sub-processors page.
7. Your rights
You can ask for access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest, by writing to privacy@pescada.io. We answer within one month. Where the law requires us to keep data (for example accounting records), we will tell you. You can also complain to the Spanish Data Protection Agency (AEPD), www.aepd.es.
8. Changes
We publish changes on this page with a new date. If a change materially affects how we use the data of customer users, we tell customers by email before it applies.