Privacy Policy

1. Data Controller

The controller of your personal data is:

For any data protection related queries, you can contact us through the email address indicated above.

2. Personal Data We Collect

We collect the following types of personal data when you use our Services or interact with our platform:

This data may be provided directly by you or collected automatically through technologies such as cookies (see our Cookie Policy for more details).

3. Purposes of Processing

We use your personal data for the following purposes:

• Provide, manage and improve our Services
• Manage your account and provide technical support
• Send communications related to Services, such as updates, notifications or newsletters (if you have given consent)
• Analyze platform usage to optimize functionality and user experience
• Comply with applicable legal and regulatory obligations
• Protect the security and integrity of our platform, as well as the rights of users and TukiDocs

4. Legal Basis for Processing

The processing of your personal data is based on one or more of the following legal bases:

5. User Rights

In accordance with the LCDP and GDPR, you have the following rights regarding your personal data:

To exercise these rights, send a written request to info@tukidocs.com, attaching a copy of your identity document (passport, ID or other equivalent). We will respond within a maximum period of 30 days.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy or as required by applicable legislation:

• Contact data is retained while your account is active or until you withdraw your consent
• Usage data is retained for the time necessary for analysis and improvements (generally up to 13 months)
• Data related to legal obligations is retained according to the periods established by law

Once the retention period ends, your data will be securely deleted or anonymized.

7. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration or destruction:

• Data encryption in transit and at rest
• Restricted access controls to authorized personnel
• Regular security audits

8. International Data Transfers

If your personal data is transferred outside the Principality of Andorra or the European Economic Area (EEA), we ensure adequate safeguards are implemented, such as:

• Standard contractual clauses approved by the European Commission
• Transfers to countries with an adequate level of protection recognized by the EU

9. Data Sharing with Third Parties

We may share your personal data with:

• Service providers: Third parties who assist us in operating the platform (e.g., hosting, data analytics, technical support)
• Authorities: When required by law or to protect our rights, user safety or respond to legal requests

We do not sell or transfer your personal data to third parties for commercial purposes without your explicit consent.

10. Changes to Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices or applicable legislation. Changes will be notified through our platform or by email, and will take effect upon publication of the updated version.