Legal information
Privacy Policy
Document under review
This text is pending internal validation and legal review, and is not final.
1. Data controller
The controller of the data collected through this website is Logic Solutions Consulting, S.L., with tax ID (NIF) B57820847 and registered office at Avenida Arquitecte Gaspar Bennazar 7, 9º A, 07004 Palma de Mallorca, Illes Balears, España (hereinafter, “Logic Nearshore”).
You can contact us at: service@logicsolutions.es.
2. Data we process and purpose
Depending on the stage of the process you are in, we may process contact and company details provided when starting the contracting process (company name, country, registered tax address, tax ID and legal representative); the requested team configuration (roles, technologies and duration); and the client portal login credentials (email and password, always protected with a cryptographic hash, never stored in plain text).
This data is used to manage your request, process the IT staff augmentation contract, manage your access to the client portal and process payment for the contracted service.
If you are a professional introduced by Logic Nearshore as a candidate, we process your name, country, contact phone and email, the URL of your professional profile if you provide it, a short description of your profile, your profile photo and your CV, in order to introduce you to client companies that have contracted a position and to record their decision to hire or decline you.
The data requested in the registration and contracting forms is necessary to create the account and conclude the contract and, in the case of tax data, to comply with invoicing obligations: if it is not provided, the service cannot be provided.
3. Legal basis
The legal basis for processing your data is the performance of a contract or the application of pre-contractual measures requested by you (article 6.1.b GDPR), such as preparing a quote or processing an IT staff augmentation contract.
Compliance with legal obligations (article 6.1.c GDPR): issuing and keeping invoices and applying VAT, in accordance with Spanish Law 37/1992 on Value Added Tax, the Invoicing Regulation (Royal Decree 1619/2012), Law 58/2003 on General Taxation and the Spanish Commercial Code, including checking the VAT number of clients in other EU Member States in the European Commission’s VIES system, which is necessary to apply the VAT exemption for intra-community transactions.
Candidate data is processed to manage their application and introduce them to client companies, as a pre-contractual measure requested by the candidate (article 6.1.b GDPR).
Legitimate interest (article 6.1.f GDPR) in ensuring the security of the platform and preventing fraud and abuse, through human verification with Cloudflare Turnstile at registration, login, password recovery and contract creation, request limits per IP address and the keeping of technical logs. You may object to this processing as set out in section 8.
4. Recipients and data processors
To provide the service, certain data may be accessed by technology providers that support the platform, solely to the extent necessary for the corresponding purpose.
| Provider | Function | Data | Location |
|---|---|---|---|
| Stripe Payments Europe, Ltd. | Initial payment and collection of monthly instalments | Email, company name, amounts and contract identifier; payment method details, entered directly in Stripe | Ireland, with processing in the United States (see section 5) |
| DocuSeal, LLC | Electronic signature of the contract | Email, company, representative and title, contract content and signature evidence | European Union (Ireland) |
| Amazon Web Services (AWS) | Private storage of signed contracts and of candidates’ photos and CVs | Signed contract; candidates’ photo and CV | European Union (Ireland) |
| Cloudflare, Inc. (Turnstile) | Human verification on forms | IP address, user agent and technical browser signals | Cloudflare global network (see section 5) |
| Microsoft (Microsoft 365) | Sending email verification and password recovery emails | Email address and message content | European Union (see section 5) |
| Amazon Web Services (AWS) | Hosting of the platform and its database | Account, company and contract data | United Kingdom (London), with an adequacy decision (see section 5) |
The VAT number of clients in other EU Member States is sent to the European Commission through the VIES system for validation.
Candidate data (name, country, phone, email, professional profile, description, photo and CV) is disclosed to the client company the candidate is introduced to, only for the contracted position they are proposed for and through its client portal. The client company only sees the candidates awaiting its decision and those it has hired: declined and withdrawn candidates, and those whose hire has been closed, are no longer shown. The photo and CV are displayed in the portal without offering a download.
The client company may only use this data to select the professional and manage the contracted service, in accordance with data protection law.
Other than as described in this section, we do not share personal data with third parties except where legally required.
5. International data transfers
Logic Nearshore is part of Logic Solutions, whose business model connects European companies with IT professionals based in Latin America. As part of providing the service, certain data may be accessed by Logic Solutions personnel or collaborators located outside the European Economic Area (EEA).
Whenever an international transfer of personal data takes place, it will always be carried out under the safeguards required by the GDPR.
The servers hosting the platform and its database are located in the United Kingdom, a country with an adequacy decision from the European Commission (article 45 GDPR), so this data receives a level of protection equivalent to that of the European Union.
Stripe and Cloudflare may process data in the United States. Both entities participate in the EU-U.S. Data Privacy Framework, and their data processing agreements also incorporate the standard contractual clauses approved by the European Commission.
Access to personal data by Logic Solutions personnel or collaborators located in countries that do not have an adequacy decision from the European Commission is covered by the standard contractual clauses approved by the European Commission (article 46.2.c GDPR), signed with those persons or entities.
Microsoft processes Microsoft 365 service data in the European Union, in accordance with its EU Data Boundary commitment and its data processing agreement.
You can request information about these safeguards and obtain a copy of them by writing to: service@logicsolutions.es.
6. Technical data and security
The platform may process technical data necessary for its operation and security, including IP address, user agent, logs and evidence associated with signature processes, to the extent necessary for providing the service, auditing and security.
7. Retention period
We retain your data for as long as there is a contractual relationship with you and, once it ends, for the legally required limitation periods in order to address any liability arising from the processing (commercial, tax and data protection obligations).
| Data | Period |
|---|---|
| Portal account (email and hashed password) | For as long as the account exists |
| Signed contracts | 5 years from signature |
| IP address used to limit requests | Up to 15 minutes |
| Invoicing and tax data, including the VIES validation of the VAT number | 6 years, in accordance with article 30 of the Spanish Commercial Code, and in any case for the limitation period of tax obligations |
| Contract-related data after the account is erased | Blocked for the limitation periods of liabilities arising from the contract (article 32 of Spanish Organic Law 3/2018, LOPDGDD) |
| Technical logs | For as long as necessary to ensure the security of the platform |
Once these periods have elapsed, the data is erased.
8. Rights of data subjects
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time by writing to: service@logicsolutions.es.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing of your data does not comply with the regulations in force.
10. Changes to this policy
This policy may be updated to adapt to regulatory changes or changes in how the website works. We recommend reviewing the published version periodically.
11. Contact
To exercise your rights or resolve any question about the processing of your data, you can write to us at: service@logicsolutions.es.