Last updated: October 20, 2026
Who is responsible
Freelance Tax Desk (https://freelancetaxdesk.com) is an English-language educational publishing project operated from Spain by Andrés Molina, trading name Risalix, Benelux 20, 28341 Valdemoro, Madrid, Spain. Contact: ayuda@energiaencasa.es. The website covers U.S. freelance finances; this does not mean its operator is established in the United States. The operator is the controller of personal data described here. See our Legal Notice for identification details.
Information we process and why
When you browse, our hosting infrastructure processes technical information such as your IP address, request time, requested URL, browser information, and error or security events to deliver pages and protect the website. We rely on our legitimate interests in operating a reliable, secure publication (GDPR Article 6(1)(f)). Necessary storage used to remember your privacy choices supports that purpose and our compliance obligations.
When you use our contact form, we receive the name you choose to provide, email address, subject, and message. We use these details to respond, investigate corrections, handle privacy requests, and manage relevant correspondence. The basis is our legitimate interest in responding to communications; Article 6(1)(b) may apply to genuine pre-contractual requests, and Article 6(1)(c) applies where a legal obligation requires processing. Optional tracking, if introduced, requires consent where applicable under Article 6(1)(a) and electronic communications rules.
Providing contact details is voluntary, but a working email address is needed if you want a reply. Do not submit Social Security numbers, tax identification numbers, tax returns, bank details, passwords, or sensitive client records. We do not provide a tax-return upload service or personalized tax advice.
Services currently used
The website uses WordPress with the Astra theme, IONOS hosting and site-management tools, Complianz for consent management, and Contact Form 7 for inquiries. WPVibe is an administrator tool for managing the website, not a public chat service. Authorized administrators and technical providers may access information only as needed to operate, maintain, and secure the publication.
The contact form sends messages by email and is not configured to create a separate submissions database. Copies can remain in the recipient mailbox and service backups. No newsletter signup, public account registration, payment collection, or external CAPTCHA service is configured as part of this website’s current contact workflow.
Analytics and advertising
Google Analytics and Google AdSense are not configured as active services in the website setup reviewed on the update date. We do not treat a plugin installation, a plan to monetize, or a reference to Google as evidence that those services are already operating.
If Google Analytics is introduced, we will identify its use, data categories, purposes, retention settings, and relevant transfers here and update the consent controls before enabling optional measurement. If AdSense is introduced, Google and advertising partners may use cookies or similar identifiers to deliver and measure ads, and, where permitted and consented to, personalize advertising based on visits to this and other websites. We will update this notice and the cookie inventory before that processing begins.
Google explains its processing at How Google uses information from sites or apps that use its services. Advertising preferences are available through My Ad Center. These are external information links, not embedded tracking services. For any future personalized advertising to EEA, UK, or Swiss visitors, the appropriate Google-certified CMP and TCF configuration must be in place; a basic cookie banner alone is not that certification.
Recipients and international processing
Data may be handled by the hosting, email, security, backup, and maintenance providers needed to run the site, and by authorities or professional advisers where lawfully required. We do not publish inquiry messages or authorize their use as advertising audiences. Third-party websites linked in articles have their own policies.
Some service providers or support operations may process data outside the EEA. Where the GDPR applies, transfers must use an applicable adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses, with additional measures where needed. Contact us for information about the providers and safeguards relevant to your request. We do not assume that a provider’s brand or the site’s audience establishes the physical location of all processing.
Retention and security
We retain correspondence for the time needed to resolve the inquiry, manage follow-up, and address relevant legal obligations or claims. We review whether continued storage is necessary after the issue is closed. Security logs and backups follow the hosting service’s operational retention and recovery processes; they are not a permanent archive for marketing. Consent preferences remain for the period stated in the Cookie Policy. You may request deletion, subject to applicable exceptions.
We use HTTPS, controlled administrator access, and website maintenance measures to reduce risk. No internet transmission or storage system is completely secure. If you believe information has been exposed, please contact us without sending additional sensitive records.
Your GDPR and Spanish privacy rights
Where applicable, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. Send requests to ayuda@energiaencasa.es with enough information to locate the relevant data. We may request proportionate verification if needed; do not send an identity document unless a justified, secure verification method is agreed.
We normally respond to GDPR rights requests within one month. A lawful extension of up to two further months may apply to complex or numerous requests, with notice within the first month. You may complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority. These rights are subject to the conditions in the GDPR and Spain’s Organic Law 3/2018.
U.S. state privacy rights and California
U.S. state privacy laws, including the CCPA as amended by the CPRA, apply only when their territorial, activity, and other statutory requirements are met. A U.S. readership alone does not establish that every state privacy law applies. Nothing here limits rights that a law actually grants you.
If applicable to a request, rights may include knowing or accessing collected information, correction, deletion, portability, opting out of sale, sharing for cross-context behavioral advertising or targeted advertising, and limiting specified uses of sensitive information. We do not retaliate against people for exercising applicable privacy rights. We do not use inquiry messages for those advertising purposes.
Send requests or an authorized-agent inquiry using the contact details above. Where applicable, we will respond within statutory deadlines, including the CCPA’s generally applicable 45-day response period for access, deletion, and correction requests, subject to permitted extensions. A qualifying opt-out preference signal such as Global Privacy Control must be honored when required. Optional advertising has not been enabled in this setup; future advertising requires a separate assessment of sale/sharing, GPC, opt-out controls, and notices before launch.
Children, decisions, and updates
The publication is intended for adults managing freelance work and is not directed to children under 13. Please contact us if a child has submitted personal information so that we can address it. We do not use the contact form to make automated decisions about credit, tax eligibility, employment, insurance, or other decisions with legal or similarly significant effects.
We update this policy as services and practices change, using the date above and additional notice where required. See the Cookie Policy, Contact page, and Terms and Conditions for related information.