B.A.S. BLOG

Business Advice Spain > B.A.S. BLOG
No local company needed for REA registration

No local company needed for REA registration

No local company needed for REA registration

We have had various clients asking whether it is necessary to set up a local company to register for REA (Registro de Empresas Acreditadas) in Spain. The answer is: No local company is needed for REA registration. Foreign companies can register for REA without any problem. We do that frequently, see our recommendations. If you would like to set up anyhow we can help you with our soft landing services.

Reasons

Firstly, Setting up in order to get a REA accreditation is not necessary and, secondly it will also bring extra paperwork (i.e. headache) with it. As with the setting up of a local entity you subject yourself to the Spanish rules around health and safety requirements for registering. Which is something you dont have to do if you register your foreign company (you still need to do health and safety paperwork, but not the Spanish kind). Thirdly, your Spanish or foreign company cannot piggyback off of the REA registration of the other. So once you would have set up a Spanish local company, if the employees that you need for the job are employed by your foreign company, it still requires a REA registration.

All in all, setting up a local company just for REA purposes is making things complicated.

Contact BAS

Get in touch with Jochem who can tell you all about the necessary (and unnecessary) REA registration requirements. Quick and efficient processing of your Spanish REA registration for foreign companies.

REA-No local company needed for REA registration in Spain
REA-No local company needed for REA registration in Spain-Registry-of-Accredited-Companies
Soft Landing Services in Spain

Soft Landing Services in Spain

One of our Soft Landing Services in Spain was recommended on Linkedin by one of our clients. It concerns the REA registration service for foreign companies in Spain. This Registry of Accredited Companies (Registro de Empresas Acreditadas), certifies the fulfilment of capacity and quality requirements for risk prevention, health and safety rules on construction sites in Spain. Every Spanish autonomous community has its own labor authority where the company can (or even must) register.

However, for many foreign companies this is still a difficult process. That is where we come in. With our Soft landing Services in Spain, we help these companies with the necessary paperwork and presentations. And where necessary we communicate their posted workers. The latter is a European requirement where a company needs to notify the labor authorities of the hosting country upfront of the arrival of workers from another country.

Business Advice Spain, and Jochem Schoevers in particular, have received various recommendations with respect to its Soft Landing Services in Spain. The one mentioned here came from Twisted Pair in the UK and was posted on linkedin.

If you would like to know more about how we can help your company, you can get in touch today at contact or call Jochem on 0034 610 739 364 and or look him up on Linkedin. You can send us an email at info@businessadvicespain.com.

Soft landing services in Spain (can) also comprise:

  • legal (incorporation, constitution of Spanish companies and subsidiaries, all sorts of contracting);
  • Accounting and tax returns (according to Spanish GAAP);
  • Payrolling for local subsidiaries of foreign companies;
  • Registration of foreign companies and payroll for their employees in Spain;
  • Communication of the posting of foreign workers in Spain;
  • NIEs, CIFs, NIFs for foreigners.

We have helped companies from all over the world with our services in Spain.

 

REA Recommendations for BAS
Happy Clients

 

Recommendation REA Registration Spain

Recommendation REA Registration Spain

We are very grateful to have received a wonderful client recommendation with respect to our help with their REA Registration in Spain. Great to see how clients benefit to the maximum from our Soft Landing Spain Services.  Therefore we decided to dedicate a special page on our website to recommendations we get from our clients. We hope it shows that we can help you with your REA registration in Spain (Registro de Empresas Acreditadas).

REA (Registro de Empresas Acreditadas)

Our REA services entail the help with the registration of foreign companies at the REA, the “Registro de Empresas Acreditadas”. When registered it certifies that a (foreign) company meets the capacity and quality standards for health and safety in the occupational risk prevention. As of 2008, companies that contract or subcontract the performance of any work on a construction site must certify that their (sub)contractor companies are registered in the Registry, thus meeting the requirements. The REA supposes the presentation of certain declarations before the authorities to certify that one meets the requirements.

Recommendation REA Registration Spain
Recommendation REA Registration Spain

 Posting Workers in Spain

The posting of foreign workers in Spain needs to be done before the workers come over to Spain. The communication takes place digitally and requires a digital certificate or signature. The posting company is required to inform the local labor authorities of the posting. In general it is required to communicate the date of the start of the works, the expected end, the job positions, an ID number, and sometimes nationality and or social security number. Some labor authorities request REA registrations.

If you need any help with you REA registration or the posting of workers, please do contact us or call Jochem Schoevers at 0034610739364. We would be delighted to help you. because of our vast experience throughout Spain, we are able to turn around quickly and make the process go smoothly.

REA Registry Spain & Posting Employees

REA Registry Spain & Posting Employees

Happy to announce that only this week we successfully registered in Spain two foreign companies in the REA Registry. In addition we communicated the posting of 50 workers for such companies. Contact Jochem to see what we can do for you!

Posting of Employees

A foreign company must communicate to the local Spanish labor authorities the posting of your employees. That is according to Spanish law 45/1999 that deals with posting of employees in the framework of transnational services. https://www.boe.es/buscar/act.php?id=BOE-A-1999-22895

REA Registry (Registro de Empresas Acreditadas) in Spain

The REA Registry in Spain and posting of employees is mandatory for foreign companies that work on Spanish construction sites. Spanish health and safety legislation created such REA registry (in Spanish Registro de Empresas Acreditadas) in order to achieve higer professionalism and labor stability. It is obligatory for both Spanish and foreign companies that either work as contractor or subcontractor in Spain. https://expinterweb.mites.gob.es/rea/

The company should register with the REA Registry where its local Spanish branch is domiciled. If a foreign company does not have a local Spanish subsidiary, there is no rule that prevents it from choosing the REA Registry it deems opportune.

For more information on REA Registry in Spain and posting of employees look here. If you would like to speak to us now, call us at 0034 610 739 364 or contact us at contact. We can get you results most of the time within a week.

REA Recommendations for BAS
Happy Clients
Posting foreign workers in Spain

Posting foreign workers in Spain

Companies are obliged to notify the posting of foreign workers in Spain. In fact it is mandatory throughout the European Union. Although there are a few exceptions. We help you with the Spanish procedures of such notification of posting of foreign workers in Spain. We explain what the rules are around short term posting and long(er) term postings. Which employment legislation applies, that of the “home member state” of that of the “host member state”, and which social security system.

Background

This EU legislation ensures the protection of posted workers. In relation to the freedom to provide cross-border services the EU helps by laying down mandatory provisions regarding working conditions and the protection of workers’ health and safety that must be respected. It helps ensuring fair labour mobility on the internal market.

This guide can also help you answering your questions.

Our services

We help you collecting and filling out the papers for the notification. We communicate with the Spanish authorities and will keep you up to date on the progress. Once the posting is notified we will send you the receipts for your files. Almost all the time the posting comes with the obligation to register in the Registry of Accredited Companies, the REA (Registro de Empresas Acreditadas) in Spanish. If that is so, we can also help you with that. If you need more information on REA registry in Spain, you can find it here.

Our soft landing services (click here to find out more) are designed to provide you peace of mind woth respect to your Spanish operations. You can contact us for all your Spanish queries.

Contact

If you need assitance or more information on this topic of posting of foreign workers in Spain, please do not hesitate to contact us. Or call Jochem Schoevers directly 0034 610 739 364. We would be happy to help you.

Posting foreign workers in Spain
Posting foreign workers in Spain
REA – Registro de Empresas Acreditadas for foreign companies

REA – Registro de Empresas Acreditadas for foreign companies

REA – Registro de Empresas Acreditadas, a Spanish registry requisite for your company in Spain. 

REA Recommendations BAS
REA Recommendations BAS

Health and Safety

Under Spanish Health and Safety regulations Spanish and foreign Companies operating on construction sites in Spain in concept of contractors or subcontractors must be inscribed in the Registry of Accredited Companies and comply a series of requirements:

1. Have an organization production, facilities, work teams and the staff needed to carry out the assignments received;
2. Have an adequate organization in matter of prevention of occupational risks and have staff with health and safety training at work.

Registration in the REA

Registration in the Registry of Accredited Companies (Registro de Empresas Acreditadas – “REA” in Spanish) – certifies compliance with these requirements.
Companies that contract or subcontract work in construction sites must verify that their companies’ contractors or subcontractors meet the requirements legally required. The way to fulfill this duty of verification is requesting and obtaining a certification from the Spanish labor authority that certifies that the company is registered in the Registry.

Our Services 1) REA registration and 2) Notification of posting of forein workers

We help foreign companies registering in that registry. In addition, we notify posted foreign workers to the Spanish labor authorities as required by Directive 96/71/EC concerning the posting of workers in the framework of the provision of services.

More REA recommendations from BAS Clients
More REA recommendations from BAS Clients

Contact

If you want to know more please contact us or call Jochem Schoevers directly on 0034 610 739 364 or email: jschoevers@businessadvicespain.com

REA-Registro-de-Empresas-Acreditadas-Registry-of-Accredited-Companies
REA-Registro-de-Empresas-Acreditadas-Registry-of-Accredited-Companies
Soft Landing Services for US Companies in Spain

Soft Landing Services for US Companies in Spain

Introduction

As part of our “Soft Landing Services for US Companies in Spain” initiative, it is a pleasure to announce that Business Advice Spain incorporated 3 subsidiaries of US companies in Spain in 2020. All 3 were subsidiaries of American Incs and were incorporated “on a distance” with the use of powers of attorney (POA).

Soft Landing Services for US Companies in Spain

Our soft landing services for US companies in Spain encompass:

  • Legal services: Advisory on what legal form the subsidiary should take on (Rep office, limited liability company). What composition the board of directors should have. Or if it is better to leave it with 1 or 2 directors. In providing such services we also take into account practical issues such as tax numbers, NIF, CIF and NIE numbers, for shareholders, directors and possible employees, etc.
  • Accounting and tax returns: This is a very important aspect for foreign and US companies operating through a subsidiary in Spain. The need for a Spanish accountant who understand the needs of a foreign owner. When starting a business overseas it is crucial that the owners maintain the sense of being in control of finance and operations. We work with many foreign owners or shareholders and understand that need. Although Spain has its own GAAP, we are used to work with foreign accountancy programs (Aqilla, Exact to name a few).
  • Employment and payroll: Help with setting up your subsidiary with the Spanish social security, registering it with the collaborating entities, draft and advice on employment contracts, subsidies, etc. Then we provide payroll services informing you on what the personnel cost is, breaking it down in the different tax and social security concepts. And we send you the information on what amounts your subsidiary is to transfer as salary. We help you with dismissals, collective bargaining agreements and many other aspects of labor law.
  • Tax advisory: Where necessary we can help you with tax advise. In many cases we see the need for intercompany agreements between the foreign US entity and the local subsidiary in Spain. Transfer pricing often comes into play. But also other elements that may have an impact on determining where tax is due, substance requirements. VAT aspects.

Contact and further information

If you would like any further information on Soft Landing Services for US Companies in Spain, do not hesitate to get in touch with us. Or contact Jochem Schoevers directly for an introductory meeting at +34610739364 or jschoevers@businessadvicespain.com.

Soft landing services for US companies in Spain
Soft landing services for US companies in Spain
The management of Limited Liability Companies in Spain

The management of Limited Liability Companies in Spain

Applicable Law

The organic power of representation of a Spanish Limited Liability Company (“Sociedad Limitada or S.L.) is regulated in: RDLeg. 1/2010 de 2 de Jul (TR. de la Ley de Sociedades de Capital), the Spanish law on companies. It concerns the management of Limited Liability Companies in Spain.

Director(s)

The power of representation of a company before third parties and the capacity of making decisions relating to the management of the company resides with the directors. The difference of the management body compared to the shareholders is that the former is a permanent body.

Bylaws

The bylaws should decide on how the company is to be managed and on how the management maybe composed. The bylaws can foresee the following possibilities:

  • A sole director, who will have the power to manage and represent the company;
  • Two or more directors who both, separately, have the power to manage and represent the company;
  • Two or more directors who jointly have the power to manage and represent the company. Jointly may mean at least two together. It does not necessarily mean all of them together;
  • Board of Directors. In this case the Board as a whole has the power to manage and represent the company. However the bylaws will often designate a few Board members to be able to manage and represent the company on their own (either separately or jointly). The Board shall consist of 3 to 12 members. The bylaws will also determine how decisions can be validly adopted, how meetings are to be organized, announced. Its decisions are to be recorded in a ledger and signed by the President and secretary of the board.

In order to be valid, management and decisions should always be taken within the scope of the social purpose of the company.

The bylaws may record the different modes of management as previously mentioned and the shareholder(s) may decide to change the mode of management without having to modify the bylaws.

Not all people or companies can be directors or board members. There are certain criteria that need to be met.

The director´s position is not remunerated unless the bylaws determine differently.

Directors have different duties towards the company they represent. A few of them are:

  • Obligation of loyalty;
  • Obligation of diligence.

Directors are responsible towards the company for the management and actions and omissions that caused damage to the company.

Contact

Would you like to know more about the management of Limited Liability Companies in Spain? Contact us at jschoevers@businessadvicespain (Jochem Schoevers is a Spanish lawyer with Dutch nationality) or dial direct 0034 610 739 364 if you would like to discuss what could be the adequate form of governance for your company.

COVID Furlough ERTE Spain Update

COVID Furlough ERTE Spain Update

COVID Furlough ERTE Spain Update

During this COVID crisis companies in Spain of all sectors and sizes are turning to furlough or ERTE procedures (“Temporary Employment Regulation Files” or furloughs) to face the situation. Almost four million employees got furloughed under these procedures until the first half of April according to data released by the Spanish Government. This post provides an Update on the COVID Furlough ERTE Spain procedures.

Through an ERTE the company suspends the employee’s employment contract or reduces his workday (with the subsequent proportional salary cut) because of force majeure or for economic, technical, organizational or production reasons. The employee is not fired, but the employment contract is temporarily suspended, i.e. furloughed.

How does that affect the employee? How much and when will he earn? Will he be entitled to vacation? Here are some questions and answers for those affected, employers and employees alike.

We adressed furloughs and ERTEs in earlier posts here and here.

Continue reading “COVID Furlough ERTE Spain Update”

Spanish tax benefits for pilots

Spanish tax benefits for pilots

Pilots in the broadest sense

People who are resident in Spain and employment relationship with a company not resident in Spain could enjoy an exemption of up to €60,100. Most commonly referred to as Spanish tax benefits for pilots, as these professionals seem to use this regime the most. The exemption and its conditions were confirmed in the binding consultation issued by the tax authorities. The authorities issued the consultation in respect of a professional motor cyclist (in Spanish also a “piloto” or pilot). Continue reading “Spanish tax benefits for pilots”

ERTE Furlough COVID19 Spain

ERTE Furlough COVID19 Spain

The Temporary Suspension of Employment (or “ERTE” abbreviated in Spanish or furlough in English) procedure has been the tool of choice to suspend employment quickly during the Covid19 crisis in Spain. We published an earlier post explaining the ERTE procedure. In this post we provide an update on the situation the furloughs are provoking. After the first Royal Decree that provided for furloughs or ERTEs in its articles 22 (ERTE because of Forece Majeur) and article 23 (ERTE because of economical, technical, organisational and productional causes), a second Decree was issued. The second Decree contains amongst others complimentary measures to facilitate the processing of ERTEs and unemployment benefits that are due during the furlough.

Update on 2 April 2020

According to the Spanish government 620,000 workers have been suspended by Spanish companies from work since the COVID19 crisis began. Sindicates however estimate that more than 1,8 million workers are affected by furloughs. We wrote more on furlough here and here.

Continue reading “ERTE Furlough COVID19 Spain”

COVID19 Limitations on foreign investment in Spain

COVID19 Limitations on foreign investment in Spain

The Covid19 crisis has provoked various countries, amongst which Spain, to put in place limitations on foreign investments in Spain. In other words the liberalization of the foreign investment regime is suspended until further notice.

Spain

The Spanish government requires to previously authorise the following investments that are: 1) foreign and 2) direct investments in Spain and in 3) strategic sectors.

Under “foreign” is understood coming from residents outside the European Union or European Free Trade Association (EFTA) region.

Under direct investments is understood: 1) acquire more than 10% of the shareholding and or 2) obtain the right to partcipate in management.

Affected Sectors

The strategic sectors are: Continue reading “COVID19 Limitations on foreign investment in Spain”

ERTE – Temporary Suspension of Employment

ERTE – Temporary Suspension of Employment

(This article was updated here and here) Due to the Corona virus crisis, many Spanish companies (think of airlines, hotels, restaurants, leisure sectors) are now proceeding to suspending employment temporarily. The so called ERTE, or Temporary Suspension of Employment procedure allows employers to suspend work or reduce working hours in case of Force Majeur (the Spanish Ministry of Labor has qualified the Covid19 crisis as such). This procedure is not to be confused with the so called ERE, which has a definitive character, i.e. the employment finishes. In the UK a similar procedure is furlough. Continue reading “ERTE – Temporary Suspension of Employment”

BREXIT – Spanish companies British shareholders

BREXIT – Spanish companies British shareholders

Its not only the individuals though. Spanish companies with British shareholders and their directors come to us with their questions about Brexit and vice versa, Spanish companies that do business in the UK.

british-residents-in-spain-confused-and-alarmed-about-post-brexit-future

Do contact us, call us or send a whatsapp at: 0034610739364.

Brexit - Spanish companies British shareholders
brexit flag
Your branch office in Spain

Your branch office in Spain

A branch office in Spain is set up through the granting of a notarial deed and its inscription in the Spanish mercantile registry (for example in Madrid). The European Union has enacted legislation with respect to the setting up of a branch in order to make it easier for companies to expand and to have a presence in another member state. Spain has transposed that legislation in the Reglamento del Registro Mercantil in which one can find the Spanish requisites.

Right of Establishment

The setting up of branches is part of the right of establishment which is one of the key freedoms under the Treaty on the Functioning of the European Union: “restrictions on the freedom of establishment of nationals of a Member State in the territory of another Member State shall be prohibited. Such prohibition shall also apply to restrictions on the setting-up of agencies, branches or subsidiaries by nationals of any Member State established in the territory of any Member State.”

Legislation makes a difference between companies from (European Union) member states and companies that come from third countries that incorporate/ register a branch. The difference is reflected in different requisites for registration. Continue reading “Your branch office in Spain”

Soft Landing and the Beckham law in Spain

Soft Landing and the Beckham law in Spain

A Spanish non resident tax law

This article is about our soft landing services in combination with the application of Beckham´s law in Spain. In 2005 Spain adopted the Beckham law. Its purpose was to offer a mild tax climate to attract talented and highly skilled foreign physical persons in order to further internationalize and increase competitiveness of Spanish companies. The law got its nick name after David Beckham who transferred in 2003 from Manchester United in England to go and play for Real Madrid in Spain. His transfer fee amounted to 37,5 million Euro and his salary was said to be 17 million GBP per year. He was supposedly one of the first to apply for this special tax regime and benefit from it.

Eligibility

To be eligible for its application one needs to comply with the following: Continue reading “Soft Landing and the Beckham law in Spain”

Soft Landing Services in Spain

Soft Landing Services in Spain

Business Advice Spain has specialized in so called “soft landing” services in Spain. It concerns services that help foreign companies and individuals to establish themselves in Spain. Often a company is already doing business in Spain buts has identified the need, or the wish, to establish and grow. How to go about that?

Soft Landing Services

Generally these services consist of accounting/ tax, legal and employment & payroll. A client needs to register its presence in Spain; It will have to declare taxes and carry on accounting. In what corporate form will the company do that? That “form” might need to be legally incorporated before a notary and registered in the Companies Registry. It needs a registered address and a director or board. Then that company need to employ personnel or freelance contractors and pay them through payroll or invoices. Continue reading “Soft Landing Services in Spain”

Brexit Spain Reciprocity Citizens rights

Brexit Spain Reciprocity Citizens rights

Brexit is looming and things are getting serious. In this article: “Brexit Spain Reciprocity Citizens” it is set out that Spain threatens to prejudice the rights of UK citizens resident in Spain, if the UK doesn’t treat Spanish citizens resident in the UK in the same way. The principle of reciprocity: “You will do the same to me as I do to you”.

Decree Law for English residents in Spain

Spain has adopted a Decree Law which is to guarantee the rights of the English citizens in Spain after a “hard” Brexit. It however points out that the UK hasn’t done the same as yet, adopting the measures fro Spanish residents into law. That will have to be the case in order for Spain to apply the Decree Law to its English residents. On October 1st the representatives of the countries will meet again to “dot the Is”.

Numbers

However there are far more British (365K) living in Spain than there are Spanish (108K) living in Britain.

Registered British citizens resident in Spain – Source INE 1 January 2019 – provisional data.

Continue reading “Brexit Spain Reciprocity Citizens rights”

FACEAPP & THE TERRITORIAL SCOPE OF GDPR

FACEAPP & THE TERRITORIAL SCOPE OF GDPR

Faceapp

Faceapp has been all over the news recently. The app has been around for a couple of years, but has gained sudden popularity over the last few weeks. With the popularity came the privacy concerns. The company behind Faceapp is based in Russia, or at least so it seems. It however subjects its terms to Californian law and chooses that state as venue for dispute resolution. How will European Data Protection Autorities (DPA) react to Russia based Faceapp & the territorial scope of GDPR.

Faceapp

Russia

Our question is how the EU regulators or the European Data Protection Board (EDPB) will deal with this (Russian) app? The governing body has elaborated on the territorial scope of GDPR and in our opinion this app would qualify to fall within that scope. It seems that Faceapp has all the intention to provide services to European citizens and that it places cookies on their browsers to monitor behavior.

The result would be that it needs to comply with GDPR and if it doesn’t it may be subject to disciplinary powers (including fines) of data protection agencies (“DPAs”).

Paper Tiger

How will European DPA´s enforce any action that it may take against this app and all other apps (or services providers) that fall within the scope of GDPR but are located in countries where enforcement is difficult? If the DPA´s do not take any action, how will that look when other companies do get fined and enforced over similar offences. The GDPR runs the risk that it will become a paper tiger for these kinds of cases.

Contact

If you are interested to know more about the material and or territorial scope of the GDPR and if your activities would fall within that scope and if so, what you should be complying with. Do contact us for further information and counsel or call +34 610 739 364.

No-deal Brexit and Data Transfers. The EDPB issues a note of guidance.

No-deal Brexit and Data Transfers. The EDPB issues a note of guidance.

The European Data Protection Board (“EDPB”) has issued a note on how to approach overseas personal data transfers with the United Kingdom in case there would be a no-deal Brexit.

No- Deal Brexit

First of all what is understood under a no-deal Brexit? We explained that in our earlier post: what “a hard Brexit” actually meant. In short: if the UK and the European Union do not reach a Withdrawal Agreement before the 29 March 2019. There will be no transition period for the UK to leave the European Union in an orderly fashion. The UK will leave the EU with all current trading and regulatory links ending immediately as it departs.

EDPB on Data Transfers in case of a No- Deal Brexit

The EDPB distinguishes two possible transfers, those from the EEA (European Economic Area) to the UK and transfers from the UK to the EEA. Where it must be noted that if there is no deal, the EDPB does not have any authority over what the UK government decides with respect to the personal data of its citizens.

The start date for possible safeguards to be in place is 30 March at 00.00 AM.

Data Transfers to The United Kingdom

In case of a no deal, the transfer can only be made under (one of) the following safeguards:

– Standard or ad hoc Data Protection Clauses;
– Binding Corporate Rules;
– Codes of Conduct and Certification Mechanisms;
– Derogations (which can only be used of none of the above are in place).

If you haven´t got any safeguards in place yet, the most likely to use are the Standard Contractual Clauses. Those clauses cannot be negotiated and are therefore very quick and easy to apply.

The rest of the options are, although valid, more time consuming and it is doubtful that you will have these in place on time. However you can rely on these safeguards if you already had them in place.

Derogations are described in article 49 GDPR (the General Data Protection Regulation) and can be used if you don´t have other safeguards in place. But the issue with derogations is that they can only be used for punctual, non repetitive, transfers.

Preparation data transfers to the UK in case of a no- deal

The EDPB has identified five steps organisations should follow if the transfer to the UK:

  1. identify what data processing involves a transfer to the UK;
  2. determine the appropriate safeguard (which at this moment in time will probably be the Standard Contractual Clauses);
  3. Implement that safeguard before the 30 of March (13 working days to go);
  4. Update your internal documents and privacy notice to inform your Data Subjects.

Data Transfers from the UK

It is up to the UK government to decide on what measures should be taken when transferring personal data to the EEA. At the moment transfers may be effectuated as previously when the UK was still a member of the Union.

The entire note can be found here: EDPB on Data Transfers in case No-Deal Brexit.

If you would like to discuss what our Data Protection Officers can do for you, please contact us.

Territorial scope of GDPR –  Representative or DPO?

Territorial scope of GDPR – Representative or DPO?

Territorial scope of GDPR. Representative or DPO? We help answering that question for many of our clients. It is an important one because of the considerable fines that maybe imposed if a company gets it wrong.

Article 3 of GDPR sets out the territorial scope of the Regulation:

  • If the processing of personal data takes place in the context of the activities of an establishment or organization in the EU, regardless of whether the processing itself takes place in the EU.
  • If the personal data of individuals who are in the EU is processed by an organization not established in the EU and the processing concerns the offering of goods or services to individuals in the EU, or  monitoring the behavior of individuals that takes place in the EU.

In November 2018, the European Data Protection Board (the “EDPB”) issued guidelines on the territorial scope of General Data Protection Regulation. According to the EDPB, this new scope represents a significant evolution of the EU data protection law compared to the framework defined by the old Directive.

For example, if your company is not caught under the establishment principle of 3.1 GDPR it still mighty fall within the extraterritorial reach of 3.2 GDPR. Therefore your company will have to appoint a representative in the EU.

In practice, the function of representative in the Union can be exercised based on a service contract concluded with an individual or an organisation. It can therefore be assumed by a wide range of
commercial and non-commercial entities, such as law firms and consultancies. Such entities however need to be established in the European Union. A representative can also act on behalf of several non-EU controllers and processors.

It is interesting to note that the representative is different from the data protection officer. The first should have a written mandate to represent the company. The second should be in a position to perform their duties and tasks in an independent manner.

Representative or DPO? We serve as the data protection officer for various of our clients. And we are also the representative for another set of clients. Please contact us if you would like information on the various possibilities we offer.

The new Spanish Data Protection Act 2018

The new Spanish Data Protection Act 2018

In November 2018 Spanish Parliament adopted the new data protection act with a 93% positive vote. It adapts the Spanish legal framework to the General Data Protection Regulation and develops its topics.

The Spanish Data Protection Agency issued a press release on the contents of the new Act. It further regulates issues like the rights of data subjects. For example it demands that the means to exercise such rights are easy to access.

It also regulates in more detail the right to be forgotten, for example, there is no obligation to suppress such data when they had been obtained through a third person who processed them for domestic or personal activities.

If you would like to know more, please contact us.

Almost 60,000 Data Breaches since May 2018

Almost 60,000 Data Breaches since May 2018

Almost 60,000 Data Breaches Reported since GDPR Implementation in May 2018

In the Netherlands 15,400 data breaches have been reported up to 29 January 2019; in  Germany – 12,600; in the UK 10,600; and in Spain 670(!).

To date, 91 reported fines have been imposed under the new GDPR regime. The highest GDPR fine imposed to date is €50 million, by the CNIL to Google, notably not relating to a personal data breaches.

Many organizations have taken notice the new breach notification rules, no doubt in part due to concerns about the high sanctions for not notifying. It has lead to more than 59,000 personal data breaches being notified across Europe in the eight months since GDPR’s introduction. Not notifying data breaches has become a risky strategy under GDPR.

If you want to understand all about data breaches and or need a DPO, contact us, here.

The study was performed by DLA and can be found here.

Brexit – what does “hard Brexit” actually mean?

Brexit – what does “hard Brexit” actually mean?

Background

The UK triggered Article 50 of the Treaty of the European Union on 29 March 2017.

As set out under that treaty, the UK has two years to negotiate a Withdrawal Agreement and framework for a future relationship with the EU before the point of the UK’s exit from the EU at 11pm GMT on 29 March 2019.

The EU and the UK have agreed a draft of this withdrawal agreement, but Theresa May faces big problems getting approval from the House of Commons for it.

Hard Brexit

A no deal scenario is one where the UK leaves the EU and becomes a third country at 11pm GMT on 29 March 2019 without a Withdrawal Agreement and framework for a future relationship in place between the UK and the EU.

In a no deal scenario there would therefore be no agreement to apply any of the elements of the Withdrawal Agreement described above. As such there will be no transition period and the UK will crash out of the EU at 11pm GMT on 29 March 2019, with all current trading and regulatory links with the EU ending immediately as it departs. This could be chaotic and carry a considerable risk for for the UK  and EU member states.

Contact us if you would like to discuss what Brexit scenarios might impact you.

Art. 27 GDPR – Representatives of companies not established in the Union

Art. 27 GDPR – Representatives of companies not established in the Union

Do I need a representative?

For many companies outside of the European Union it is not clear whether they need to appoint a representative for data protection purposes.

You will NOT need to fulfill this requirement when:

  1. processing which is occasional, and does not include, on a large scale, processing of special categories of data as referred to in Article 9(1) or processing of personal data relating to criminal convictions and offences referred to in Article 10 And is unlikely to result in a risk to the rights and freedoms of natural persons, taking into account the nature, context, scope and purposes of the processing; or
  2. you are a public authority or body.

If you concluded that you do need to appoint a representative and you would like that to be an experienced firm in data protection matters, do contact us. We can be your representative in the EU.

Tasks of the representative

The representative shall be established in one of the Member States where the data subjects, whose personal data are processed in relation to the offering of goods or services to them, or whose behavior is monitored, are.

The representative shall be mandated by the foreign company to act as contact point for supervisory authorities and data subjects. And for all issues related to processing for the purposes of ensuring compliance with this Regulation.

The designation of a representative by the company shall be without prejudice to legal actions which could be initiated against the company itself.

Contact us if you would like to discuss whether you need a representative.

The Data Protection Officer (“DPO”). Do you need one?

The Data Protection Officer (“DPO”). Do you need one?

Article 37 of the General Data Protection Regulation entails:

If your company processes special (i.e. health data, religious data, racial data, criminal offences, etc) categories of information on a large scale you must appoint one and communicate the details of that Officer to the authorities. Article 37 of the General Regulation of Data Protection lays down under what conditions exactly you need to appoint a DPO.

You may appoint an external data protection officer. That data protection officer can work on the basis of a free lance contract. If you would like the discuss the possibility of us becoming your DPO, do contact us. We are the DPO´s for healthcare  and insurance companies and as such have experience in the protection of special categories of sensitive data.

Not even an email to ask consent…

Not even an email to ask consent…

GDPR Email Tsunami

The wave of emails we have seen just before and after the coming into force of GDPR was exaggerated and not necessary. Consent for email marketing is already a requirement under European e-privacy law, which allows this type of marketing on an opt-out basis for existing customers.

ePrivacy Directive

Nowadays everybody seems to talk about GDPR, but don´t forget this other directive:

Privacy and Electronic Communications Directive 2002 

In short: If you do not have explicit consent from the recipient, you may not even contact them to to ask for it.

Consent is central to the rules on direct marketing. Organisations will generally need an individual’s consent before they can send marketing texts, emails or faxes. If they cannot demonstrate that they had valid consent, they may be subject to enforcement action.

To be valid, consent must be knowingly and freely given, clear and specific.

Organisations should keep clear records of what an individual has consented to, and when and how this consent was obtained, so that they can demonstrate compliance in the event of a complaint.

Do contact us if you´d like more information.

GDPR – 2 days left

GDPR – 2 days left

Although multiple EU Member States are apparently not ready to enforce the GDPR. There are 2 days left though…

Therefore many watchdogs lack powers because their governments have yet to update their laws to include the Europe-wide rules, a process that could take several months after GDPR takes effect on May 25.

If you have any doubts on whether GDPR could apply to your company and if your watch dog could enforce it, contact us to find out.

The contractual relationship between Processor and Controller

The contractual relationship between Processor and Controller

The General Data Protection Regulation (“GDPR”) establishes in its article 28 the rules around the “Processor”. The Processor processes Personal Data on behalf of the Controller.

The Controller has a duty of diligence when selecting the Processor and has to be able to prove it has been diligent in its choosing. It should, logically, only select a Processor that is able to guarantee compliance with GDPR.

The Processor should not subcontract without the written permission of the Controller. This because it is the Controller who is firstly responsible/ liable for the processing done by the Processor and its subcontractors.

The relationship between Controller and Processor should be governed by a contract which details the following obligations for the processor:

  • processes the personal data only on documented instructions from the controller, including with regard to transfers of personal data to a third country or an international organisation, unless required to do so by Union or Member State law to which the processor is subject; in such a case, the processor shall inform the controller of that legal requirement before processing, unless that law prohibits such information on important grounds of public interest;
  • ensures that persons authorised to process the personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality;
  • takes all security measures required pursuant to Article 32 GDPR;
  • respects the conditions referred to in paragraphs 2 and 4 for engaging another processor;
  • taking into account the nature of the processing, assists the controller by appropriate technical and organisational measures, insofar as this is possible, for the fulfilment of the controller’s obligation to respond to requests for exercising the data subject’s rights;
  • assists the controller in ensuring compliance with the obligations pursuant to Articles 32 to 36 taking into account the nature of processing and the information available to the processor;
  • at the choice of the controller, deletes or returns all the personal data to the controller after the end of the provision of services relating to processing, and deletes existing copies unless Union or Member State law requires storage of the personal data;
  • makes available to the controller all information necessary to demonstrate compliance with the obligations laid down in article 28 of GDPR and allow for and contribute to audits, including inspections, conducted by the controller or another auditor mandated by the controller.

If a subcontractor is engaged by the Processor, the contract between them shall have the same clauses as between Controller and Processor.

The Processor shall be fully liable for its subcontractors.

If the Processor has “official” (quality) certifications or adheres otherwise to an approved code of conduct as mentioned in article 40 GDPR, it will count towards a positive judgment whether the controller has done its due diligence when selecting.

Please bear in mind that this is just a summary of the clause(s) that affect the processor and controller under GDPR. We can help you to determine whether you are a Controller, processor or both and we can help draft and or review legal clauses that govern these relationships.

Contact us.

Data breach – the obligation to inform the authorities

Data breach – the obligation to inform the authorities

If the General Data Protection Regulation (“GDPR”) is applicable to you, as of 25 May 2018 you will be obliged to inform the relevant authorities within 72 hours as of becoming aware of a data breach that you committed or your data processors on your behalf, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons.

These notification must include:

  • description of the nature of the personal data breach including where possible, the categories and approximate number of data subjects concerned and the categories and approximate number of personal data records concerned;
  • communicate the name and contact details of the data protection officer or other contact point where more information can be obtained;
  • describe the likely consequences of the personal data breach;
  • describe the measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.

Where the notification to the supervisory authority is not made within 72 hours, it shall be accompanied by reasons for the delay.

Contact us if you would like us to consult us, perform an audit with respect this new obligation, or see if the GDPR applies to your business. We will be glad to be of help.

GDPR, the legal obligation to inform your customer.

GDPR, the legal obligation to inform your customer.

The General Data Protection Regulation is about to come into force on the 28th of May 2018. We are getting a lot of requests for advice and notice that although companies are willing to comply, a lot of new details are generally not known. For example: you become are aware that you had a data breach. Do you tell the person affected? Or do you have the legal obligation to inform your customer?

Yes, when: 

  1. When the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons*, the controller shall communicate the personal data breach to the data subject without undue delay.

And the notification shall describe in clear and plain language the nature of the personal data breach and contain at least the following information and measures:

  • communicate the name and contact details of the data protection officer or other contact point where more information can be obtained;
  • describe the likely consequences of the personal data breach;
  • describe the measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.

No, when: any of the following conditions are met:

  1. the controller has implemented appropriate technical and organisational protection measures, and those measures were applied to the personal data affected by the personal data breach, in particular those that render the personal data unintelligible to any person who is not authorised to access it, such as encryption;
  2. the controller has taken subsequent measures which ensure that the high risk to the rights and freedoms of data subjects referred to in paragraph 1 is no longer likely to materialise;
  3. it would involve disproportionate effort. In such a case, there shall instead be a public communication or similar measure whereby the data subjects are informed in an equally effective manner.

* These are (high) risks to the rights and freedoms of natural persons: The risk to the rights and freedoms of natural persons, of varying likelihood and severity, may result from personal data processing which could lead to physical, material or non-material damage, in particular: where the processing may give rise to discrimination, identity theft or fraud, financial loss, damage to the reputation, loss of confidentiality of personal data protected by professional secrecy, unauthorised reversal of pseudonymisation, or any other significant economic or social disadvantage; where data subjects might be deprived of their rights and freedoms or prevented from exercising control over their personal data; where personal data are processed which reveal racial or ethnic origin, political opinions, religion or philosophical beliefs, trade union membership, and the processing of genetic data, data concerning health or data concerning sex life or criminal convictions and offences or related security measures; where personal aspects are evaluated, in particular analysing or predicting aspects concerning performance at work, economic situation, health, personal preferences or interests, reliability or behaviour, location or movements, in order to create or use personal profiles; where personal data of vulnerable natural persons, in particular of children, are processed; or where processing involves a large amount of personal data and affects a large number of data subjects.

Are you ready?!

Do contact us if you would like more information on the subject. Business Advice Spain is highly experienced in Data Protection matters. It has helped American companies for the last 15 years establish themselves in Europe.

Establishing a Rep Office in Spain

Establishing a Rep Office in Spain

Activities of a representative office

Many American companies have doubts on whether a Representative office would be a good corporate legal form to start business in Spain. And how to establish it. A representative office is a fixed place of business set up by a foreign company. The Rep Office only pursues marketing or informational activities related to commercial matters but doesn’t  do any actual business in Spain. Of course there are alternatives to the Rep Office and all have their pros and cons.

Requisites for a Rep Office:

  1. Representative offices do not have separate legal personality from their parent;
  2. The nonresident company is liable for all debts assumed by the representative office;
  3. Representative offices are considered permanent establishments for tax purposes.
  4. Representative offices cannot themselves conduct commercial transactions;
  5. In general, no commercial requirements need to be met for a representative office to be opened, although mainly for tax, employment and social security purposes a public deed (or document executed before a foreign notary public, duly legalized with the Hague Apostille or any other applicable form of legalization) may have to be executed, recording the opening of the representative office, the allocation of funds, the identity of the tax representative (an individual or legal entity resident in Spain) and its powers.
  6. Representative offices need not be recorded at the Commercial Registry;
  7. Representative offices have no formal directors or managing bodies; the representative of each office performs the activities of the representative office by virtue of the powers granted to that representative.

It is a simple form, set up quickly without having to comply with too many legal formalities and allows investors to obtain all kinds of information on which they can base their investment decision.

A representative office serves the purpose for conducting market and competition research before investing or for example negotiating the acquisition of a local company.

Do contact us if you would like more information on the subject. Business Advice Spain is highly experienced in overseas Corporate matters. It has helped American companies for the last 15 years establish themselves in Europe.

Heineken sells Beer & Food, including Cruz Blanca, Gambrinus and the Carl´s Jr franchise

Heineken sells Beer & Food, including Cruz Blanca, Gambrinus and the Carl´s Jr franchise

Abac Capital acquires Heineken´s Beer & Food portfolio in Spain. Beer & Food was the brewer´s on trade division that included brands as Gambrinus, Indalo Tapas, La Chelinda and the Official Irish Pub and has approximately 400 outlets throughout Spain. Although the purchase price hasn´t been revealed it is said that the deal was worth more than 50 million Euro. With the spin off Heineken regains its focus on selling beer and Abac is following into the footsteps of other venture capitalists that have acquired food and drinks companies.

Would you like to discuss franchising in Spain, please do contact us.

Spain´s ex president Aznar leaves DLA Piper

Spain´s ex president Aznar leaves DLA Piper

Spain´s ex president Aznar, leaves DLA Piper. Aznar who studied law at Madrid´s Complutense university was a senior advisor for Latin America to the firm´s global committee.

Big question apparently is whether he will follow his good friend Juan Picón, who left DLA Piper earlier to move to Latham Watkins, another (american) firm in Madrid, to become its managing partner.

BAS collaborates with a network of (international) law firms in order to be of service wherever you need it. Please contact us to discuss options.

 

 

‘I’m going via the wing’: your legal rights as a passenger

‘I’m going via the wing’: your legal rights as a passenger

This is not one of them. ‘I’m going via the wing’:

Contact us if you had any troubles with your airline on Spanish soil. We can help you with the legal issues even if you would have left the aircraft this way.

GDPR – Rules for Privacy Policies

GDPR – Rules for Privacy Policies

The GDPR has set a couple of new rules for privacy policies. One of those conditions is a necessary mention that data subjects (the people whose personal data is being processed) can seek support from their local data protection authority when dealing with a data controller or processor who is not being helpful when a data subject asserts his rights with respect to the processing of his personal data.

Contact us if you would like us to review your data protection policy and make it compliant with the GDPR. We have vast experience in data protection matters. When it comes to American companies we have more than 15 years of experience in helping them establishing in Europe.

 

Update on Catalonia: More than 1,400 companies changed corporate seats. Car maker SEAT might follow suit

Update on Catalonia: More than 1,400 companies changed corporate seats. Car maker SEAT might follow suit

In the last couple of weeks more than 1,400 companies have changed their corporate addresses, leaving Catalonia and registered somewhere else (in Spain). The main driver behind these moves is the fear of future (legal and political) instability that the independence crisis might bring and already brought about.

Although economic consequences are not to be immediately expected, the reputational damage for the Catalan independence movement is considerable. Mainly because  during its independence campaign it apparently grossly underestimated the current scenario and now when this exit is in full swing, it does not have an appropriate reaction or explanation to counter it.

If you would like to discuss what the consequences for you or your customers might be in Catalonia, please do contact us for reasoned feedback on your situation.

International transfers breaches fines

International transfers breaches fines

Transfers of personal data to third countries outside the EU are only permitted where the conditions laid down in General Data Protection Regulation are met.

In contrast to the current regime where sanctions for breaching transfer restrictions are limited, failure to comply with GDPR’s transfer requirements attract the highest category of fines of up to 20 million Euros or in the case of undertakings up to 4% of annual worldwide turnover.

If you would like to understand the grounds and mechanisms that allow you to transfer personal data to countries that do not offer adequate protection, please do contact us. When it comes to American companies we have more than 15 years of experience in helping them establishing in Europe.

International contracting is often complicated: let logic prevail

International contracting is often complicated: let logic prevail

International contracting is often complicated by the fact that one of the parties, or sometimes both parties want to incorporate by all means standard conditions that might not at all be relevant.

Almost always parties lose out of sight the balance between the value of the contract, the effort to get something on paper and its effectiveness afterwards. When you make a contract, of course it needs some standard ingredients that will apply to almost all situations, but a lot is also common sense and lawyers are not always necessary. Sometimes they even complicate the matter. At B.A.S. we have been on both sides of the spectrum, that of client and provider. We understand what is important for both of them, but are able to simplify matters in order to progress the matter.

Contact us if you would like us to review your international contracts and you would like to hear our ideas. We have vast experience in commercial contracting matters. Whether it concerns distribution, agency, collaboration, IP agreements, we have helped with all of them. When it comes to American companies, we have more than 15 years of experience in helping them establishing in Europe.

Non EU companies should appoint a DPO in Europe

Non EU companies should appoint a DPO in Europe

The new General Data Protection Regulation (“GDPR”) that will come into force in May 2018 requires companies that the accessibility of the Data Protection Officer (“DPO”) should be effective for Data Subjects and other players. To ensure that the DPO is accessible, the Working Party 29 (the cluster of European data protection authorities) recommends that the DPO be located within the European Union, whether or not the controller or the processor is established in the European Union. However, it cannot be excluded that, in some situations where the controller or the processor has no establishment within the European Union 25, a DPO may be able to carry out his or her activities more effectively if located outside the EU.  You may appoint an external company to be your Data Protection Officer. We can become your DPO and/ or help you find one.

Contact us if you would like us to review your data protection policy and make it compliant with the GDPR. We have vast experience in data protection matters. And when it comes to American companies we have more than 15 years of experience in helping them establishing in Europe.

Germany and The Netherlands, leaders in data protection in Europe

Germany and The Netherlands, leaders in data protection in Europe

The Netherlands leads with reporting requirements on data leaks

Germany and The Netherlands are the leaders in data protection in Europe. It means they are the front-runners in terms of reporting requirements on data leaks, Privacy Impact Assessments (an instrument for determining privacy risks of data processing in advance – PIA), the societal debate and information campaigns. The budgets, staffing levels and powers of the supervisory authority (the Personal Data Authority) to impose fines are in line with European norms. The supervisory authority is a familiar institution among Dutch people. If you would like further information on Data Protection in Spain or throughout Europe, we can help. Leiden University, the oldest in The Netherlands, investigated 8 European countries on these topics.

Contact us if you would like us to review your data protection policies and make them compliant with the GDPR. We have vast experience in data protection matters. When it comes to American companies we have more than 15 years of experience in helping them establishing in Europe.

 

Independence, (legal) insecurity: Oryzon Genomics to leave Catalonia and move corporate HQ to Madrid

Independence, (legal) insecurity: Oryzon Genomics to leave Catalonia and move corporate HQ to Madrid

On the 3rd of October 2017 Oryzon announced it would relocate its management and administrative staff to Madrid (Statement). The reasons given are the optimisation of its operations and relations with investors. Although it does not mention the recent occurrences as a reason for the move, it does come straight after the referendum and the confirmation that Catalonia will, unilaterally, pronounce its independence from Spain. If you would like to discuss if such a move would help your company or if you want us to execute, document such a move, we would be glad to assist.

Update: Oryzon stock leaps 27% on the Spanish stock market because of its move to Madrid.

Catalan independence – the uncertainty is the most worrying for companies

Catalan independence – the uncertainty is the most worrying for companies

Time to move company address? The route Catalonia is about to take will lead to further uncertainty in the coming years. will Spain let this occur, if not what can it do? Will the European Union let Catalonia in whilst Spain has a veto? There are many, many questions unanswered and lots of possible scenarios for the future of Catalonia (and Spain). Uncertainty is bad for business in general. If you want more certainty you could move your registered company address to another city in Spain where you at least have the certainty that you will remain in Spain for the coming years. Let us know if you need some help on this topic.

Reverse charge mechanism for VAT within Europe

Reverse charge mechanism for VAT within Europe

Principle:

If a company in a certain member state renders services to another company in another member state, instead of the receiving company paying VAT on the received services, it has to withhold the VAT and pay it in its own country. The invoice it receives from the company that rendered the services should mention that the invoice is subject to the reverse charge mechanism and therefore no VAT is charged. The receiver has to withhold and pay the VAT in its own country at the rate of the receiver´s country. That is different from what one would normally expect when the company that renders the service issues an invoice with VAT.

We come into play

Contact us if you would like us to review your tax situation. We have vast experience in overseas tax matters for american companies. When it comes to American companies we have more than 15 years of experience in helping them establish in Europe.

The added value of understanding multiple languages with legal services

The added value of understanding multiple languages with legal services

The fact that our lawyers understand various languages has shown once again its value in a transaction where Flemish and Spanish lawyers were seeking for a efficient solution. The mere fact that their correspondence had to be translated every time, brought much delay into the case and took out the momentum. B.A.S. is able to work in both languages and brought the case back on track quickly as bridged the language gap between the parties and facilitated as such an efficient, satisfactory solution. The languages that the firms works in are: English, Spanish, German, Dutch, French and Portuguese. Contact us for further inquiries.

In need of a Spanish or international contract?

In need of a Spanish or international contract?

A wide variety of contracts, including franchising, distribution, agency, lease, sale, employment, executive, free lance, real estate, rental, shareholder and consultancy agreements have been drafted and reviewed by our lawyers over time.

 

B.A.S. adds value in your contractual stages as it quickly grasps your needs, understands perfectly your language and works efficiently to getting you a neat contract that will allow you to get the deal done quickly. Contact us for any kind of issue and lets discuss how we can help. Our lawyers will assist you with a quick, business and no nonsense approach.

Board or joint and several directors?

Board or joint and several directors?

Foreign companies often ask what the best form of governance/ management is for their subsidiary in Spain. A “Board of Directors or joint and several directors of a limited liability company in Spain?” Of course this depends on the trust relationship the mother company (the shareholder) has with the management of the Spanish company. Most efficient would be the joint and several director system, that director will be able to manage most the daily business of the Spanish company without having to recur to other directors (in case there are more directors. In case there is only one, it would be a “sole director” automatically having the same faculties as a joint and several director). The same can however be achieved through a board of directors appointing from their midst a managing director (a “consejero delegado” established in article 249.2 of the Spanish “Ley de Sociedades de Capital” – Law of Capital Companies). Sometimes the impression is created that a board of directors guarantees more control over the operations of the Spanish sub. That is not necessarily true.

We have set up and worked with many Boards of Directors and or joint and several directors, or sole directors. Feel free to contact us to discuss what a suitable governance body would be for your subsidiary company in Spain. It all depends on the circumstances.

You may appoint foreign directors (individuals or companies) without any problem, they will need a Spanish tax number though. A so called Numero de Identificación Fiscal (a “NIF”) and in case of foreigners, a NIE, a Numero de Identificación de Extranjeros. We can help in obtaining that number.

Next time you ask yourself, Board or joint and several directors? Contact us or dial direct 0034 610 739 364 if you would like to discuss what could be the adequate form of governance for your company. Also see this article.

The use of Data Breach and other Data Protection Policies

The use of Data Breach and other Data Protection Policies

Background

It could happen to anyone a leak, a hack or a loss in their personal data storage system which imposes a risk to the rights and freedoms of natural persons. But how to react to a breach? Although probably everybody advocates transparency in data processing, the majority of reactions to such a breach is to try and hide it. the Equifax case shows that once again. The obligation to report and fines will come into force on May 25, 2018 under the General Data Protection Regulation of the European Union. Data breach and other data protection policies can help counter such issues.

The use of policies

Policies and procedures in general help to identify and to react to situations where action is needed. Once you have a policy, you can make your employees aware and train on how to react, and to resolve or escalate the issues. If you need help defining your personal data breach reporting policy, whistle blowing policy or need to understand when to report and to whom, we will be glad to be of assistance. 

Do contact us if you would like more information on the subject. Business Advice Spain is highly experienced in Data Protection matters. It has helped American companies for the last 15 years establish themselves in Europe.

“Independent” Catalonia – moving your company to Madrid or elsewhere.

“Independent” Catalonia – moving your company to Madrid or elsewhere.

Now that the Spanish Constitutional Court has prohibited the referendum of October 1st, 2017, many companies in Catalonia are planning to move elsewhere in Spain in order to prevent getting mixed up in legal limbo. That the Catalonian government is serious on breaking with Spain can easily be deducted from the actual question subject of the referendum: “Do you want Catalonia to become an independent state in the form of a republic?” The change of registered address of a company is nowadays a fairly straightforward process and can be executed through a Board of Directors decision. Contact us if you need advice on how to go about moving your company.

 

New (European) data protection legislation – GDPR

New (European) data protection legislation – GDPR

Do you have any doubts about the Spanish data protection regime and or the GDPR? Do you need your company to be compliant? We can help, we have experience in data protection for health care, insurance and other international industries.

Do contact us if you would like more information on the subject. Business Advice Spain is highly experienced in Data Protection matters. It has helped American companies for the last 15 years establish themselves in Europe.

NIE or CIF number in Spain

NIE or CIF number in Spain

Have you purchased real estate in Spain or are you about to? Are you a shareholder wanting to set up a company in Spain? Do you want to become an independent professional or freelancer? Are you subject to Spanish tax? Then you need a NIE or a CIF number in Spain. In some cases even both.

Tax numbers

We can help you obtaining these are (tax) identification numbers. N.I.E. is for physical persons and C.I.F. for companies. These numbers are often necessary for all kinds of bureauctratic procedures in Spain. The Spanish bureacracy however makes the application procedure unnecessarily difficult. See for example: https://www.theguardian.com/politics/2021/jan/03/britons-living-in-spain-barred-from-madrid-flight-in-post-brexit-travel-row.

We can help you

Let us help you to get a NIE or CIF number in Spain in a reasonable time frame and without local hassle for you. We will deal with the bureacracy, the necessary forms, the issuing authorities. You can stay at home and arrange everything from abroad. There are various options available.

Business Advice Spain

Contact us via email, or call Jochem Schoevers directly on 0034 610 739 364 if you would like more information on the subject. Or if you need a NIE or CIF number in Spain. Business Advice Spain is highly experienced soft landing services in Spain and in corporate and personal tax matters. It has helped international companies and its employees for the last 15 years establish themselves in Spain and in Europe.

Contact

Jochem Schoevers is your contact person when you need a NIE or CIF number in Spain. Jochem is of Ducth nationality and a Spanish lawyer practising in Spain since 2003, most notably for foreign companies and individuals. In 2010 he founded Business Advice Spain specializing in legal services together with accounting, bookkeeping, tax, HR and payroll services. Many international companies recur to our services to make their business in Spain easier.

 

In need of a NIE or CIF number
Spanish lions make the NIE procedure difficult

Apostille service for foreigners in Spain

Apostille service for foreigners in Spain

B.A.S. introduces the Apostille service for foreigners Spain. If you need an apostille on your Spanish document, we will be happy to arrange it for you.

The Apostille

An apostille is placed on a document in order to certify the document´s validity. it therefor removes the need for double-certification, by the originating country and then by the receiving country. For example when a in a country a power of attorney is needed to be granted before a notary public. The apostille can help to certify that power was granted before a notary as required by the receiving country.

Countries

The Apostille Treaty was signed in 1961 and ratified by the following countries:

Examples

Sworn translations can be apostilled or government documents like “good behaviour” statements or extracts from (company or property) registries. The convention itself mentions these:

  • court documents;
  • administrative documents (e.g. civil status documents);
  • notarial acts;
  • official certificates which are placed on documents signed by persons in their private capacity, such as official certificates recording the registration of a document or the fact that it was in existence on a certain date and official and notarial authentications of signatures.

Normally the document should be sent to the issuing authorities (for example for notaries). Those will look who issued the document, check its validity and attach or stamp the apostille on to the document. Generally apostilles are issued immediately or in a couple of days. There might also be quicker procedures for which a (higher) fee is paid.

The mechanism is really very useful and eliminates lengthy procedures of legalization by issuing and receiving countries.

Contact

Do contact us in writing or call 0034 610 739 364 if you would like more information on the subject. Business Advice Spain is highly experienced in international corporate matters. It has helped many foreign companies and their employees for the last 15 years to establish in Europe.