Data Protection
Last updated: September 20, 2026
At Expats-Moving we comply with EU Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights (LOPDGDD). This document details how we protect and process your personal data.
1. Data Controller
The data controller of your personal data is: ▸ Owner: JESÚS MANUEL MARTÍN DE LOS SANTOS ▸ CIF: 29802669M ▸ Address: Carrer Pau Claris 97, 4º 1ª, 08009 Barcelona ▸ Email: contacto@expats-moving.com The controller determines the purposes and means of processing your personal data and ensures compliance with current regulations.
2. Data We Process
We process the following personal data through the application and website: ▸ Identification data: name, surname and contact details (email, phone). ▸ Profile data: username, country of interest, language preferences and account settings. ▸ Creative content: blog articles, reviews, forum posts, gallery photos and content generated or uploaded to the platform. ▸ Navigation data: IP address, device type, operating system and anonymous usage statistics. ▸ User-generated content: chat messages, comments and ratings. ▸ Audio data (optional): voice recordings for the chat assistant, only if you use the voice input feature. ▸ Location data (optional): for time zone comparison tools and local recommendations. ▸ Payment data: transaction information securely processed by certified external providers (Stripe).
3. Legal Bases for Processing
Processing of your data is based on: (a) Data subject consent: for commercial communications and non-strictly necessary data. (b) Performance of a contract or pre-contractual measures: for the provision of requested services. (c) Compliance with legal obligations: for tax, accounting and regulatory obligations. (d) Legitimate interests of the platform: to improve services, ensure security and prevent fraud.
4. Purposes of Processing
Data is processed to: ▸ Manage access and use of the platform, forums and interactive tools. ▸ Provide the article, image and publication generation services you have contracted. ▸ Facilitate contact between expatriates and directory businesses. ▸ Process payments and manage transactions associated with your services. ▸ Personalize user experience and send notifications and communications. ▸ Improve services, ensure security and comply with legal obligations.
5. Retention Period
We retain your personal data for as long as necessary to provide the requested service and, subsequently, for the legally required periods (up to 6 years for tax and accounting obligations). Unnecessary data will be securely deleted once these periods expire. After deregistration, data will be anonymized or deleted within a maximum of 30 days, unless there is a legal obligation to retain it.
6. Data Sharing
Your data may be shared with the following platforms and providers: (a) Businesses and service providers in the directory, when you contact them through the platform. (b) Stripe, as a certified payment processing provider. (c) Google, Microsoft, Facebook and Apple, as authentication providers through social login. (d) Base44, OpenAI (GPT models), Google (Gemini) and Anthropic (Claude), as artificial intelligence service providers (see section 7 for more detail). (e) OpenAI (Whisper), for transcribing audio files to text. (f) Google (Veo), for generating videos using artificial intelligence. (g) Cloud infrastructure providers (Expat, AWS/Google Cloud) for hosting and storing data. (h) YouTube (Google), for playing documentaries and videos embedded on the platform. (i) OpenStreetMap and Leaflet, as interactive map providers for comparison and geographic location tools. (j) Google Analytics, for measuring and analyzing website traffic and user behavior. (k) Email service providers for sending notifications and communications to users. (l) Public administrations when there is a legal obligation. All providers offer a level of data protection equal or equivalent to that required by the GDPR, through standard contractual clauses and appropriate technical and organizational security measures. We will not share your data with third parties for commercial purposes without your consent.
7. Use of Artificial Intelligence
Our platform uses artificial intelligence services from the following providers, each with a specific purpose: ▸ Base44 and OpenAI (GPT-5 models): chat assistant (Peeter) that processes the text of your messages to generate help and information responses about living abroad; integrated translator that translates texts between available languages; generation of blog articles and country guides. ▸ Google Gemini: content generation with internet search capability to obtain real-time updated web information. ▸ Anthropic (Claude): natural language processing for complex analysis and editorial content generation tasks. ▸ OpenAI Whisper: transcription of audio files to text (e.g., voice notes or audio-format articles). ▸ Google Veo: generation of illustrative videos using artificial intelligence. ▸ Image generation (DALL-E / Google Imagen): creation of illustrations for articles, guides and editorial content on the platform. The text of your messages and queries is sent to these providers exclusively to generate the response in real time. It is not stored permanently or used to train their models. Before using the chat assistant, the application requests your express consent through a checkbox. We do not share your personal data with AI providers for model training purposes.
8. International Transfers
We minimize international data transfers outside the European Economic Area (EEA) as much as possible. However, certain technology providers may process data in third countries (mainly the United States): Stripe, Inc. (payment processing), OpenAI, LLC (AI content generation), Google (Gemini, Veo, Analytics, YouTube), Anthropic (Claude), and cloud infrastructure services (AWS/Google Cloud, with EU data centres where possible). All such transfers are carried out under Article 46 GDPR, through Standard Contractual Clauses approved by the European Commission or applicable adequacy decisions. Users may request information about the applicable safeguards by writing to contacto@expats-moving.com.
9. Mobile App Permissions
The mobile application may request the following permissions: ▸ Notifications: to inform you about news, replies to your messages and relevant content. ▸ Camera and gallery (optional): to upload photos to the community gallery and your profile. ▸ Location (optional): for time zone comparison tools and local recommendations. ▸ Microphone (optional): to record voice notes and use the voice chat assistant. ▸ Storage (optional): to save your projects and downloaded exports.
10. Data Security
We apply appropriate technical and organizational measures (encryption, access control, backups) to ensure the security of your data and prevent its alteration, loss, destruction or unauthorized access, in accordance with the state of the art.
11. User Rights
Under the GDPR, you can exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw the consent given, by writing to contacto@expats-moving.com or by postal mail to the controller's address (Carrer Pau Claris 97, 4º 1ª, 08009 Barcelona). You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe a right has been violated.
12. Minors
Our services are not directed at children under 14. We do not deliberately collect data from minors without the authorization of parents or legal guardians.
13. Modifications
We may modify this Data Protection document to adapt it to legislative or jurisprudential changes. We recommend reviewing it periodically. We will notify significant changes through the application or by email.
Account Deletion Request
You can request the deletion of your account and all associated data at any time from your user panel. If you cannot access it, send us an email at contacto@expats-moving.com.