Last updated: 26 October 2026
This policy explains how Norgenic SL processes your personal data when you use this website and our services, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
Norgenic SL · CIF B67882019 · Av. Jaume I, 95, 1º, 08226 Terrassa (Barcelona), Spain · Show email
2. What data we process
- Identification and contact data: name, email, phone, Australian postal address.
- Application data: date of birth, passport and visa details, previous names, and — for ABNs — business activity details and your TFN.
- Payment data: processed by our payment provider; we do not store full card details.
- Technical data: IP address and data needed for the website to work securely.
Your Tax File Number is particularly sensitive. We only collect it when it is required for an application you have asked us to prepare, we store it securely and we never use it for any other purpose.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Preparing and submitting your TFN or ABN application and supporting you | Performance of a contract (art. 6.1.b GDPR) |
| Answering enquiries | Consent / pre-contractual measures |
| Invoicing and accounting | Legal obligation (art. 6.1.c GDPR) |
| Website security and fraud prevention | Legitimate interest (art. 6.1.f GDPR) |
| Information about our services (only if you opt in) | Consent, which you can withdraw at any time |
The tax refund calculator runs entirely in your browser: the figures you enter are not sent to us.
4. How long we keep your data
Application data is kept while the service lasts and then for the period needed to handle possible claims, after which it is securely deleted. Invoicing data is kept for the periods required by Spanish law (generally 6 years).
5. Who we share data with
- The Australian Taxation Office and the Australian Business Register, only the information your application requires.
- Service providers acting on our behalf (hosting, email, payments), under data-processing agreements.
- Public authorities when required by law.
We do not sell your personal data.
6. International transfers
Submitting your application involves transferring data to Australia. This transfer is necessary to perform the contract you request (art. 49.1.b GDPR). Other providers outside the EEA are covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
7. Your rights
You can request access, rectification, erasure, restriction, portability or object to processing, and withdraw your consent at any time, by emailing Show email. You can also complain to the Spanish Data Protection Agency (www.aepd.es).