1. Data Controller
Alex Global (hereinafter "the Company", "we", "us") acts as the Data Controller for personal data collected through this website and in the context of our Employer of Record (EOR), contractor management, global payroll, and compliance services.
Registered address: Wyoming, United States
Contact email: hola@alexglobal.io
2. Personal Data We Collect
In the course of our EOR activities, we may collect and process the following categories of personal data:
2.1 Client and prospect data
- Full name, job title, and company
- Email address and phone number
- Company billing and tax information
2.2 Managed employee data (EOR)
- Identification data: name, ID/passport, date of birth, nationality
- Contact data: address, phone, personal email
- Employment data: position, salary, seniority, contract type, schedule
- Banking information for payroll processing
- Social security and tax data
- Health data when legally required for employment benefits
- Family data when necessary for legal benefits or deductions
2.3 Contractor data
- Identification and contact data
- Tax information and banking details
- Invoicing data and contractual terms
2.4 Browsing data
- IP address, browser type, and device
- Pages visited and time spent
- Cookies and similar technologies (see section 9)
3. Legal Basis for Processing (Art. 6 GDPR)
We process personal data on the following legal bases:
- Performance of a contract (Art. 6.1.b): For the provision of EOR services, payroll management, and employment contract administration.
- Compliance with a legal obligation (Art. 6.1.c): For tax, labor, and social security obligations in each jurisdiction.
- Legitimate interest (Art. 6.1.f): For improving our services, commercial communications to existing clients, and fraud prevention.
- Consent (Art. 6.1.a): For newsletters, marketing communications, and non-essential cookies.
4. Purposes of Processing
- Managing the employment relationship as Employer of Record in operating jurisdictions
- Preparing and processing payroll, including tax withholdings and social contributions
- Managing contracts with independent contractors
- Compliance with legal obligations in Argentina, Chile, Mexico, Ecuador, and Spain
- Social security registrations, terminations, and modifications
- Client communication regarding service delivery
- Sending commercial communications (with prior consent)
- Website and service analysis and improvement
5. International Data Transfers
Due to the multinational nature of our EOR services, personal data may be transferred between our offices in Argentina, Chile, Mexico, Ecuador, and Spain.
For transfers outside the European Economic Area (EEA), we apply the following safeguards pursuant to Chapter V of the GDPR:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where available for the destination country
- Transfer Impact Assessments (TIA) for each jurisdiction
Argentina benefits from an adequacy decision by the European Commission (Decision 2003/490/EC).
6. Retention Periods
- Employment data (EOR): For the duration of the employment relationship and applicable limitation periods in each jurisdiction (generally 3 to 10 years depending on local law).
- Tax and accounting data: As required by tax regulations in each country (generally 4 to 6 years).
- Marketing data: Until consent is withdrawn or 3 years from last contact.
- Browsing data: Maximum 13 months from collection.
7. Data Subject Rights
Under the GDPR and applicable local legislation, you have the right to:
- Access (Art. 15 GDPR): Obtain confirmation of whether we process your data and access it.
- Rectification (Art. 16 GDPR): Request correction of inaccurate data.
- Erasure (Art. 17 GDPR): Request deletion of your data when no longer necessary.
- Restriction (Art. 18 GDPR): Request restriction of processing in certain circumstances.
- Portability (Art. 20 GDPR): Receive your data in a structured format and transfer it to another controller.
- Objection (Art. 21 GDPR): Object to processing based on legitimate interest.
- Withdraw consent: At any time, without affecting the lawfulness of prior processing.
To exercise your rights, contact hola@alexglobal.io. We will respond within a maximum of 30 days.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or the competent supervisory authority in your country.
8. Security Measures
We implement appropriate technical and organizational measures to protect personal data, including:
- Data encryption in transit (TLS 1.3) and at rest (AES-256)
- Role-based access control and multi-factor authentication
- Regular security audits and penetration testing
- Regular staff training on data protection
- Incident response and recovery plans
- Records of processing activities (Art. 30 GDPR)
9. Cookies and Similar Technologies
Our website uses the following categories of cookies:
- Strictly necessary: Essential for site navigation and functionality.
- Analytics: To analyze site usage and improve our services (require consent).
- Marketing: To personalize content and advertising (require consent).
You can manage your cookie preferences at any time through the cookie banner or your browser settings.
10. Data Processors
We share personal data with third-party providers acting as Data Processors, including:
- Payroll and accounting service providers
- Web hosting and cloud infrastructure services
- Communication and CRM platforms
- Legal and tax advisors in each jurisdiction
All processors sign data processing agreements pursuant to Art. 28 of the GDPR.
11. Data Protection Officer
For any data protection inquiries, you can contact our Data Protection Officer (DPO) at: hola@alexglobal.io
12. Changes
We reserve the right to update this Privacy Policy. In case of material changes, we will notify you through appropriate means. We recommend reviewing this page periodically.