Privacy policy
Last updated: 2026
1. Data controller
- Controller: Golden Nuggets, SLU · NRT L-720723-W
- Address: Carrer Major, Casa Bonet, 1, Pal, AD400, La Massana, Andorra
- Contact: hola@appkonta.io · +376 668 737
2. Data we process
- Contact details you provide through the form: name, email address, phone number and message content.
- Account data if you register for the service: identification, tax details for your companies and clients, and issued documents.
- Subscription and payment data required to manage the selected plan and issue the corresponding invoice.
- Technical data consisting of the minimum server data required to provide and protect the service.
3. Purposes and legal bases
- Responding to your enquiry: your consent.
- Providing the invoicing service: performance of the contract.
- Meeting tax, accounting and retention obligations: legal obligation.
- Website security: legitimate interests.
4. How long we retain data
Enquiries are retained for as long as necessary to respond and evidence that response. Account and invoicing data are retained for the duration of the contractual relationship and afterwards for the periods required by applicable tax, accounting and liability rules.
5. Who we share data with
Only with providers needed to deliver the service, such as hosting, database, transactional email and, when enabled, payment processing. These providers act under their contractual and data-protection obligations. We do not sell data or share it for advertising purposes.
6. International transfers
Where a provider processes data outside Andorra, the safeguards required by Andorran law for international data transfers will apply.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by emailing hola@appkonta.io and providing proof of identity. You may also lodge a complaint with the Andorran Data Protection Agency (apda.ad), under Llei 29/2021, del 28 d’octubre, qualificada de protecció de dades personals.
8. Security
We use technical and organisational measures to protect information, including encryption in transit, role-based access control and backups.