Eixar - Payroll for hourly teams

Privacy Policy

Last updated: December 11, 2025

1. Data controller

The controller of your personal data is:

  • MONTARES, SLU (hereinafter, "Eixar")
  • NRT: L-720216-L
  • Registered address: 32 Av. François Mitterrand, AD200 Encamp
  • Email: eixar@eixar.com
  • Website: eixar.com

Eixar is the owner of the payroll management software service marketed under the "Eixar" brand.

2. Data Protection Officer

For any question regarding the processing of your personal data, you may contact our Data Protection Officer at dpo@eixar.com.

3. Legal framework

This policy is established in accordance with:

  • Law 29/2021, of October 28, qualified on personal data protection (LQPD).
  • Decree 391/2022, of September 28, approving the Regulation implementing the LQPD.
  • Decree 45/2023, of January 25, amending the Regulation implementing the LQPD.

4. Data we process and purposes

Eixar processes personal data in two distinct contexts:

4.1 As data controller (website visitors and prospects)

When you contact us through the website, request a demo, subscribe to communications or send us information, we process:

  • Identification data: first name, last name, job title.
  • Contact data: email address, phone number, company.
  • Browsing data: IP address, browser type, pages visited (see the Cookie Policy).

Purposes:

  • Respond to your query or request.
  • Organize service demonstrations.
  • Send commercial information about Eixar (only with your consent).
  • Comply with legal and tax obligations.

Legal basis: consent, pre-contractual performance, or legitimate interest, as applicable.

Retention: data is kept for the duration of the relationship or, in the case of prospects, up to 24 months from the last contact, unless a longer retention is legally required.

4.2 As data processor (clients and their employees)

When a client company uses Eixar to manage its payroll, Eixar acts as data processor on behalf of that company, which is the controller of its employees' personal data.

In this context, Eixar processes personal data of our clients' employees exclusively in accordance with the controller's instructions and pursuant to the data processing agreement signed with each client.

Retention: data processed in our capacity as processor is kept for the duration of the contract with the client. Within a maximum of thirty (30) days from the termination of the contractual relationship, Eixar returns or deletes the data according to the controller's instructions, unless a legal obligation requires further retention. Retention of labor records under Andorran regulations is the controller's responsibility.

Clients' employees who wish to exercise their rights should contact their employer (the controller) in the first instance. See section 8 for the subsidiary procedure.

5. Disclosure to third parties

Eixar does not disclose personal data to third parties except:

  • To our technology providers (cloud hosting, infrastructure, communications), which act as sub-processors and are bound by contract and a duty of confidentiality.
  • To competent authorities when required by a legal obligation.

An up-to-date list of sub-processors is available to clients upon request at dpo@eixar.com.

6. International transfers

Some of Eixar's technology providers are established within the European Economic Area. Transfers of data to this area are carried out with the safeguards provided by the LQPD and, where appropriate, through standard contractual clauses approved by the competent authorities.

7. Security measures and breach notification

Eixar applies appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of data, including encryption in transit and at rest, role-based access control, audit logs, and regular backups.

In the event of a security breach affecting personal data, Eixar will notify the controller without undue delay after becoming aware of it, and will cooperate in notifications to the APDA and to data subjects where appropriate.

8. Your rights

Under the LQPD, you may exercise the following rights at any time:

  • Access to your data.
  • Rectification of inaccurate data.
  • Erasure ("right to be forgotten").
  • Restriction of processing.
  • Portability.
  • Objection to processing.

Automated calculations performed by the Eixar platform (contributions, withholdings, and salary items) execute the rules defined by the controller in application of the applicable labor and tax regulations, and do not constitute automated decisions with significant legal effects within the meaning of the LQPD.

Procedure:

  1. If you are a website visitor or prospect, send an email to dpo@eixar.com indicating the right you wish to exercise and attaching a copy of an identification document.
  2. If you are an employee of a client company, contact your employer in the first instance, as they are the controller. If the controller does not respond within a reasonable period, you may contact dpo@eixar.com and Eixar will coordinate with the controller to facilitate the response.

If you consider that the processing of your data does not comply with the regulations, you may file a complaint with the Andorran Data Protection Agency (APDA), c/ Doctor Vilanova 15-19, AD500 Andorra la Vella, www.apda.ad.

9. Modifications

This Privacy Policy may be updated to adapt to legislative or operational changes. The version in force at any time is the one published on this page, with the date of last update indicated.