🇪🇸 Spain
Spain Knowledge Base 1.0
VIQENTA provides structured readiness intelligence based on official and authoritative sources. It is designed to identify potential readiness gaps and areas requiring professional review. It does not constitute legal, tax or other regulated professional advice.
Spain employment model
Whether an appropriate model for employees, contractors or transferred personnel has been selected and reviewed.
- Applicability
- Applies when the company plans to hire or deploy people in Spain.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- HR_ES_001
- Potential risk level
- Critical · CG1
- Critical Gate trigger (CG1)
- People will work in Spain and the employment model is not determined or reviewed.
- Expert category
- Spain Employment / HR Compliance (Qualified professional)
Employment contracts & applicable framework
Whether contracts, applicable employment rules and the relevant framework have been identified.
- Applicability
- Applies when employing people in Spain.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- HR_ES_002
- Potential risk level
- High
- Expert category
- Spain Employment / HR Compliance (Qualified professional)
Working time, leave & attendance
Whether working-time, leave and daily working-time recording processes are established for Spain.
- Applicability
- Applies when employing people in Spain.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- HR_ES_003
- Potential risk level
- High
- Expert category
- Spain Employment / HR Compliance (Qualified professional)
Payroll & Social Security
Whether employer registration, employee Social Security registration and payroll set-up have been addressed.
- Applicability
- Applies before employment begins in Spain.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- HR_ES_004
- Potential risk level
- Critical · CG1
- Critical Gate trigger (CG1)
- Employment is planned and registration/payroll set-up is not confirmed.
- Expert category
- Payroll / Labour Specialist (Qualified professional) · Spain Employment / HR Compliance (Qualified professional)
Remote work
Whether regular remote work triggers Spain-specific requirements and whether the framework and documentation are in place.
- Applicability
- Applies where regular remote-working arrangements are planned for Spain.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- Control planned — not yet scored
- Potential risk level
- High
- Expert category
- Spain Employment / HR Compliance (Qualified professional)
Pay transparency & remuneration register
Whether the Spanish operation maintains a remuneration-register process.
- Applicability
- Applies to the Spanish operation. Do not assume it applies only above an employee threshold.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- HR_ES_005
- Potential risk level
- High
- Expert category
- Spain Employment / HR Compliance (Qualified professional)
Equality Plan
Whether the company has reached a threshold or circumstance requiring an Equality Plan in Spain.
- Applicability
- Applies when a threshold or other circumstance requires it — assessed separately from the remuneration register.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- Control planned — not yet scored
- Potential risk level
- High
- Expert category
- Spain Employment / HR Compliance (Qualified professional)
Internal whistleblowing system
Whether an internal information / whistleblowing system requirement is triggered and addressed.
- Applicability
- Employee numbers, business activity or regulated-sector rules may trigger it — not employee count alone.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- Control planned — not yet scored
- Potential risk level
- High
- Expert category
- Spain Employment / HR Compliance (Qualified professional) · Corporate / Commercial Lawyer (Qualified professional)
Spain market-entry structure
VIQENTA does not decide which structure is legally correct; it checks whether the structure has been assessed and professionally reviewed.
- Applicability
- Applies to every company entering Spain (subsidiary, branch, direct cross-border operation or other).
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- LEG_ES_001 · LEG_ES_004
- Potential risk level
- Critical · CG3
- Critical Gate trigger (CG3)
- Regulated market access applies and the structure has not been reviewed.
- Expert category
- Corporate / Commercial Lawyer (Qualified professional)
Permanent-establishment exposure
Identifies indicators requiring professional review. VIQENTA never concludes that a permanent establishment exists.
“Potential permanent-establishment exposure identified. Professional tax review recommended.”
- Applicability
- Indicators: fixed place of business, continuing activity, local personnel, agents with relevant authority, other operating arrangements.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- LEG_ES_005
- Potential risk level
- Critical
- Expert category
- Spain / International Tax Adviser (Qualified professional)
GDPR applicability & governance
Whether basic privacy governance responsibilities have been identified.
- Applicability
- Applies when personal data of employees, customers, suppliers or others in Spain/EU is processed.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- DAT_ES_001 · DAT_ES_002 · DAT_ES_004
- Potential risk level
- High
- Expert category
- GDPR / International Data Transfer Specialist (Qualified professional)
EU / Spain → China personal-data transfers
Whether the applicable international-transfer mechanism and safeguards have been assessed.
“Professional review required before this area should be treated as ready.”
- Applicability
- Applies if Spain/EU personal data is transferred to, stored in, or remotely accessed from China (HQ, teams or vendors).
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- DAT_ES_003
- Potential risk level
- Critical · CG2
- Critical Gate trigger (CG2)
- EU personal data accessible / transferred to China = YES and transfer safeguards assessed = NO or NOT SURE.
- Expert category
- GDPR / International Data Transfer Specialist (Qualified professional)
Privacy notices & data-subject rights
Whether privacy information and processes for handling data-subject rights are established.
- Applicability
- Applies when personal data of individuals in Spain/EU is processed.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- Control planned — not yet scored
- Potential risk level
- High
- Expert category
- GDPR / International Data Transfer Specialist (Qualified professional)
AI use inventory
Whether the company knows where AI is used and maintains an AI use-case inventory.
- Applicability
- Applies where AI is used in recruitment, HR, employee management, customer decisions or operations.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- DAT_ES_005
- Potential risk level
- Medium / High
- Expert category
- AI Governance Specialist (Qualified professional)
AI risk review & human oversight
Future-readiness control: obligations with a later application date are shown as future readiness, never as a current violation.
- Applicability
- Focus on AI in recruitment, candidate screening, employee evaluation, worker management and significant employment decisions.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- DAT_ES_006
- Potential risk level
- Critical · CG5
- Critical Gate trigger (CG5)
- Employment-related AI use exists without appropriate assessment or governance.
- Expert category
- AI Governance Specialist (Qualified professional) · Spain Employment / HR Compliance (Qualified professional)
Website & e-commerce legal information
Whether provider information and required online commercial information are published.
- Applicability
- Applies to online commercial activity directed toward Spain.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- ECM_ES_003
- Potential risk level
- High
- Expert category
- Consumer / E-commerce Specialist (Qualified professional)
Consumer rights & online contracting
Whether pre-contract information, withdrawal/cancellation, returns and consumer communication are in place.
- Applicability
- Applies to B2C distance selling. Withdrawal rules differ by transaction type, exceptions and business model.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- ECM_ES_001 · ECM_ES_002
- Potential risk level
- Critical · CG4
- Critical Gate trigger (CG4)
- Significant B2C activity exists and essential consumer processes are absent.
- Expert category
- Consumer / E-commerce Specialist (Qualified professional)
VAT / OSS / IOSS
Flags where professional review is needed. VIQENTA does not give definitive tax advice.
“VAT / cross-border tax review recommended.”
- Applicability
- Applies to cross-border B2C / e-commerce models (Spanish VAT, EU VAT, OSS, IOSS, import VAT / customs).
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- Control planned — not yet scored
- Potential risk level
- High
- Expert category
- Spain / International Tax Adviser (Qualified professional)
Product safety & market access
Whether EU product, safety, market-access, responsible-economic-operator and sector-specific rules have been identified.
- Applicability
- Applies only to physical products sold into Spain/EU; otherwise not applicable.
- Official authority
- SOURCE VERIFICATION REQUIRED
- Legal / regulatory reference
- SOURCE VERIFICATION REQUIRED
- Last verified
- —
- Related RQ™ control
- ECM_ES_004
- Potential risk level
- Critical · CG3
- Critical Gate trigger (CG3)
- Potentially regulated products enter the market without appropriate review.
- Expert category
- Product / Sector Compliance Specialist (Qualified professional)
Spain accountable owner & HQ–Spain decision rights
Accountable Spain owner, HQ vs Spain decision rights, reporting lines, budget authority, escalation and market-entry governance.
- Applicability
- VIQENTA proprietary readiness control — not a statutory legal requirement.
- Official authority
- VIQENTA
- Legal / regulatory reference
- —
- Last verified
- —
- Related RQ™ control
- GOV_ES_001 · GOV_ES_002 · GOV_ES_003 · GOV_ES_004
- Potential risk level
- Critical · CG6
- Critical Gate trigger (CG6)
- Market launch is approaching and accountability / decision rights remain unclear.
- Expert category
- Organization Design Adviser (VIQENTA adviser) · Cross-Border Governance Adviser (VIQENTA adviser)
Collective agreement coverage
Most Spanish employment relationships sit under a sector or company collective agreement that sets minimum pay, working time and classification terms above statutory law.
Time recording and working hours
Employers are generally expected to record daily working time for employees and retain those records.
Probation and fixed-term use
Probation periods and the permitted use of fixed-term contracts are constrained; indefinite contracts are the default expectation.
Common entity forms
Foreign groups typically operate through a Sociedad Limitada (S.L.) subsidiary or a registered branch, each with different governance and liability consequences.
Administrator duties
Appointed administrators carry personal duties relating to solvency, filings and corporate formalities.
GDPR plus national data protection rules
The GDPR applies alongside Spanish national data protection legislation, which adds specific rules for employment and digital rights contexts.
International transfers outside the EEA
Transfers of personal data to countries without an adequacy decision require a valid transfer mechanism and a documented assessment.
EU AI Act risk tiering
AI systems are categorized by risk. Uses affecting employment decisions attract stricter transparency, documentation and human oversight expectations.
Algorithmic transparency to worker representatives
Worker representatives may be entitled to information about algorithms and AI systems that affect working conditions.
Trader identification online
Online sellers must publish identification and contact details, and marketplaces verify trader information before listing.
Right of withdrawal
Consumers buying at distance generally have a withdrawal period, with defined information duties before purchase.
Legal guarantee on goods
Goods sold to consumers carry a statutory conformity guarantee that cannot be reduced by contract terms.
Language of employment documentation
Employee-facing documents are expected in Spanish, and regional co-official languages matter in several autonomous communities.
Decision-making and feedback expectations
Spanish professional culture generally expects direct dialogue, visible local authority and relationship-based consensus before execution.
Regional variation
Incentives, permitting and administrative practice vary meaningfully between autonomous communities.
Talent market for technology roles
Madrid, Barcelona and Valencia hold the deepest technology talent pools, with differing salary expectations.
VIQENTA provides readiness assessment, risk identification and informational guidance. It does not constitute legal, tax or other regulated professional advice. Companies should obtain qualified professional advice where required.