Privacy policy

1. Data controller

The data controller is the owner of this website, whose identifying and contact details appear in the legal notice and at the foot of this page.

2. Data we process and its source

We process only the data you provide voluntarily through the contact form or by email: name, company, email address, telephone number and the content of your enquiry.

This website uses no cookies, no analytics tools and no resources hosted on third-party servers. We do not carry out profiling or automated decision-making.

3. Purpose and legal basis

Your data is not used to send marketing communications unless you expressly request them.

• Handling your enquiry. Legal basis: your consent (art. 6(1)(a) GDPR) and pre-contractual measures at your request (art. 6(1)(b) GDPR).
• Providing the professional service where the enquiry leads to an engagement. Legal basis: performance of the contract (art. 6(1)(b) GDPR).
• Complying with legal obligations in tax, accounting and anti-money-laundering matters. Legal basis: art. 6(1)(c) GDPR.

4. Special categories of data

Please do not include special categories of data (health, political opinions, trade union membership, criminal convictions or offences) or confidential documents in the contact form. If the matter requires them, we will point you to a secure channel once contact has been established.

5. Retention period

Where an enquiry does not lead to a professional engagement, we keep the data for a maximum of twelve months from the last communication, after which it is deleted.

Where it does lead to an engagement, the data is kept for the duration of the professional relationship and thereafter blocked for the limitation periods applicable to professional liability claims and to tax and anti-money-laundering obligations, which may extend to ten years.

6. Recipients

We do not disclose your data to third parties except where legally required or where necessary to provide the service engaged (court agents, experts, notaries, courts and public authorities).

Our web hosting, email and form management providers access the data as processors under an article 28 GDPR agreement. No international transfers outside the European Economic Area are made without the safeguards in Chapter V of the GDPR.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time — without affecting the lawfulness of prior processing — by writing to the firm’s contact address, enclosing a copy of a document proving your identity.

If you consider that the processing does not comply with the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid).

8. Security

We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, having regard to the particular sensitivity of information covered by professional privilege. Information transmitted through this site is encrypted using HTTPS.