Data protection

Privacy policy

How we process your personal data when you contact the firm, for what purpose, for how long and what rights you can exercise, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 (LOPDGDD).

1. This website does not collect data by itself

This site is purely informative: it has no forms, requires no registration, uses no first-party cookies or analytics tools, and does not profile its visitors.

You can browse every page without providing any personal data. Processing only begins when you decide to contact the firm through one of the channels we offer.

2. What data we process and where it comes from

We process only the data you voluntarily provide when contacting us, together with whatever is necessary for the matter you entrust to us:

Identifying and contact details: name and surname, telephone, email address and, where applicable, postal address.
The content of your enquiry and any documents you choose to send us.
Financial and billing details, if a professional engagement is formalised.
Technical data automatically recorded by the server hosting the website (IP address, date and time of access, pages requested), solely to keep the service running and secure.

Because of the nature of our work, your enquiry may contain special category data (health, sex life, political opinions, trade union membership) or data relating to criminal offences and convictions. We will treat it with the utmost discretion and only to the extent necessary for your defence.

3. Why we process your data and on what legal basis

Purpose	Legal basis
To handle your enquiry and provide a first assessment of the matter.	Pre-contractual steps taken at the data subject's request (art. 6(1)(b) GDPR).
To provide the professional services engaged and manage the client relationship.	Performance of the services contract (art. 6(1)(b) GDPR).
To exercise the right of defence, including processing of sensitive data and criminal offence data.	Establishment, exercise or defence of legal claims (arts. 9(2)(f) and 10 GDPR).
To comply with legal obligations: tax, accounting and anti-money-laundering.	Compliance with a legal obligation (art. 6(1)(c) GDPR).
To keep the website secure and working properly.	Legitimate interest of the controller (art. 6(1)(f) GDPR).

We do not take automated decisions or build profiles from your data. Nor do we use it to send you marketing communications.

4. Specific points about each contact channel

The three channels we offer involve different providers, which you should be aware of before choosing one:

Telephone: the call is routed through your operator. The firm does not record conversations.
Email: the abogadosmarina204@gmail.com account is hosted on the Gmail service provided by Google Ireland Limited, which acts as a processor and handles messages on its servers.
WhatsApp: the service is provided by WhatsApp Ireland Limited (Meta group). Although message content travels end-to-end encrypted, Meta processes communication metadata under its own terms, outside the firm's control.

If your matter is particularly sensitive, we recommend the telephone or a visit to the office, and that you hold back documents until an engagement has been accepted and a secure channel agreed.

5. Who we share your data with

Your data is never shared with third parties for commercial purposes and is never sold. It may only be disclosed to:

Courts, tribunals, notaries and public authorities, where the matter entrusted to us requires it or a legal obligation exists.
Court agents, expert witnesses, translators and other collaborators needed to handle your matter, from whom we require the same confidentiality that binds us.
The opposing party and their representatives, to the extent strictly necessary to defend your interests.
Technology providers acting as processors: the website hosting provider (Cloudflare, Inc.) and the email provider (Google Ireland Limited).
Tax and accounting advisers, and financial institutions, to manage payments and meet tax obligations.

All processors are bound by the contract required under article 28 GDPR.

6. International transfers

The firm does not carry out international data transfers on its own initiative. However, the technology providers we use (the website hosting, Cloudflare, Inc., based in the United States, and the email and messaging services) belong to US groups and may process data outside the European Economic Area.

These transfers rely on the mechanisms set out in Chapter V GDPR: the adequacy decision relating to the EU-US Data Privacy Framework, where the provider is certified under it, or the standard contractual clauses approved by the European Commission.

7. How long we keep your data

If your enquiry does not lead to an engagement, we keep the data for as long as needed to reply and, afterwards, for a reasonable period to evidence that the enquiry was handled.
If an engagement is formalised, we keep the file throughout the professional relationship and, once it ends, for the limitation periods of any claims that may arise from it.
Data with tax and accounting relevance is kept for the periods set by tax and commercial legislation.
Where Act 10/2010 on the prevention of money laundering applies, documentation is kept for ten years.
Server technical logs are kept for a short period, as standard for the hosting provider, and solely for security purposes.

8. Your rights

You may exercise the following rights over your personal data at any time:

Access: find out what data of yours we process and obtain a copy.
Rectification: correct inaccurate or incomplete data.
Erasure: ask us to delete your data when it is no longer necessary.
Objection: object to processing based on our legitimate interest.
Restriction: ask us to suspend processing while a complaint of yours is verified.
Portability: receive your data in a structured, commonly used format.

To exercise them, simply write to abogadosmarina204@gmail.com stating the right you wish to exercise and enclosing a copy of a document proving your identity. The response is free of charge and issued within one month at the latest.

These rights have limits where they conflict with professional secrecy or with the retention of the file required to defend legal claims. In such cases we will explain the reasons to you.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid; www.aepd.es), the competent supervisory authority.

9. Security and professional secrecy

We apply appropriate technical and organisational measures to protect your data against destruction, loss, alteration or unauthorised access, bearing in mind the sensitivity of the information we handle.

Quite apart from data protection law, all the information you entrust to us is covered by lawyer's professional secrecy, which binds us indefinitely and whose breach constitutes a disciplinary and, where applicable, criminal offence.

10. Minors

This website is not aimed at children under fourteen and does not knowingly collect data from people of that age. Where the matter entrusted to us concerns minors, their data will be handled through their legal representatives.

11. Changes to this policy

We may update this policy to reflect legislative developments or changes to the firm's services. The version in force is always the one published on this page, with the last updated date shown at the top.