International Law FirmWho is responsible for your data
The data controller is [TO COMPLETE: legal name], Tax ID [TO COMPLETE], [TO COMPLETE: address]. For any privacy question, write to [TO COMPLETE: privacy email address].
Please do not send confidential or sensitive information through the form, booking tool or WhatsApp before we have agreed to work together.
What we use your data for, and why we may
- Answering your inquiry through the form, email, phone or WhatsApp: your name, contact details, country and the service you need. Legal basis: your consent and, where you ask about working with us, steps before a contract (GDPR art. 6(1)(a) and (b)).
- Booking your free 10-minute call through Calendly: the details you enter when booking. Legal basis: steps before a contract, at your request (art. 6(1)(b)).
- Providing legal services if you become a client: the data needed for your matter. Legal basis: contract and legal obligations applying to lawyers (art. 6(1)(b) and (c)).
- Understanding how the website is used, with Google Analytics: only if you accept. Legal basis: your consent (art. 6(1)(a)).
- Measuring advertising through Google: only if you tick that option. Legal basis: your consent (art. 6(1)(a)).
We do not make automated decisions about you that have legal effects. We ask only for the data we need to reply; without it, we cannot answer your inquiry.
Who receives your data
We do not sell your data. Service providers process it on our behalf, or under their own terms where stated:
- Calendly LLC: booking calls.
- WhatsApp, part of Meta, if you choose to contact us that way, under its own terms.
- Google: analytics and advertising measurement, only with your consent.
- Email provider: [TO COMPLETE]. SendGrid will also apply if the website form is connected to it.
- Website hosting provider: [TO COMPLETE].
We may also disclose data where the law requires it, for example to courts or public authorities.
Transfers outside the European Economic Area
Some of these providers may process data in the United States or other countries. In those cases we rely on an adequacy decision, such as the EU-US Data Privacy Framework for certified companies, or on the European Commission’s standard contractual clauses. [TO COMPLETE: confirm the safeguard for each provider]
How long we keep your data
- Inquiries that do not lead to an engagement: [TO COMPLETE: period].
- Client files: for the engagement, and then for as long as legal obligations and limitation periods require. [TO COMPLETE: periods]
- Analytics data: [TO COMPLETE: retention set in Google Analytics].
Your rights
You can ask for access to your data, and for its rectification, erasure, restriction or portability, and you can object to its processing. You can withdraw your consent at any time, without affecting earlier processing. Write to [TO COMPLETE: privacy email address].
If you think your rights have not been respected, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
Last updated: [TO COMPLETE: date of approval].