Privacy Policy

1. Identity of the Data Controller

The data controller responsible for the processing of personal information collected through this website is:

2. Personal Data Collected

Personal information may be collected when users complete contact forms, request consultations, communicate with the firm or provide information in connection with the legal services they require.

Depending on the nature of the enquiry or professional relationship, this information may include:

• Full name and contact details.
• Email address and telephone number.
• Information provided in enquiries and messages.
• Information relating to a requested consultation.
• Documents and information necessary for the provision of legal services.

Only personal data relevant and necessary for the corresponding purpose should be requested and processed.

3. Purposes of Processing

Personal data is processed for the following purposes, as applicable to each individual case:

• Responding to requests for information submitted through the website.
• Managing consultation requests and appointments.
• Maintaining communications with prospective and existing clients.
• Assessing enquiries relating to legal services.
• Managing the provision of contracted professional services.
• Fulfilling applicable legal, administrative and regulatory obligations.

Personal data will be processed only for specified, explicit and legitimate purposes, in accordance with applicable data protection legislation.

4. Legal Basis for Processing

The legal basis for processing personal data depends on the nature of the relationship and the purpose of the processing.

• Pre-contractual measures: processing necessary to respond to enquiries or requests made before entering into a professional services agreement.
• Performance of a contract: processing necessary for the provision and management of contracted services.
• Legal obligations: processing necessary to comply with applicable legislation.
• Consent: processing based on the individual's freely given, specific, informed and unambiguous consent, where required.
• Legitimate interests: processing justified by a legitimate interest, where legally applicable and not overridden by the individual's rights and freedoms.

5. Data Retention

Personal data will be retained for the period necessary to fulfil the purpose for which it was collected and, where applicable, for any additional period required by law.

Where information relates to a professional services relationship, the applicable legal obligations and limitation periods will be taken into account.

Once retention is no longer justified, personal data will be deleted or anonymised, as appropriate.

6. Disclosure of Personal Data

Personal data will not be sold to third parties.

Information may be disclosed to public authorities, courts or other competent bodies where required by law or necessary in connection with the provision of legal services.

Where external service providers require access to personal data on behalf of the data controller, such access must be subject to the appropriate contractual, confidentiality and data protection safeguards.

7. International Data Transfers

Where the processing of personal data involves transfers outside the European Economic Area, such transfers must comply with the requirements of the GDPR.

Where necessary, an appropriate transfer mechanism and the corresponding safeguards must be in place to ensure an adequate level of protection.

8. Rights of Data Subjects

Individuals whose personal data is processed may exercise the rights recognised under applicable data protection legislation, subject to the relevant legal requirements.

These rights include:

• Access: obtaining confirmation of whether personal data is being processed and accessing that information.
• Rectification: requesting correction of inaccurate or incomplete information.
• Erasure: requesting deletion of personal data where the legal conditions are met.
• Restriction: requesting limitations on processing in certain circumstances.
• Objection: objecting to processing where legally permitted.
• Data portability: receiving personal data in a structured, commonly used and machine-readable format, where applicable.
• Withdrawal of consent: withdrawing consent at any time where processing is based on consent.

Requests to exercise these rights may be submitted by email to lawoffice@lawoffice.com.es.

The data controller may request the information reasonably necessary to verify the identity of the person making the request.

9. Complaints to the Supervisory Authority

Individuals who consider that the processing of their personal data infringes applicable data protection legislation have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).

Further information is available at www.aepd.es.

10. Data Security and Confidentiality

Personal data must be handled with appropriate confidentiality and protected through technical and organisational security measures proportionate to the nature of the information and the risks associated with its processing.

These measures are intended to prevent unauthorised access, accidental loss, alteration, disclosure or destruction of personal data.

11. Cookies

Information regarding the use of cookies and similar technologies on this website, including their purposes and the options available to users, is provided in the corresponding Cookie Policy.

12. Contact Information

For enquiries concerning the processing of personal data or the exercise of data protection rights, please contact:

COSTA BLANCA CONSULTING INVERSIONES SL.
Calle Fotógrafo Goyo, 8, Piso 6 D
03540 Alicante, Spain
Telephone: 655 620 356
Email: lawoffice@lawoffice.com.es