This policy explains how we handle personal data, under article 13 of the GDPR and Spain’s Ley Orgánica 3/2018 (LOPDGDD).
Purposes and legal bases
- Answering enquiries received by chat, email or telephone — basis: your consent and pre-contractual steps taken at your request.
- Providing legal services engaged — basis: performance of the contract and compliance with legal obligations.
- Chat usage statistics — basis: your consent, which you may withdraw at any time.
Special category data
Immigration procedures may require criminal record certificates (GDPR art. 10) and, on international protection or humanitarian routes, health data (GDPR art. 9).
Such data should not be sent through the chat. It is collected only where necessary for the file, after specific notice and on the appropriate legal basis.
Retention
Enquiry data not converted into a file is kept for as long as needed to answer it. Case documentation is retained for the periods required by professional rules and anti-money-laundering legislation.
Your rights
You may exercise the rights of access, rectification, erasure, objection, restriction and portability by writing to the address in the legal notice. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
Data recipients
| Recipient | Role | Safeguard |
|---|---|---|
| Website chat provider | Processor | Processing agreement (GDPR art. 28) |
| Web hosting provider | Processor | Processing agreement (GDPR art. 28) |
| Competent public authorities | Independent controller | Legal obligation of the procedure |
No data is shared with third parties except where legally required.
Updated