PRIVACY POLICY

1. USER INFORMATION

{{empresa.titular}}, as the Data Controller, informs users of this website about its policy regarding the processing and protection of personal data of users and clients that may be collected through browsing or contracting services through this website.

The processing of these data will be carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).

2. DATA OF THE DATA CONTROLLER

  • Identity/Corporate Name: {{empresa.titular}}

  • Tax ID (NIF/CIF): {{empresa.nif}}

  • Postal Address: {{empresa.direccion}}

  • Email Address: info@sotoreyeslaw.com

  • Phone Number: +34 627 06 06 40

3. PURPOSE OF DATA PROCESSING

The data provided by the user through contact forms, service requests, or emails will be processed for the following purposes:

  1. Handling requests and inquiries: To manage, process, and respond to questions, quotes, or information requests sent by the user through the website’s forms (such as the legal advice request form).

  2. Provision of services: To manage the contractual or pre-contractual relationship for the legal and advisory services requested by the client.

  3. Legal obligations: To comply with fiscal, accounting, and legal obligations arising from the provision of the services.

4. LEGAL BASIS FOR PROCESSING

The legal basis that legitimizes the processing of your data is:

  • The user’s explicit consent: By checking the acceptance box of the privacy policy before submitting any contact or inquiry form.

  • Performance of a contract or pre-contractual measures: When the processing is necessary for the execution of a legal services assignment or the issuance of a requested quote.

  • Compliance with legal obligations: For tax management and compliance with current regulations applicable to the legal sector.

5. DATA RETENTION PERIOD

Personal data will be kept for the time strictly necessary to fulfill the purposes for which they were collected, as long as the commercial or professional relationship is maintained, or until the user exercises their right to erasure.

Subsequently, the data will be kept blocked for the legal limitation periods established by the applicable tax and civil liability regulations in Spain.

6. RECIPIENTS AND COMMUNICATION OF DATA

The user’s personal data will not be transferred or communicated to third parties, except under legal obligation (Tax Administration, Judges and Courts, etc.) or when strictly necessary for the provision of the requested service (for example, notaries or collaborating agencies if the service requires it).

No international data transfers are carried out outside the European Economic Area.

7. USER RIGHTS

The user has the right to control the personal data they provide at all times. You may exercise the following rights before the Data Controller:

  • Right of access: To know what personal data of yours is being processed.

  • Right to rectification: To request the correction of inaccurate or incomplete data.

  • Right to erasure (“right to be forgotten”): To request the deletion of your data when they are no longer necessary.

  • Right to restriction of processing: To request that the processing of your data be temporarily restricted in certain circumstances.

  • Right to object: To object to the processing of your data for personal reasons.

  • Right to data portability: To receive your data in a structured format and transmit it to another controller.

How to exercise your rights?

To exercise these rights, the user must send a written communication accompanied by a copy of their identity document (DNI/NIE/Passport) to the postal address of the Data Controller or to the email address: info@sotoreyeslaw.com.

Furthermore, if you believe that your rights have been violated, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD) through its electronic office (www.aepd.es).

8. DATA SECURITY

This website implements the necessary technical and organizational security measures to guarantee the confidentiality, integrity, and availability of personal data, preventing its alteration, loss, unauthorized processing, or access, in accordance with the current state of technology. The website has, among other measures, an SSL encryption certificate on all pages.

9. CHANGES TO THE PRIVACY POLICY

The Data Controller reserves the right to modify this policy to adapt it to legislative or jurisprudential developments. It is recommended to review this text periodically.