Privacy policy (GDPR)

1. Overview

This policy explains how the Firm processes personal data collected through this Site, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD). It covers the Site only; data processed in the course of a professional engagement is governed by the engagement terms and by the professional-secrecy obligations of lawyers.

2. Data we process

We only process the personal data you actively provide:

• Booking data: name, email address, time zone and any details you include when booking a consultation through the embedded Cal.com scheduler.
• Lead forms: your email address and the estimate or answer details you actively choose to send us — for example when requesting your calculator estimate by email or asking for one of our guides.
• Correspondence: personal data contained in emails you send to the contact address shown on the Site.
• Technical data: our hosting provider may log IP addresses and basic request metadata for security and operational purposes.

3. What stays in your browser

The eligibility check and the savings calculator run entirely in your browser. The answers and figures you enter are not transmitted to our servers and are not stored by us — unless you subsequently choose to send them to us, for example by booking a consultation, requesting your estimate by email, or writing to us.

4. Purposes and legal bases

We process personal data for the following purposes, on the following legal bases (art. 6 GDPR):

• Managing consultation bookings and responding to enquiries — steps taken at your request prior to entering into a contract (art. 6(1)(b) GDPR).
• Providing the legal services you engage — performance of a contract (art. 6(1)(b) GDPR) and compliance with the professional obligations of lawyers, including professional secrecy.
• Complying with legal obligations — tax, accounting and, where applicable, anti-money-laundering rules (art. 6(1)(c) GDPR).
• Keeping the Site secure — our legitimate interest in preventing abuse (art. 6(1)(f) GDPR).
• Sending you information you have expressly requested — your consent (art. 6(1)(a) GDPR), which you may withdraw at any time.

5. Retention

We keep personal data only for as long as needed for the purpose it was collected for: enquiry and booking data while your enquiry or case is being handled, and thereafter only as required by statute — limitation periods and lawyers’ professional obligations generally require engagement files to be retained for a minimum of [6 — placeholder] years. Data processed on the basis of consent is kept until you withdraw it.

6. Recipients and processors

We do not sell personal data and do not share it with third parties for their own marketing. Data is disclosed only to: (i) service providers acting as processors under art. 28 GDPR — in particular the scheduling provider (Cal.com) and our hosting and email providers [provider names — placeholder]; (ii) public authorities and courts where legally required; and (iii) professionals bound by secrecy who assist with your case.

7. International transfers

Some providers may process data outside the European Economic Area (for example, Cal.com in the United States). Where that happens, transfers rely on a European Commission adequacy decision or on the Standard Contractual Clauses approved by it, together with additional safeguards where needed.

8. Your rights

Under the GDPR and the LOPDGDD you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”) where there is no legal ground to retain it.
• Restrict processing in the cases foreseen by art. 18 GDPR.
• Receive your data in a portable format (art. 20 GDPR).
• Object to processing based on legitimate interest.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

9. How to exercise your rights

Write to the privacy contact address above, attaching proof of identity; we will reply within one month (art. 12 GDPR). If you believe your rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD, www.aepd.es).

10. Cookies

This Site does not set its own advertising or analytics cookies. The embedded Cal.com scheduler and the Google Fonts service may set strictly technical cookies or receive your IP address when they load; both are governed by their own privacy policies. If non-essential cookies are ever added, a consent banner will be displayed first and this policy will be updated.

11. Security

We apply appropriate technical and organisational measures (art. 32 GDPR) to protect personal data, including encrypted transport (HTTPS), access controls and data minimisation — in particular, the Site’s interactive tools are designed to run locally in your browser.

12. Changes to this policy

We may update this policy to reflect legal or operational changes. The date of the current version is shown at the top of this page; material changes will be highlighted on the Site.