PRIVACY POLICY

Information about the processing of personal data that users may provide through the website.

This policy is prepared for a corporate website with a contact form. Complete the controller’s real identity and adapt the policy to the services and providers actually connected to the site.

1. Data controller

Controller	[LEGAL NAME / FULL NAME]
Tax ID	[TAX ID]
Address	[FULL ADDRESS]
Email	info@[DOMAIN]

2. Data we may process

When users contact the practice, we may process information voluntarily provided, such as name, email address, telephone number, company, project information and the content of the enquiry.

3. Purposes

To handle and respond to enquiries and requests for information.
To manage communications relating to requested professional services.
To maintain the security and technical operation of the website.
Where a contractual relationship exists, to manage the corresponding professional and administrative relationship.

4. Legal basis

The legal basis depends on the specific purpose: pre-contractual measures or contract performance where necessary; compliance with legal obligations where applicable; and consent where required by law.

5. Retention

Data will be kept for as long as necessary to handle the request and thereafter for the periods required by applicable legal obligations or while liabilities may arise.

6. Recipients and service providers

Data will not be sold. It may be accessed by providers necessary for the practice or website to operate, such as hosting, email, technical maintenance or professional management providers, under the appropriate safeguards and agreements.

7. International transfers

If providers located outside the European Economic Area are used, the safeguards required by data-protection law will be implemented.

8. Rights

Users may request access, rectification, erasure, objection, restriction of processing and, where applicable, data portability, and may withdraw previously given consent. Requests can be sent to info@[DOMAIN].

Users may also lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that processing breaches applicable law.

9. Security

The controller will apply appropriate technical and organisational measures to protect data against loss, unauthorised access, alteration or improper disclosure.

10. Updates

This policy may be amended when processing activities, providers, website functionality or applicable law change.

Last updated: 8 September 2026.