GDPR & Data Protection

We aim to process personal data in line with the GDPR principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.

In practical terms, this means collecting information that is genuinely relevant to an enquiry or matter, limiting access to people who need it, and deleting or reducing data when it is no longer appropriate to keep it.

We do not rely on a single legal basis for all processing. Depending on the context, the correct basis may be consent, pre-contractual steps, performance of a contract, compliance with legal obligations, or legitimate interests pursued in a proportionate way.

You may ask to exercise your rights of access, rectification, erasure, restriction, portability, and objection where those rights apply. We may request reasonable proof of identity before disclosing data.

• Right to be informed about processing.
• Right to access the data we hold about you.
• Right to correct inaccurate or incomplete data.
• Right to object to certain processing or request erasure where legally justified.

We maintain proportionate organisational and technical safeguards designed for an advisory environment that may involve identity, relocation, employment, and supporting documentation.

We also try to minimise the amount of personal data collected through public forms and may move sensitive exchanges to more appropriate channels once a matter progresses.

Cross-border processing may arise where technology providers, messaging tools, or cloud services operate outside Spain or outside the EEA. In those cases, we seek to rely on recognised transfer mechanisms and contractual safeguards required by law.

The website is not designed to make solely automated decisions with legal or similarly significant effects about immigration eligibility or access to our services. Personal data is retained only for as long as justified by purpose, active relationship, compliance duties, or claims defence.

If you have concerns about our handling of personal data, we encourage you to contact us first so that we can investigate and try to resolve the issue responsibly and promptly.

You also have the right to lodge a complaint with a competent supervisory authority. In Spain, that authority is the Agencia Espanola de Proteccion de Datos (AEPD).