1. Introduction

AtCIFRAS LEGAL, S.L., we are committed to protecting the privacy and personal data of our clients, prospective clients, partners, suppliers, and website users.

The purpose of this Privacy Policy is to provide clear, transparent, and accessible information about our processing of personal data, in accordance with Regulation (EU) 2016/679 of April 27, 2016, the General Data Protection Regulation (“GDPR”), Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (“LOPDGDD”), Law 34/2002 on Information Society Services and Electronic Commerce (“LSSI-CE”), and other applicable regulations.

We recommend that you read this Policy carefully before providing us with any personal information.

2. Data Controller

Responsible Party:CIFRAS LEGAL, S.L.

Tax ID Number:B10931251

Address:Avenida del Mar No. 61, 03187 Los Montesinos (Alicante), Spain.

Email for privacy-related inquiries:dpd@cifraslegal.com

3. Principles Applicable to Data Processing

CIFRAS LEGAL, S.L. processes personal data in accordance with the principles set forth in Article 5 of the GDPR:

Legality, integrity, and transparency.
Purpose Limitation.
Data minimization.
Accuracy.
Limitation on the retention period.
Integrity and confidentiality.
Proactive responsibility.

4. Personal Data We Process

Depending on our relationship with the user, we may process the following categories of data:

Identifying Information.
Contact Information.
Professional Information.
Economic and revenue data.
Tax Information.
Information contained in the documentation provided by the client.
Information relating to judicial or administrative proceedings.
Information derived from communications with the law firm.

In cases where it is strictly necessary for the proper provision of legal services, special categories of personal data may be processed in accordance with Articles 9 and 10 of the GDPR, and always subject to the duty of professional confidentiality.

5. Purpose of the processing

Personal data may be processed for the following purposes:

Respond to inquiries submitted via forms, email, or phone.
Manage quote requests.
Manage professional relationships with clients.
To provide legal, tax, labor, business, and accounting services.
Manage judicial and administrative cases.
To comply with legal, tax, and accounting obligations.
Manage billing and collection for services.
Manage the hiring process when resumes are submitted.
To send legal information or commercial communications related to our services when consent has been given or there is a prior relationship that permits such communications in accordance with the LSSI-CE.
To improve the quality of our services and the customer service we provide.

6. Legal Basis for Processing

The processing activities carried out by CIFRAS LEGAL, S.L. are based on one or more of the following legal grounds:

Consent given by the data subject.
The performance of a contract or precontractual measures.
Compliance with legal obligations.
The firm’s legitimate interest in the proper management of its professional activities and the protection of its rights.

When processing is based on consent, that consent may be withdrawn at any time.

7. Data Retention

Personal data will be retained for as long as necessary to fulfill the purpose for which it was collected.

Once the professional relationship has ended, the records will remain properly locked for the periods required by tax, commercial, anti-money laundering, and professional liability regulations, as well as any other applicable legal provisions.

They will subsequently be disposed of using safe procedures.

8. Recipients of the data

Personal data will not be disclosed to third parties unless required by law or when it is essential for the proper provision of the service.

The following individuals may access the information when necessary:

Courts and Tribunals.
Government Agencies.
State Tax Administration Agency.
General Treasury of Social Security.
Notaries.
Public Records.
Attorneys General.
Experts.
Financial institutions.
Technology providers acting as data processors.

All vendors with access to personal data shall act in accordance with Article 28 of the GDPR.

9. International Transfers

In general, CIFRAS LEGAL, S.L. strives to ensure that data processing takes place within the European Economic Area.

When it is necessary to use service providers located outside the EU, this will only be done if there are adequate safeguards in place in accordance with the GDPR, such as adequacy decisions by the European Commission or the adoption of Standard Contractual Clauses.

10. Information Security

CIFRAS LEGAL, S.L. implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, protecting data against loss, alteration, unauthorized access, or unlawful processing.

All staff and associates of the firm are bound by a duty of confidentiality regarding the information they handle.

11. Use of Artificial Intelligence

In order to improve the efficiency of certain internal processes, CIFRAS LEGAL, S.L. may use artificial intelligence tools to assist with document analysis, information classification, or document preparation.

These tools will always be used under human supervision, in compliance with the duty of professional confidentiality, and with the necessary measures in place to protect the information being processed.

Under no circumstances will decisions be made solely by automated means that produce legal effects on data subjects without complying with the requirements set forth in Article 22 of the GDPR.

12. Rights of Data Subjects

Data subjects may exercise the following rights at any time:

Access.
Correction.
Deletion.
Opposition.
Restrictions on processing.
Data portability.
Withdrawal of consent, where applicable.
Not to be subject to automated decision-making in the cases provided for by law.

To exercise any of these rights, you must submit a request along with a valid form of identification to:

CIFRAS LEGAL, S.L.

61 Avenida del Mar

03187 Los Montesinos (Alicante)

Email: dpd@cifraslegal.com

Furthermore, if you believe that the processing of your personal data does not comply with current regulations, you may file a complaint with the Spanish Data Protection Agency (AEPD).

13. Confidentiality

All information provided by clients will be treated with the utmost confidentiality and will be protected by the duty of professional secrecy inherent in the practice of law, without prejudice to any applicable legal obligations.

14. Changes to This Policy

CIFRAS LEGAL, S.L. may modify this Privacy Policy when necessary to bring it into compliance with changes in legislation, guidelines from the Spanish Data Protection Agency, court rulings, or changes in the processing of personal data.

The current version will always be the one published on this website.