Privacy Policy
1. Data controller
The controller of personal data is Gilabert y Bofarull Abogados SLP, tax ID B65250946, with address at C/ Muntaner 340, 4º 2ª, 08021 Barcelona, email despacho@gybabogados.es.
2. Purposes and legal basis
We process the data you provide through the contact form or by email to handle your enquiry and, where applicable, manage the professional relationship. The legal basis is taking pre-contractual steps at the data subject’s request and/or our legitimate interest in responding to requests, as well as consent where required.
If a professional engagement is later formalised, processing will also be governed by the rules on professional secrecy and, where applicable, by the services agreement.
3. Retention
Data will be retained for as long as needed to handle the enquiry and thereafter for any legally required periods or while liability may arise. If no professional relationship begins, data will be deleted or anonymised when no longer needed.
4. Recipients
Data will not be disclosed to third parties except where legally required. To provide the service we use providers acting as processors under contract: Vercel Inc. (website hosting), Resend (delivery of contact form enquiries by email) and Microsoft (corporate email).
Some of these providers may process data outside the European Economic Area, in particular in the United States. These transfers are covered by the EU-US Data Privacy Framework or, failing that, by the standard contractual clauses approved by the European Commission.
Google Maps is only loaded if you accept non-essential cookies or click “Load map”; until then no data is sent to Google.
5. Rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, where applicable, by writing to despacho@gybabogados.es and providing a copy of an identity document. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration, without prejudice to the fact that the Internet is not a completely secure medium.