WEBSITE PRIVACY POLICY

palsolicitor.com

I. PRIVACY AND DATA PROTECTION POLICY

In compliance with current legislation, PALS SOLICITOR (hereinafter also referred to as the Website) undertakes to adopt the necessary technical and organisational measures, according to the appropriate level of security risk to the data collected.

Laws included in this privacy policy

This privacy policy complies with current Spanish and European regulations on the protection of personal data online. Specifically, it adheres to the following legal standards:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
  • Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
  • Royal Decree 1720/2007, of 21 December, approving the Regulation for the development of Organic Law 15/1999, of 13 December, on the Protection of Personal Data (RDLOPD).
  • Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

The data controller for the personal data collected on PALS SOLICITOR is: PROFESSIONAL AND LEGAL SOLUTIONS SL, with NIF/CIF: B30754147, represented by Antonio Legaz (hereinafter, the Data Controller). Contact details are as follows:

  • Address: AV/ DOCTOR MECA, 107 – C.C. UPPER LOCAL 11
  • Contact phone number: 968 59 58 26
  • Email: antonio@palsolicitor.com

Personal data registry

In compliance with the GDPR and LOPD-GDD, you are informed that the personal data collected via forms on this website will be incorporated into our database and processed for the purpose of facilitating, streamlining, and fulfilling the commitments established between PALS SOLICITOR and the User or maintaining the relationship established via the forms, or for responding to requests or enquiries.

Likewise, unless the exception set out in Article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying, according to purpose, the processing activities carried out and other circumstances as established in the GDPR.

Principles applicable to the processing of personal data

The processing of User data shall be subject to the following principles set out in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018:

  • Lawfulness, fairness, and transparency: User consent will be required at all times, with full prior information on the purposes of data collection.
  • Purpose limitation: Data shall be collected for specific, explicit, and legitimate purposes.
  • Data minimisation: Only the data strictly necessary for the purposes of processing will be collected.
  • Accuracy: Personal data must be accurate and kept up to date.
  • Storage limitation: Data will be kept only for as long as necessary for the purposes of the processing.
  • Integrity and confidentiality: Data will be processed securely and confidentially.
  • Accountability: The Controller is responsible for ensuring compliance with all of the above.

Categories of personal data

The categories of data processed by PALS SOLICITOR include identification data and special categories of personal data as defined in Article 9 of the GDPR.

Special categories include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and the processing of genetic, biometric, health, sexual orientation, or sex life data.

Explicit consent from the User is always required for processing special categories of data for one or more specific purposes.

Legal basis for processing personal data

The legal basis for processing is consent. PALS SOLICITOR undertakes to obtain express and verifiable consent from the User for the processing of their personal data for specific purposes.

Users have the right to withdraw consent at any time, and such withdrawal will be as easy as giving it. Withdrawal of consent will not condition the use of the Website.

When Users are required to provide data via forms, they will be informed if any fields are mandatory because they are essential to complete the operation.

Purposes of processing

Data is collected and managed for the purpose of facilitating, streamlining, and fulfilling commitments made between the Website and the User, or to respond to requests and queries.

Data may also be used for commercial purposes, personalisation, analytics, and business operations of PALS SOLICITOR, including marketing, data storage, and research to improve content, quality, and user experience.

Users will be informed at the time of collection about the specific purposes of processing.

Data retention periods

Personal data will be retained for the minimum necessary time and, in any case, for no more than 12 months, or until the User requests its deletion.

Users will be informed at the time of collection about the retention period or the criteria used to determine it.

Recipients of personal data

User data will not be shared with third parties.

If data is to be shared or transferred to a third country or international organisation, the User will be informed of the recipients and the existence or absence of adequacy decisions by the Commission.

Personal data of minors

Only persons over the age of 14 may lawfully consent to the processing of their data. In the case of children under 14, parental or guardian consent is required.

Confidentiality and security of personal data

PALS SOLICITOR undertakes to adopt appropriate technical and organisational measures to ensure the security and confidentiality of personal data, preventing accidental or unlawful destruction, loss, or alteration, and unauthorised access or disclosure.

The Website uses SSL encryption to protect transmitted data.

However, as internet security cannot be fully guaranteed, PALS SOLICITOR undertakes to notify Users without undue delay in the event of a data breach likely to result in a high risk to individuals’ rights and freedoms.

All personnel with access to personal data are bound by confidentiality obligations.

User rights

Users may exercise the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right not to be subject to automated decisions, including profiling

Requests must be made in writing, addressed to the Data Controller, with the reference “GDPR-palsolicitor.com”, and must include:

  • Full name and a copy of ID (or equivalent document).
  • Reason for the request.
  • Address for notifications.
  • Date and signature.
  • Supporting documents.

Requests should be sent to:

Links to third-party websites

The Website may include links to third-party websites not operated by PALS SOLICITOR. Each site will have its own privacy policy, for which PALS SOLICITOR is not responsible.

Complaints to supervisory authorities

If a User believes their data is being processed in violation of regulations, they may lodge a complaint with a supervisory authority, particularly in their country of residence, place of work, or place of alleged infringement.

In Spain, the authority is the Spanish Data Protection Agency (https://www.aepd.es/).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

It is necessary for the User to have read and agreed to the terms of this Privacy Policy and to consent to the processing of their data by the Controller in the manner and for the purposes stated.

Use of the Website implies acceptance of this Privacy Policy.

PALS SOLICITOR reserves the right to amend this Policy to reflect legal or regulatory changes or developments in case law or decisions of the Spanish Data Protection Agency. Changes will be published and made available on the Website.