Privacy policy

1. Data controller

The data controller responsible for the processing of personal data collected through the website is:

Luis Chabaneix
Address: Plaza Villa de Paris, Calle General Castaños 13, 4º dcha, 28004 Madrid, Spain
NIF: X4820091G
Email: info@chabaneix.es

2. Purposes of processing

Personal data provided by users through the website may be processed for the following purposes:

• To receive and manage enquiries submitted through the contact forms.
• To manage requests for information, legal consultations or the engagement of legal services.
• To maintain and manage the professional relationship with clients and prospective clients.
• To contact the user regarding their enquiry or request.
• To comply with legal obligations applicable to the data controller.
• To analyse the use and operation of the website through analytics tools such as Google Analytics, where the user’s consent is legally required.

Personal data will only be processed for the purposes for which it was collected and in accordance with applicable data protection legislation.

3. Categories of data processed

Depending on how the website is used and the services requested, the following categories of personal data may be processed:

• Name and surname.
• Email address.
• Telephone number.
• Information provided by the user in the message or enquiry field.
• Information relating to requests for legal services.
• Technical and browsing data associated with the use of the website when analytics tools or cookies are used.

The user undertakes to provide accurate, complete and up-to-date information and shall be responsible for any damage that may arise from providing false, inaccurate or outdated information.

4. Legal basis for processing

The legal basis for processing personal data shall be, as applicable:

a) Performance of pre-contractual measures and contractual obligations.

Where the user requests information, a legal consultation or the engagement of professional services, the processing of their data is necessary to respond to that request and, where applicable, to manage the professional relationship.

b) Compliance with legal obligations.

Where processing is necessary to comply with legal obligations applicable to the data controller, the data may be processed for the periods established by the relevant legislation.

c) Consent.

Where required, certain processing activities, particularly those relating to cookies and analytics tools that are not strictly necessary, will only be carried out after the user has provided their consent. The user may withdraw their consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.

5. Data retention period

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected and, subsequently, for the periods required by applicable legislation.

Once the data is no longer necessary for the purpose for which it was collected, it may be retained in a duly restricted form for the periods necessary to address any potential legal liabilities.

For data processed through cookies or analytics tools, the applicable retention periods shall be those established for each specific cookie or technology and shall be detailed, where applicable, in the Cookie Policy.

6. Data recipients

As a general rule, personal data will not be disclosed to third parties, except where disclosure is required by law, necessary for the provision of the requested services or where the user has provided consent when such consent is required.

Certain service providers, such as web hosting, email, maintenance, technology or analytics providers, may have access to personal data as data processors, in accordance with applicable legislation and the relevant contractual safeguards.

Where third-party services may involve international transfers of personal data, such transfers shall be carried out in accordance with the requirements established by the GDPR.

7. Cookies and analytics tools

This website may use cookies and similar technologies to ensure its operation, improve the browsing experience and obtain statistical information regarding the use of the website.

The website may also use Google Analytics or other analytics tools.

Cookies that are not strictly necessary for the operation of the website will, where legally required, only be installed and used after the user has provided their consent.

The user may accept, reject or configure cookies through the cookie management mechanism available on the website.

Detailed information about the cookies used, their purposes, duration and any third parties involved is available in the Cookie Policy.

8. Security

The data controller implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk and to protect personal data against loss, destruction, alteration, unauthorised access or unlawful processing.

However, users should be aware that no transmission of data over the Internet can guarantee absolute security.

9. User rights

Users may exercise, under the terms established by applicable legislation, the following rights:

• Right of access to their personal data.
• Right to rectification of inaccurate data.
• Right to erasure.
• Right to restriction of processing.
• Right to object to processing.
• Right to data portability, where applicable.
• Right to withdraw consent where processing is based on consent.
• Right not to be subject to a decision based solely on automated processing, where applicable.

To exercise their rights, users may send a request to info@chabaneix.es.

The request should include the information necessary to verify the identity of the applicant and specify the right they wish to exercise.

The exercise of these rights is generally free of charge.

10. Right to lodge a complaint

Users have the right to lodge a complaint with the competent supervisory authority if they consider that the processing of their personal data infringes applicable data protection legislation.

In Spain, the competent supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).

11. Third-party data

Where a user provides personal data relating to third parties, the user must have a lawful basis to do so and, where applicable, must have previously informed those individuals about the processing of their data.

12. Special categories of personal data

As users may use the contact form to request legal advice, they are advised not to provide, during the initial contact, more personal data than is strictly necessary.

In particular, users should avoid providing, through open forms on the website, special categories of personal data or confidential information that is not necessary to process their request.

Where the provision of legal services requires the processing of special categories of personal data or other data subject to specific protection, such processing shall be carried out in accordance with the legal bases and safeguards provided for under applicable legislation.

13. Changes to the Privacy Policy

The data controller reserves the right to modify this Privacy Policy where necessary in order to adapt it to legislative, judicial, technical or service-related changes.

The version in force shall be the version published on the website at any given time.

14. Applicable law

This Privacy Policy shall be governed by Spanish law and applicable European legislation on the protection of personal data, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).