Privacy Policy

“Granda y Asociados” is deeply committed to compliance with Spanish and European personal data protection regulations, and guarantees full compliance with the obligations set out, as well as the implementation of the security measures provided for in the General Data Protection Regulation (GDPR) (EU) 2016/679 and in Organic Law 3/2018 of 5 December on data protection and digital rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that the use of our website may require certain personal data to be provided through contact forms, or by sending emails, and that these will be processed by “Granda y Asociados”, Data Controller, whose details are:

Company Name: Nuria Granda Moreno
Tax ID (NIF): 51671930S
Registered Office: Avda. Puente Cultural nº 8, Bloque B, bajo 1.7, 28706 San Sebastián de los Reyes, Madrid
Telephone: 609 096 503
eMail: nuriagranda@grandayasociados.com

Collection and Processing of Personal Data

Personal data is any information relating to a person: name, email, address, telephone, NIF/NIE, etc. Additionally, when a User visits our website, certain information is stored automatically for technical reasons, such as the IP address assigned by their Internet access provider.

“Granda y Asociados”, as Data Controller, has the duty to inform the Users of its website about the collection of personal data that may be carried out, either by sending an email or by completing the forms included on the website.

Only the data necessary to provide the contracted service, or to respond appropriately to the request for information made by the User, will be obtained. The data collected is identifying and corresponds to a reasonable minimum to be able to carry out the activity performed. In particular, specially protected data is not collected at any time. Under no circumstances will the data be used for a purpose other than that for which it was collected.

Contact forms/email

Purpose: To respond to your request for information made through our contact form(s).

Legitimacy: The legal basis that legitimises this processing is the User’s consent, which may be revoked at any time.

Data transfer: The personal data will be processed through servers managed by 1&1, which will be considered the Data Processor.

Minors

Only persons over 14 years of age may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under 14 years of age, the consent of their parents or guardians will be a mandatory condition for us to be able to process their personal data.

On the other hand, only persons over 18 years of age may contract our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be a mandatory condition for us to be able to provide the services offered, unless the minor is emancipated.

Security Measures

Users of the “Granda y Asociados” website are informed that the technical, organisational and security measures within our reach have been adopted to prevent the loss, misuse, alteration, unauthorised access and theft of the data, thus guaranteeing the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of the current data protection regulations. The personal data collected in the forms is processed solely by the staff of “Granda y Asociados” or by the designated Data Processors.

The “Granda y Asociados” Website also has SSL encryption, which allows the User to securely send their personal data through the website’s contact forms.

Accuracy of the data

The User declares that all the data provided by them is true and correct and undertakes to keep it updated. The User shall be responsible for the accuracy of their data and shall be solely responsible for any conflicts or disputes that may arise from its falsity. It is important that, so that we can keep the personal data updated, the User informs “Granda y Asociados” whenever there has been any change to it.

Data transfer

“Granda y Asociados” will not transfer or communicate your data to any third party, except to the other lawyers of the firm, associate lawyers, experts and other professionals, in the cases legally provided for, or when the provision of a service implies the need for a contractual relationship with a Data Processor. Thus, the User accepts that some of the personal data collected may be provided to these Data Processors (payment platforms, administrative agencies, intermediaries, etc.), when necessary for the effective performance of a contracted service or purchased product. The User also accepts that, in the case of provision of services, these may be, wholly or partially, subcontracted to other persons or companies, which will be considered Data Processors, with whom the corresponding confidentiality agreement has been entered into, or who have adhered to their privacy policies, set out on their respective websites. The User may refuse the transfer of their data to the Data Processors by means of a written request, by any of the means referenced above.

In addition, in those cases where necessary, Clients’ data may be transferred to certain bodies, in compliance with a legal obligation: the Spanish Tax Agency, banking entities, the Labour Inspectorate, etc.

Exercise of the User’s Rights

The LOPD and the GDPR grant data subjects the possibility of exercising a series of rights related to the processing of their personal data. To do so, the User must contact us, providing documentation that proves their identity (DNI or passport), by email to nuriagranda@grandayasociados.com, or by written communication to the address that appears in our Legal Notice. Said communication must reflect the following information: the User’s name and surname, the request, the address and the supporting data.

The exercise of rights must be carried out by the User themselves. However, they may be exercised by a person authorised as the User’s legal representative, providing the documentation that proves said representation.

The User may request the exercise of the following rights:

Right to request access to personal data.
Right to request its rectification (if it is incorrect) or erasure.
Right to request the restriction of its processing, in which case it will only be kept by “Granda y Asociados” for the exercise or defence of claims.
Right to object to the processing: “Granda y Asociados” will stop processing your data, unless for legitimate reasons or the exercise or defence of possible claims it must continue to be processed.
Right to the portability of the data: in the event that you want your data to be processed by another company, “Granda y Asociados” will provide the portability of your data in an exportable format.

In the event that consent has been given for a specific purpose, the User has the right to withdraw consent at any time, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.

We undertake to execute all these rights within the maximum legal period (1 month).

If a User considers that there is a problem with the way “Granda y Asociados” is handling their data, they can address their complaints to the Security Officer or to the relevant data protection authority, the Spanish Data Protection Agency being the indicated one in the case of Spain.

Retention of the data

The personal data of Users who use the contact form or who send us an email requesting information will be processed for the time strictly necessary to attend to the request for information, or until the consent given is revoked.

The personal data of Clients will be processed until the contractual relationship ends. The retention period of the personal data will be the minimum necessary, and may be kept up to:

4 years: Law on Infringements and Sanctions in the Social Order (obligations regarding affiliation, registrations, deregistrations, contributions, payment of wages, etc.); Arts. 66 et seq. of the General Tax Law (accounting books, etc.)
5 years: Art. 1964 of the Civil Code (personal actions without a special term)
6 years: Art. 30 of the Commercial Code (accounting books, invoices, etc.)
10 years: Art. 25 of the Law on the Prevention of Money Laundering and Terrorist Financing.
No term: disaggregated and anonymised data.

Confidentiality

The information provided by the client will, in any case, be considered confidential, and may not be used for purposes other than those described herein. “Granda y Asociados” undertakes not to disclose or reveal information about the User’s claims, the reasons for the advice requested, or the duration of its relationship with them.

Validity

This privacy and data protection policy was drafted by EXPERTOS LOPD®, a data protection company, on 28 August 2020, and may vary according to the changes in regulations and case law that occur, it being the responsibility of the data owner to read the updated document, in order to know their rights and obligations in this regard at all times.