Privacy policy

Data controller

Serrano del Río Abogados, S.L.P., NIF B75720193, registered office at Avenida de Irlanda, 21, 2.º I, 45005 Toledo; Marbella office at Avenida José Banús, s/n · Edificio Málaga 2, Local 2 B, 29660 Marbella (Málaga). Email for any question about your data: eserrano@serranodelrio.com.

Which data are processed and where they come from

The data you provide when you contact us: name, email address, telephone number and whatever you tell us about your matter in your message. If you become a client, the data needed to handle your engagement (identity, transaction and the documents you provide).

The data the server generates when serving the website: IP address, page requested, browser and date. They are kept in a technical log for security purposes for a short period and are not cross-referenced with any other data.

This website uses no cookies, no analytics and no third-party trackers. Your light or dark theme preference is stored only in your browser and is not sent to the firm.

Purposes and legal basis

To answer your enquiry and, if you ask, to prepare a fee estimate or an engagement letter: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).

To provide the legal services engaged: performance of the contract (Art. 6(1)(b) GDPR) and, in defence of your interests, the practice of law with its duties of professional secrecy.

To comply with the firm's legal obligations: tax, accounting, file retention and, in real estate transactions, those of Spanish Law 10/2010 on the prevention of money laundering, which requires the client to be identified and documentation to be kept (Art. 6(1)(c) GDPR).

To keep the website and email secure: the firm's legitimate interest (Art. 6(1)(f) GDPR).

For how long

Enquiries that do not lead to an engagement are kept for up to one year from the last communication and then deleted. Client files are kept for the duration of the engagement and afterwards for the periods the law requires (in general, five years for anti-money-laundering obligations, six years for commercial documentation, and the limitation periods of any liability that may arise from the engagement). The server's technical log is kept for a short period.

If you withdraw your consent or object to the processing, the data are blocked and deleted once they are no longer needed to deal with any liability.

Who receives them

Nobody, for commercial purposes. Only those the law or the engagement itself requires: courts, notaries, Land and Commercial Registries, public authorities, other lawyers or court agents taking part in your matter, and insurers where necessary for your defence.

Providers that process data on the firm's behalf, under a data-processing agreement: Dinamic Technology Management, S.L. (SAYKIN), which maintains this website and the firm's systems, and Hetzner Online GmbH (Germany, European Union), where the server is hosted. The firm's email and working systems may be hosted by cloud service providers with adequate safeguards.

If you contact us through WhatsApp, the conversation passes through the servers of Meta Platforms Ireland Ltd. under WhatsApp's terms and privacy policy; the firm keeps only what it needs to assist you.

No international transfers of data are made outside the European Economic Area, other than those implied by the messaging or cloud services you yourself choose to communicate with the firm, and in that case with the safeguards of Chapter V of the GDPR.

Your rights

You may request access to your data, their rectification or erasure, the restriction of processing, object to it and, where applicable, obtain them in a portable format. An email to eserrano@serranodelrio.com stating what you request is enough; if there is reasonable doubt about your identity, you will be asked to prove it.

If you believe the processing is not correct, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es), without prejudice to contacting the firm first.

Professional secrecy

Everything you tell a lawyer of the firm is covered by professional secrecy (Art. 542.3 of the Spanish Organic Law on the Judiciary and the General Statute of the Legal Profession). That duty goes beyond this policy and holds even if the engagement never takes place.