Privacy
Last updated: October 9th, 2026
If you contact the firm through the contact form on this website, by email, by telephone or by WhatsApp, we will process the identification and contact details you provide, together with the information contained in your message, for the purpose of dealing with and managing your inquiry or request. The contact form is technically processed by Netlify, the hosting provider of this site, which acts as data processor and runs every submission through a spam filter (see section 5); the firm is the final recipient of the data submitted. On the form you may, if you wish, tell us how you found the firm (the optional "How did you find me?" field), an answer used only to learn which channels bring inquiries to the firm, for internal statistics, in a record that contains neither your name nor your contact details. If you write to us on WhatsApp, the messaging service is provided by WhatsApp Ireland Limited (Meta group) with end-to-end encryption and under its own terms and privacy policy; the firm only processes the data you send us through that channel.
In addition, when you visit this site, Netlify's servers automatically log the IP address you connect from and other technical data about each request (server logs). Netlify processes these logs as data processor, for the purpose of keeping the site secure and working properly; the firm does not consult them.
The basis for processing is the taking of pre-contractual steps at your request when you consult us with a view to a possible engagement (Article 6(1)(b) GDPR) and, for any other communication you address to us, your consent when you contact the firm (Article 6(1)(a)). The server logs described in section 2 are based on the firm's legitimate interest in the security and proper functioning of the site (Article 6(1)(f) GDPR). The optional answer on how you found the firm is based on your consent (Article 6(1)(a)), given when you choose an option. Should a professional relationship be established, processing will be governed by the engagement agreement and by the firm's legal obligations.
If your inquiry contains information about facts that may amount to a criminal offense, about criminal proceedings or about precautionary measures, the firm processes it solely to assess the matter and, where appropriate, to take on your defense, under professional secrecy. That processing rests on the legal basis stated in the previous paragraph for consultations and other communications (Article 6(1)(b) and (a) GDPR) and on Article 10(3) of Spanish Organic Act 3/2018 of December 5th on the Protection of Personal Data and Guarantee of Digital Rights, which allows lawyers to process the information their clients provide for the exercise of their functions (Article 10 GDPR). That is why your first message should describe the matter in general terms; the details will be dealt with later, through a confidential channel.
We keep your data for as long as necessary to deal with your inquiry. If the inquiry does not lead to a professional relationship, your data is deleted once it has been dealt with. Submissions received through the contact form are deleted from the form provider's dashboard (Netlify) no later than ninety days after receipt, once the inquiry has been dealt with. Server logs are kept for the period set by the provider's data processing agreement. If a professional relationship is established, the file is kept for the duration of the engagement and, once the matter has ended, for five years, without prejudice to longer periods where these apply (professional liability, enforcement of decisions and the document-retention duties of the legal profession). Documentation with tax effects is kept for as long as the Tax Administration's right to assess the tax debt has not become time-barred, as a rule four years from the day after the filing deadline for the relevant year (Articles 29.2, 66, 67.1 and 70 of the Spanish General Tax Act); accounting records are kept for six years as a matter of the firm's own policy.
Data will not be disclosed to third parties except where required by law. Technology providers acting as data processors may be involved in providing the service, bound by a contract under Article 28 GDPR and by a duty of confidentiality, with your data never used for unrelated purposes or for training models, except as stated below about the spam filter. This site is hosted, and the contact form technically received, by Netlify, Inc., which may process data on servers located outside the European Economic Area; in that case the transfer relies on the Commission's adequacy decision on the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795, under Article 45 GDPR) and, as a fallback, on standard contractual clauses (Article 46(2)(c) GDPR). Netlify runs every form submission through the Akismet spam filter, operated by Automattic, Inc., which appears on Netlify's list of sub-processors. Akismet receives the content of the submission and the IP address it is sent from, data it may process in the United States. Netlify's data processing agreement requires Netlify to impose on it data protection obligations no less protective than its own and makes Netlify liable for its actions. According to its own terms, Akismet learns from content it classifies as spam to improve its detection and keeps most of that data for between two weeks and ninety days. That use serves Akismet's own purpose and does not follow any instruction from the firm. If you prefer your inquiry not to go through that filter, you can send it directly by email to admin@solvinglegal.com or make it by phone. If you write to us on WhatsApp, WhatsApp Ireland Limited processes the metadata of the communication and may transfer it to its parent company in the United States under the adequacy decision on the EU-U.S. Data Privacy Framework (Article 45 GDPR) and, as a fallback, standard contractual clauses (Article 46(2)(c) GDPR).
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to the address indicated or to admin@solvinglegal.com, providing proof of identity. Where processing is based on your consent, you may withdraw it at any time by the same means, without affecting the lawfulness of processing based on consent before its withdrawal (Article 7(3) GDPR). You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).
This site uses no tracking or advertising cookies and does not build profiles. It only uses technical local storage in your browser to remember the language you choose; it activates only when you select a language and does not identify you. To understand on an aggregate basis how the site is used, when each page loads a small piece of the site's own code asks your browser to send the server the address of that page and its language. With that information, an internal visit counter hosted on the same infrastructure (Netlify) adds the visit by page, language and day. The counter uses no cookies, stores or reads no data on your device, does not record your IP address and assigns no identifier that could recognize you on another visit. The result is for the firm's internal use only. No third-party analytics tool is used.
The firm may update this policy to reflect legislative or case-law developments or changes in how the site operates. The version in force at any time is the one published on this page.