Privacy policy

1. Who the controller is

The firm has not appointed a data protection officer, as none of the circumstances in article 37 GDPR apply.

• Controller: Amrou Sbahi Alaskar
• Address: Puerta del Sol 13, oficina 10, 5.ª planta — 28013 Madrid
• Email: sbahi@alaskarabogados.es

2. What this website collects today

Nothing. As of today this website has no contact form, no user registration, uses no analytics tools, and contains no element that collects data about visitors.

You can verify this: the site sets no cookies. See the cookie policy.

The server hosting the site records, as any server does, technical connection data — IP address, date and time, page requested, browser — for the sole purpose of delivering the service and keeping it secure. The firm does not access those logs and does not use them for profiling.

3. What will be collected once booking is enabled

The website will include a consultation booking calendar with advance payment. Once active, the following will be processed:

• Full name, email address and, if you provide it, telephone number
• The time slot, the language of the consultation and the reason you describe
• The data needed for payment, handled by the payment provider without the firm seeing your full card details

We expressly ask you not to include sensitive data or case documents in the reason field. That is what the consultation is for.

4. Purposes and legal bases

The firm does not send marketing communications, does not carry out profiling, and takes no automated decisions with legal effect.

• Managing the appointment and providing the requested consultation — basis: performance of a contract or pre-contractual steps (art. 6(1)(b) GDPR)
• Charging fees and issuing invoices — basis: performance of a contract and compliance with legal obligations (art. 6(1)(b) and 6(1)(c) GDPR)
• Replying to correspondence you initiate by email or telephone — basis: legitimate interest in answering those who write to us (art. 6(1)(f) GDPR)
• Complying with applicable tax, accounting and anti-money-laundering obligations — basis: legal obligation (art. 6(1)(c) GDPR)

5. Legal professional privilege

Beyond data protection, this firm is bound by the lawyer’s duty of professional secrecy (article 21 of the Estatuto General de la Abogacía Española and article 542.3 of the Ley Orgánica del Poder Judicial).

It is a stricter protection than the GDPR and has no time limit: it covers not only what you tell us, but the very fact that you consulted this firm. Only you can waive it, and only in writing.

This is why the firm does not publish client matters, not even anonymised, without signed consent.

6. How long data is kept

Data from a consultation that does not lead to an engagement is kept for the duration of the relationship and, afterwards, for as long as needed to respond to a possible claim.

Data from an engaged matter is kept throughout its handling and, afterwards, for the limitation periods applicable to professional liability and those imposed by tax, accounting and anti-money-laundering rules.

Once those periods expire, the data is deleted or blocked.

7. Who data is shared with

The firm does not sell or transfer personal data. Only those strictly necessary to deliver the service have access:

• Technology providers acting as processors: website hosting, email, the appointment booking platform and the payment provider, each under a signed processing agreement
• Courts and public authorities where the conduct of your matter requires it
• Your procurador, experts or other professionals, where necessary for the matter and with your knowledge
• Banks, for payment
• Tax authorities and other bodies, where the law so requires

8. Transfers outside the European Union

Some technology providers may process data outside the European Economic Area. In that case the transfer relies on a European Commission adequacy decision or on standard contractual clauses, with any additional safeguards required.

If you would like the list of providers in force at any given time, you can request it at sbahi@alaskarabogados.es.

9. Your rights

You may exercise the following rights at any time:

• Access: to know what data of yours we process
• Rectification: to correct data that is inaccurate
• Erasure: to ask for deletion where the data is no longer needed
• Objection: to object to processing based on legitimate interest
• Restriction: to ask that data be kept but not used while a claim is resolved
• Portability: to receive your data in electronic format

To exercise them, write to sbahi@alaskarabogados.es stating which right you are exercising and enclosing a copy of a document proving your identity. There is no charge.

If you believe your rights have not been respected, you may complain to the Spanish Data Protection Agency: https://www.aepd.es

10. Minors

This website is not directed at children under fourteen and does not knowingly collect their data. Where a matter concerns a minor, their data is provided by whoever holds parental responsibility or guardianship.

11. Changes to this policy

This policy may be updated when the law or the website’s services change. The version in force is always the one published on this page, with its date.