Privacy Policy
How we collect, use, and protect your personal data
1. Data Controller
- Controller: Pina Espinoza Carrizosa (Artemis Law)
- NIF: Y4830857C
- Address: Barcelona, Spain
- Email: pina.espinoza@artemislaw-europe.com
- WhatsApp: +34 622 677 294
2. What Data We Collect
We may collect and process the following personal data:
- Identity and contact details you provide through our contact forms, email, WhatsApp, or consultation bookings (name, email address, phone number, nationality, residency situation).
- Information you share with us in the course of a legal enquiry or engagement.
- Technical data collected automatically when you browse this site (see our Cookie Policy).
3. Purposes and Legal Basis
We process your data for the following purposes:
- Responding to enquiries and providing legal services: based on the performance of a contract or pre-contractual measures taken at your request.
- Managing consultations and appointments: based on the performance of a contract.
- Sending updates or marketing communications: only where you have given consent, which you may withdraw at any time.
- Recruitment: where you submit an application, based on pre-contractual measures.
- Complying with legal and professional obligations applicable to lawyers in Spain.
4. Data Retention
We keep personal data only for as long as necessary for the purposes described above, and thereafter for the periods required by Spanish law and the professional rules applicable to legal practice. Enquiry data that does not lead to an engagement is deleted within a reasonable period.
5. Data Sharing and International Transfers
We do not sell your personal data. We may share data with service providers that help us operate (such as scheduling, hosting, and payment providers) under appropriate data processing agreements, and with public authorities where required for your immigration application or by law. Where a provider processes data outside the European Economic Area, we ensure appropriate safeguards are in place.
6. Your Rights
Under the GDPR and Spanish data protection law, you have the right to:
- Access the personal data we hold about you.
- Request rectification of inaccurate data or erasure of your data.
- Object to or request restriction of processing.
- Receive your data in a portable format.
- Withdraw consent at any time, without affecting prior processing.
To exercise these rights, contact us at pina.espinoza@artemislaw-europe.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, or loss, in line with the confidentiality obligations that apply to the legal profession.
8. Cookies, Online Advertising and Consent Records
This website uses cookies and similar technologies. Nothing that is not strictly necessary is activated until you agree through our cookie banner, and if you are in the EU, the UK or Switzerland such technologies stay switched off by default until you accept, using Google Consent Mode. You can accept, reject, or choose by category, and you can change or withdraw your choice at any time using the Cookie Preferences link in the footer. See our Cookie Policy for the full list.
Advertising measurement. Where you allow advertising cookies, we use the Google tag (Google Ads) to measure the results of our advertising. It sets first-party Google cookies (for example _gcl_*) so that an enquiry can be attributed to an advert. This involves Google as a recipient of your data. Google may process this data outside the European Economic Area, including in the United States, under an approved safeguard such as the EU-US Data Privacy Framework and the European Commission's standard contractual clauses. Where you do not consent, our advertising tags run in a cookieless mode that does not identify you.
Records of your consent. To meet our accountability obligations under Article 7 of the GDPR, when you make or change a cookie choice we keep a record of it. That record contains a randomly generated consent reference, the choice you made for each category, the version of this policy and of the banner in force, the date and time, a shortened (non-identifying) form of your IP address, and general browser information. We use these records only to demonstrate that consent was given or declined, keep them for the period necessary for that purpose, and delete them when they are no longer required. The legal basis for keeping them is our legitimate interest and legal obligation in demonstrating compliance.
9. Changes to This Policy
We may update this policy from time to time. The version published on this page is the current one.