Skip to content
Martín Antón Abogados
ESP

Privacy policy

Last updated: 1 November 2026

1. Controller

The controller of the personal data collected through this website is:

Controller
Asesoramiento Jurídico Martín Antón y Asociados, S.L.
Tax ID (NIF)
B82237108
Address
Calle Poeta Joan Maragall, 60, 7º, puerta 4, 28020 Madrid
Telephone
915 714 881
Email
info@martinantonasociados.com
Data protection officer
No data protection officer has been appointed, as the cases in Article 37 GDPR and Article 34 LOPDGDD do not apply. Data protection queries can be sent to the contact details above, stating "Data protection" in the subject.

2. Purpose, scope and applicable law

This policy explains, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD), how the data of people who visit this website or send an enquiry through its form is processed.

It is the information provided to you before you send the form: the form includes a link to this policy and an acceptance box, which appears unticked. Accepting these terms does not mean waiving the rights that the rules grant you.

Processing arising from a professional engagement, employment relationships, suppliers or other activities of the Firm is reported in the documentation that applies to each of them.

3. What data we process and where it comes from

  • Contact form data: name, email address, telephone (optional) and the content of your message. Name, email and message are mandatory; the telephone number is optional.
  • Proof that you accepted this policy, which is included in the message received together with the date and time it was sent.
  • Technical connection data, such as the IP address, the date and time of access and the browser type, which the server hosting the website records automatically for operational and security reasons.
  • IP address in encrypted form (an irreversible fingerprint), kept for one hour at most to limit automated submissions of the form.

The data is obtained directly from you. If you include third-party data in your message, we will assess whether it is necessary and relevant and, if not, it will be limited or deleted.

We do not ask for specially protected data (for example, health data), complete court documents or identity documents through the form. Please do not include them in the first enquiry: if the matter requires it, the Firm will indicate the appropriate channel and the applicable legal basis, since processing that data requires the additional conditions of Article 9 GDPR.

4. Purpose of the processing

  • To handle your enquiry and reply to your request for information.
  • When you ask for it, to assess the initial possibility of providing you with a service and, to the extent strictly necessary, to identify the parties in order to rule out conflicts of interest before accepting an engagement.
  • To maintain the security and technical integrity of the website and prevent abusive use of the form.
  • To deal with the exercise of your rights and requests from competent authorities, and to document the communications needed to prove compliance with obligations or to deal with possible liabilities.

Your data is not used to send you commercial communications, to build profiles or to take automated decisions.

5. Legal basis

  • Your consent (Article 6.1.a GDPR), given by ticking the acceptance box and submitting the form. You may withdraw it at any time, without affecting the lawfulness of the processing carried out before.
  • The implementation, at your request, of pre-contractual measures (Article 6.1.b GDPR), where your enquiry is aimed at assessing whether to engage the Firm's legal services.
  • The Firm's legitimate interest in ensuring the security of the website and preventing abusive use (Article 6.1.f GDPR).
  • Compliance with legal obligations where a request from an authority must be dealt with (Article 6.1.c GDPR).

6. Retention period

Form data will be kept for two weeks from receipt, the time needed to handle your enquiry. After that period it will be deleted, unless it must be kept to comply with a legal obligation or a professional relationship is entered into with the Firm, in which case it will be processed in accordance with the information provided to you when the engagement is formalised. Where legally required, data will be blocked under Article 32 LOPDGDD, restricting its use to what the law permits during the limitation period of any liabilities.

Technical connection data will be kept for the period set by the hosting provider under its policy and, where applicable, under Law 25/2007 of 18 October on the retention of data relating to electronic communications and public communications networks.

7. Recipients and processors

Your data will not be disclosed to third parties except where legally required, on a valid request from a competent authority, or where necessary to defend rights. Receiving an enquiry does not mean disclosing your data to insurers, opposing parties, experts or other entities.

To provide the service, the Firm relies on its web hosting and email provider, which accesses the data as a processor, in accordance with Article 28 GDPR and the terms of its data protection policy (arsys.es/legal/politica-privacidad), section "Arsys como encargado del tratamiento", which are accepted when its services are contracted. Among other obligations, the provider processes the data only on the Firm's instructions, maintains confidentiality, applies security measures, destroys the data when the service ends, and may only subcontract certain services (storage, backups and security) to third parties that have also signed a contract under Article 28(4) GDPR, whose identity the Firm may request.

  • Arsys Internet, S.L.U. (Tax ID B-85294916; calle Madre de Dios, 21, 26004 Logroño, La Rioja, Spain): hosting of the website and the email service that receives the form content.

8. International transfers

As a general rule, the Firm does not transfer your personal data to countries outside the European Economic Area (EEA) or to international organisations.

Its web hosting and email provider, Arsys Internet, S.L.U., has its registered office in Spain (Logroño, La Rioja) and operates a data centre in Logroño, so the form content is, in principle, received and stored within the EEA. According to its data protection policy, where a service requires international transfers, Arsys states this in the specific terms of that service, which the customer expressly accepts beforehand.

Should such a transfer become necessary in the future, it would only take place where there is a European Commission adequacy decision (Article 45 GDPR) or, failing that, appropriate safeguards, such as the standard contractual clauses approved by the Commission (Article 46 GDPR), or one of the derogations in Article 49 GDPR applies, and you would be informed beforehand.

You can request further information on the safeguards applied by writing to info@martinantonasociados.com.

9. Your rights

You may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability; withdraw your consent where it is the applicable basis; and not be subject to decisions based solely on automated processing with legal or similarly significant effects, under the terms of the GDPR.

To exercise them, write to info@martinantonasociados.com or to Calle Poeta Joan Maragall, 60, 7º, puerta 4, 28020 Madrid, with enough information to locate your enquiry. As a general rule, it is not necessary to attach a copy of your ID: additional, adequate and proportionate information will only be requested where there are reasonable doubts about your identity.

Requests are answered within the periods of Articles 12 et seq. GDPR and exercising your rights is free of charge, except in the cases the law provides for. If you consider that the processing of your data does not comply with the rules, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

10. Security, professional secrecy and incidents

The Firm applies technical and organisational measures appropriate to the risk, in accordance with Article 32 GDPR and the legal profession's duties of professional secrecy. Transmitting information over the internet and by email is not free of risk, so we recommend not sending sensitive documents through the general form and following the secure communication instructions the Firm gives you.

Incidents affecting personal data are handled in accordance with the rules, including, where appropriate, notification to the supervisory authority and communication to those affected. This statement is not a certification or a promise of invulnerability.

11. Minors

This website is aimed at people who need information about legal services and is not designed to collect data from minors. If you are under 14, do not send the form without the authorisation of those who hold parental authority or guardianship over you, in accordance with Article 7 LOPDGDD.

12. External sites and similar technologies

This website contains links to other pages, such as Google Maps from the Contact map. Those who run those pages are the ones who process the data you give them, and the Firm does not control their privacy policy. Information about cookies and similar technologies can be found in the Cookie policy.

13. Later professional relationship

Engaging legal services or opening a case file may involve processing with categories of data, recipients, periods and legal bases different from those of a web enquiry. The Firm will inform you of them in the engagement documentation. Receiving your enquiry does not mean that a file has been opened or that your representation has been taken on.

14. Updates to this policy

The Firm may update this policy when the purposes, providers, tools, legislation or features of the website change. The version in force is the one published on this page, with its update date; changes requiring new information or consent will be communicated to you in accordance with the rules.

15. Language

This English version is provided for convenience only. In case of any discrepancy, the Spanish version prevails.