Privacy Policy | Expat Abogados

This Privacy Policy explains how Expat Abogados collects, uses, stores and protects your personal data when you use this Website, in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Who we are

This Website is operated by Juan Antonio Bertomeu Vallés, trading as Expat Abogados.

NIF: 28988016N
Trade name: Expat Abogados
Registered address: C/ de Ramón y Cajal, 5, E, Dénia (Alicante), Spain
Email: legal@expatabogados.com
Phone: +34 609 477 889
WhatsApp: +34 614 08 68 07

2. What personal data we collect

We may collect and process the following categories of personal data:

Identity data, such as your name and surname.
Contact data, such as your email address, phone number and country or location.
Enquiry data, such as the service you are interested in, the content of your message and the details you choose to share with us.
Technical data, such as IP address, device information, browser type and basic usage data, where required for security or website analytics.
Marketing and analytics data, where you have consented to non-essential cookies or similar technologies.

Please do not include sensitive personal data or confidential documents in the contact form unless we specifically ask you to do so.

3. How we collect your data

We collect personal data when you:

submit a contact form;
contact us by email, phone or WhatsApp;
request information about our services;
interact with embedded content or third-party tools where applicable;
browse the Website, where cookies or similar technologies are used.

4. Why we use your data

We use your personal data to:

reply to your enquiries;
provide information about our services;
take steps at your request before entering into a professional engagement;
provide legal or tax services if you become a client;
manage the client relationship;
comply with legal and professional obligations;
keep the Website secure;
measure and improve Website performance where you have consented to analytics cookies;
measure advertising or marketing performance where you have consented to marketing cookies.

5. Legal bases for processing

We process personal data based on:

your consent, for example when you submit a form or accept non-essential cookies;
steps prior to entering into a contract, when you request information or a quotation;
performance of a contract, if you become a client;
compliance with legal obligations;
legitimate interests, such as Website security, fraud prevention and responding to professional enquiries, provided your rights do not override those interests.

6. How we handle form submissions

This Website does not sell anything online. When you submit a contact form, your message is sent to a secure server function operated for us on Vercel, which records your enquiry and notifies our team so that we can reply to you personally.

The form may collect visible fields such as your name, email, phone number, country and message, together with technical context such as the page you contacted us from and, where available, the marketing campaign that referred you.

To deliver, store and manage your enquiry we rely on the following service providers acting as processors on our behalf:

Vercel Inc. — hosting of the Website and the server functions that receive your submission.
Supabase — secure storage of your enquiry on infrastructure located in the European Union (Ireland).
Google (Google Workspace) — delivery of the notification email to legal@expatabogados.com.
Cloudflare (Turnstile) — anti-spam and abuse protection of the form.
Meta Platforms — measurement of advertising conversions, using only pseudonymised (hashed) data and only where you have accepted marketing cookies.

Please do not upload or send confidential documents through the contact form unless we specifically request them through an appropriate channel.

7. Cookies, analytics and advertising

We may use cookies and similar technologies to make the Website work, improve performance, understand how visitors use the site and, where applicable, measure advertising.

Non-essential cookies and similar technologies will only be used where required after you have given consent through the cookie banner or cookie preferences tool.

You can change your cookie choices at any time through the Cookie Preferences link in the footer.

8. Third-party content

Some pages may include third-party services such as:

Google Maps embedded maps;
YouTube videos or feeds;
Trustindex review widgets;
Sentry for error monitoring;
PostHog for product analytics (where consented);
social media links or embedded content.

These third parties may collect data or set cookies according to their own privacy and cookie policies. Where required, such content should only load after consent.

We may share personal data with:

service providers that help us operate the Website, process forms, host the Website, send communications or provide technical support;
professional advisers where necessary;
public authorities, courts, tax authorities, notaries, registries or other bodies where required in connection with legal or tax services;
third parties where required by law.

Where providers process data on our behalf, they should act as processors under appropriate contractual safeguards.

10. International transfers

Some service providers may process personal data outside the European Economic Area.

Where this happens, we rely on appropriate safeguards, such as Standard Contractual Clauses or other lawful transfer mechanisms, where required.

11. How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.

For enquiries, we generally keep the data for the time needed to respond and for a reasonable period afterwards to manage follow-up communications, unless a longer retention period is required by law or you become a client.

If you become a client, retention periods may be longer due to legal, tax, professional and regulatory obligations.

12. Your rights

You have the right to request access, rectification, erasure, restriction of processing, portability and objection to processing.

Where processing is based on consent, you may withdraw your consent at any time.

You also have the right not to be subject to decisions based solely on automated processing where applicable.

13. How to exercise your rights

To exercise your rights, contact us at: legal@expatabogados.com.

We may need to verify your identity before responding to your request.

14. Complaints

If you believe your data protection rights have been violated, you may lodge a complaint with the Spanish Data Protection Authority:

Agencia Española de Protección de Datos (AEPD)
https://www.aepd.es/

15. Security

We take reasonable technical and organisational measures to protect personal data. However, no website or online transmission can be guaranteed to be completely secure.

16. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.

17. Contact

If you have questions about this Privacy Policy, contact: legal@expatabogados.com.