Privacy Policy

Provisional draft. This text follows the structure of the privacy policy of a Spanish member firm and is used here only as a format placeholder. E-Iure is an association of law firms from several countries, so the controller, the legal bases and the retention periods must be confirmed and the final wording approved by whoever is responsible for data protection at E-Iure. Everything marked [pendiente] is information we do not have yet.

1. Who is responsible for your data

The controller of the personal data collected through e-iure.com (the “Website”) is:

• Entity: ASOCIACIÓN ILFA E-IURE, an association incorporated under Spanish law
• Registered office: Paseo de la Castellana 120, 5º izquierda, 28046 Madrid, Spain
• Tax identification number (CIF): G83887216 · Entered in the Spanish Register of Associations under entry number 172207
• Contact for data protection matters: e-iure@e-iure.com, or by post to the registered office above
• Data protection officer: [pendiente: appointed / not appointed]

This policy explains what E-Iure does with the personal data of visitors to the Website and the rights available under the General Data Protection Regulation (Regulation (EU) 2016/679) and the data protection legislation applicable to E-Iure.

2. Accurate and up-to-date information

Fields marked with an asterisk (*) in the forms on the Website are mandatory: without them the request cannot be dealt with. The information provided must be truthful, and any change should be notified so that it stays accurate. By sending a form, the sender confirms that the data provided is accurate.

3. What this policy covers

For each processing activity carried out through the Website, the section below sets out the purpose, the legal basis, who the data may be shared with, whether it is transferred outside the European Economic Area and how long it is kept. Personal data is not sold, and it is not shared with third parties except as described here or where there is a legal obligation.

4. How your data is processed on this website

4.1 Contact form

• Data collected: name, e-mail address, company, country, the member firm selected and the content of the message.
• Purpose: to answer the enquiry and, where appropriate, to put the sender in touch with the member firm selected.
• Legal basis: the consent given by sending the form and the legitimate interest of E-Iure in answering enquiries about the network.
• Recipients: the message is sent to the E-Iure address e-iure@e-iure.com and a copy is stored in the Website database. [pendiente: confirm whether the message is forwarded to the member firm selected and, if so, that the firm acts as a separate controller.]
• International transfers: none. The hosting and the e-mail account are located in Spain (European Union), so the data does not leave the European Economic Area.
• Retention: [pendiente: retention period to be set. At the date of this draft the Website keeps every message received, with no deletion schedule.]

4.2 Statistics

• Data collected: information about the visit (pages viewed, approximate location, device and browser, source of the visit), collected by Google Analytics 4 through the cookies listed in the cookies policy.
• Purpose: to understand how the Website is used and improve it.
• Legal basis: consent, given through the cookie banner. Without that consent, no measurement script is loaded and no data is sent.
• Recipients: Google Ireland Limited, as a processor, under the Google Analytics terms.
• International transfers: Google may process data outside the European Economic Area under the safeguards it declares. [pendiente: confirm the data processing agreement and the transfer safeguards accepted with Google.]
• Retention: [pendiente: retention period configured in the Google Analytics property.]

4.3 Hosting and security of the Website

• Data collected: technical data needed to serve the Website and keep it secure, such as the IP address and server logs.
• Purpose: to operate the Website and prevent abuse.
• Legal basis: the legitimate interest of E-Iure in keeping the Website available and secure.
• Recipients: the hosting provider, Arsys, as a processor, with servers located in Spain (European Union).
• Retention: [pendiente: log retention period.]

5. Exercising your rights

You may exercise the following rights at any time and free of charge: access to your personal data; rectification of inaccurate data; erasure, where this is possible; restriction of processing where the accuracy, lawfulness or necessity of the processing is in doubt; portability, where the processing is based on consent or on a contract; objection, where the processing is based on legitimate interest; and withdrawal of your consent at any time, without this affecting the lawfulness of the processing carried out beforehand.

To exercise them, write to e-iure@e-iure.com, or by post to ASOCIACIÓN ILFA E-IURE, Paseo de la Castellana 120, 5º izquierda, 28046 Madrid, Spain, stating the right you wish to exercise and enclosing proof of identity.

If you believe your data has not been handled properly, you may lodge a complaint with the competent supervisory authority: the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), www.aepd.es.

6. Cookies

This Website only uses cookies that are not strictly necessary once the visitor has given consent through the banner shown on the first visit. The cookies used, their purpose and their duration are listed in the cookies policy.

7. Security measures

E-Iure applies technical and organisational security measures appropriate to the nature of the data processed. However, no system connected to the internet is completely secure, and malicious action by third parties cannot be ruled out; E-Iure uses the means at its disposal to prevent it.

8. Confidentiality

Personal data collected through the Website or through communications with visitors is treated confidentially, and E-Iure undertakes to keep it secret in accordance with the applicable legislation. Enquiries about legal matters sent through the Website are also covered by the professional duty of confidentiality of the member firm that deals with them.

9. Minors

The services offered through the Website are not aimed at minors, who may not use them without the prior authorisation of their parents, guardians or legal representatives.

10. Changes to this policy and duration

E-Iure may amend this privacy policy at any time; the version in force is the one published here. This policy was last updated on [pendiente: date of the final text].