Privacy policy

Controller: José Colón Sánchez, owner of Bufete Colón; tax ID 44029225-A; calle Acacias 6, ground floor, 11007 Cádiz, Spain; privacy contact: info@bufetecolon.es.

The contact form collects name, email, optional phone number, subject and message. An irreversible cryptographic fingerprint of the network address is temporarily retained to prevent abuse; the original address is not stored. The private area processes the name, email and profile image supplied by Google, access role and status, and technical session data. No automated decisions or profiling are performed.

Enquiries are processed to respond to the request, based on consent and, where applicable, requested pre-contractual measures. The network fingerprint is processed under the legitimate interest in service security. Private-area data are processed to authenticate authorised users, manage permissions and protect the application, based on the relevant professional or contractual relationship and legitimate security interests.

Enquiries are delivered to the firm through Gmail or Google Workspace. Google also provides OAuth authentication for authorised users. Necessary hosting, database and security providers may process data under contract. Data are not sold or shared for marketing. Processing outside the EEA must rely on an adequacy decision or another valid GDPR safeguard.

Enquiries and sent replies are stored in the private area for as long as needed to respond, manage the relationship and meet applicable legal obligations or liabilities. They also remain in the mail system used to send them. The anti-abuse fingerprint is deleted no later than 24 hours after its last update. Private-user data are retained while access is authorised and afterwards for the applicable periods.

Where applicable, you may request access, rectification, erasure, objection, restriction and portability at info@bufetecolon.es or the controller’s postal address. Identity verification may be required. Consent may be withdrawn without affecting prior lawful processing. You may complain to the Spanish Data Protection Agency at www.aepd.es.

Required fields are necessary to handle the enquiry; without them the form cannot be submitted. The phone number is optional. Data must be accurate and third-party data may only be provided with a lawful basis.

Do not send documents or unnecessary sensitive information through the form. An enquiry does not itself create a lawyer-client relationship. The form and private area are not intended for minors.

Risk-appropriate technical and organisational safeguards are applied. Information concerning legal enquiries is also subject to applicable confidentiality and professional-secrecy duties.

The website uses no advertising or analytics cookies. The private area uses only technical cookies required for authentication and session maintenance, with a configured maximum duration of eight hours. This policy may be updated when the law or service changes.