Privacy policy
We process your data in accordance with Regulation (EU) 2016/679 (GDPR) and the Spanish Data Protection Act (Organic Law 3/2018, LOPDGDD). This policy explains what data we process, why, and what rights you have.
Controller.
Gonzalo Pando Ragals (Espriu Legal), tax ID (NIF) 46343475Q, address c/ Salvador Espriu 27, 4º 1ª, 08005 Barcelona, Spain. Email: info@espriulegal.com.
What data we process.
- The data you provide in the contact form: your name, email address and the content of your message.
- The data you provide when you write to us by email.
- If you instruct us on a matter, the data we need to provide and invoice our services.
This website does not use analytics or advertising tools.
Purposes.
- To respond to your enquiries.
- To manage the engagement and our relationship with you as a client.
- To comply with our legal obligations as a law firm, including tax obligations and, where applicable, anti-money laundering obligations.
Legal basis.
Your consent, to respond to the enquiries you send us; performance of the services contract, when you instruct us on a matter; and compliance with legal obligations. You may withdraw your consent at any time, without affecting any processing carried out beforehand.
Retention.
Enquiries are kept for as long as necessary to respond to them and are then blocked for the limitation periods of any potential liability. Client data is kept for the duration of the professional relationship and thereafter for the periods required by law; case files are kept for at least five years after the end of the engagement, as set out in our terms of engagement.
Recipients.
We do not disclose your data to third parties unless required by law or where necessary for the matter and with your knowledge (for example, courts, notaries or registries).
Providers of technical services to us, such as website hosting and email, access the data as processors, under contract and with the safeguards required by the GDPR.
International transfers.
Only if you choose to show the Google map on the Let’s talk page may Google process data about your browsing in the United States. Google LLC participates in the EU-US Data Privacy Framework.
Professional secrecy.
Any information you entrust to us is protected by legal professional privilege.
Your rights.
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to info@espriulegal.com or to our registered office, stating the right you wish to exercise.
If you believe we have not processed your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Security.
We apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.
Changes to this policy.
We may update this policy to reflect changes in the law or in the website. The version in force is the one published on this page. Last updated: October 2026.

