Privacy policy

WINKELS ABOGADOS is a law firm specialising in family law and in particular in international family law. Winkels Abogados hereby informs users of the site of the processing and uses to which the personal data collected by the firm in relation to legal advice is subject. In compliance with these principles, our data protection policy is constructed and communicated in accordance with the applicable regulations, particularly in relation to EU Regulation 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter, GDPR) and Law 3/2018, of 5 December, on Data Protection and the Guarantee of Digital Rights. The firm has also adopted the technical and organisational measures necessary to guarantee the confidentiality, security and appropriate processing of personal data, preventing its alteration, loss, processing or unauthorised access in accordance with the stipulations of the applicable regulations, taking effective measures and in any case complying with the level of security appropriate to the level of the data processed. This work is carried out on an ongoing basis, taking into account legislative or societal developments. This policy may change over time due to possible legislative changes or other business management reasons. Whenever a change occurs, it will be immediately reflected on the website, and the appropriate notifications will be made, where appropriate. The firm manages data of natural persons in the performance of a professional position or function, as well as personal data in the private sphere. Both categories have been taken into account in establishing this privacy policy. The entity may act as either a CONTROLLER or a PROCESSOR. The privacy policy addresses and covers both. WHO IS THE DATA CONTROLLER? Identity: WINKELS ABOGADOS (Isabel Winkels Arce). Postal address: Calle Velázquez, 26 28001 Madrid. Telephone: 913 502 845. E-mail: DATA PROTECTION OFFICER Isabel Winkels Arce. PURPOSE OF DATA PROCESSING AND STORAGE We process the information provided to us by our customers and other interested parties for the following purposes: a) PURPOSES OF A CONTRACTUAL NATURE, in relation to associates, suppliers, collaborators and employees, to carry out the management of the provision of the rights and obligations arising from the contractual relationship. b) PURPOSES BASED ON THE CONSENT OF THE INTERESTED PARTY: For information purposes in relation to the activities and actions of the company. c) PURPOSES BASED ON LEGITIMATE INTEREST, pursuant to the provisions of Article 19 of the LOPDGDD (Organic Law 3/2018 of 5 December) and Article 6.1.f) of EU Regulation 2016/679. In relation to the data referring to the counterpart of its clients, the legitimacy of the right of all citizens to legal assistance, enshrined in Article 24.2 of the Constitution, and developed by the laws regulating each of the Jurisdictional Orders, in the precepts referring to the representation and defence of the parties. The data are processed as CONTROLLER OF THE PROCESSING, when they are collected and processed by us. The data is processed in the capacity of PROCESSOR, when the firm processes the data in order to provide a service to a third party which is the data controller. RETENTION OF DATA The personal data provided shall be kept a) For the time required to fulfil the purpose for which they are collected, or as required by the contractual relationship, including the time required, in accordance with the applicable regulations, to fulfil the relevant obligations and actions that may arise therefrom. b) As long as their deletion is not requested by the data subject. It will be blocked when the first of the two aforementioned events occurs. From that moment onwards, it shall remain at the exclusive disposal of Judges and Courts, the Public Prosecutor’s Office or the competent Public Administrations, in particular the data protection authorities, for the attention of possible liabilities arising from the processing, during the period of limitation of the latter. Once the aforementioned period has expired, the data will be deleted. Profiling is not carried out. LAWFUL PROCESSING As CONTROLLER OF THE PROCESSING, the legal basis for the processing of your data is based on: a) In the contractual relationship and execution of the contract entered into with us. b) In the event that you have expressly given your consent, the legal basis is such consent. c) Legitimate interest, pursuant to article 19 of the LOGPGDD. As the TREATMENT CONTROLLER, it is the responsibility of the entity that has contracted us as the service provider, in its capacity as TREATMENT CONTROLLER, to establish the legitimacy and model of processing. RECIPIENTS OF THE DATA The data is communicated to our partners who perform services as subcontractors, legal firms, and processing partners. In these cases, the corresponding data processing contract is signed with the recipient, as required by the General Data Protection Regulation. INTERNATIONAL DATA TRANSFERS In connection with any transfer of your personal data to countries outside the EEA, the firm will implement appropriate specific measures to ensure an adequate level of protection for your personal data. USERS’ RIGHTS a) Any person has the right to obtain confirmation as to whether or not we are processing personal data concerning them. b) Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. c) In certain circumstances provided for in Article 18 GDPR, data subjects may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defence of claims. d) Data subjects may object to the processing of their data for marketing purposes, including profiling. The Foundation will stop processing the data, except for compelling legitimate reasons or for the exercise or defence of possible claims. e) Under the right to portability, data subjects have the right to obtain the personal data concerning them in a structured, commonly used and machine-readable format and to transfer it to another controller. EXERCISE OF RGDP RIGHTS BY THE USER By writing to the addresses indicated above. COMPLAINT TO THE SPANISH DATA PROTECTION AGENCY If you consider that the Foundation has not correctly dealt with your request, you may apply to the Spanish Data Protection Agency, whose details can be consulted at CATEGORIES OF DATA WHAT CATEGORIES OF DATA DO WE PROCESS? a) Identification data. b) Data on your function or professional activity. c) Family and financial data. Special categories of Article 9 and 10 of the GDPR may be processed. In these cases, RED LEAF complies with the requirements of Articles 9 and 10, and explicit consent is collected. The data received or collected are those necessary to fulfil the stated purposes, and are treated confidentially in accordance with the privacy and security policies established by the firm. The data received or collected are those necessary to fulfil the purposes indicated. PROVENANCE As CONTROLLER OF THE PROCESSING, the personal data that we process comes from the information that you provide when you request services or resources from us, access our website, or establish any type of relationship with us, directly or indirectly. As TREATMENT CONTROLLERS, the data comes from the TREATMENT CONTROLLER, or we collect it for it in the course of providing the service contracted with the CONTROLLER.   Date of last revision: 21/06/2020