Skip to main content

Cosín LEGAL

Privacy policy

This policy explains how the personal data provided through the website cosinlegal.com is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).

1. Data controller

2. What data we process and why

2.1. Contact form

We collect your name, email address, subject and the content of your message.

  • Purpose: to handle the enquiry and maintain the communication arising from it.
  • Legal basis: the consent of the person concerned when sending the form (Art. 6.1.a GDPR) and the application of pre-contractual measures at their request (Art. 6.1.b GDPR).
  • Retention: for the time needed to reply and, afterwards, for the limitation periods of any liabilities arising from the contact.

2.2. Contact by email, telephone or WhatsApp

We process the data that the person themselves provides in their communication.

  • Purpose: to handle the request received.
  • Legal basis: consent and pre-contractual measures (Arts. 6.1.a and 6.1.b GDPR).
  • Retention: while the communication continues and during the statutory limitation periods.

2.3. Provision of legal services

When a professional engagement is formalised, we process identification, contact and financial data and whatever else is necessary to handle the matter, including, where applicable, special categories of data.

  • Purpose: provision of the contracted legal service and compliance with the associated legal obligations.
  • Legal basis: performance of the contract (Art. 6.1.b GDPR), compliance with legal obligations (Art. 6.1.c GDPR) and, for special categories of data, the establishment, exercise or defence of legal claims (Art. 9.2.f GDPR).
  • Retention: for the duration of the engagement and, afterwards, for the periods required by tax, commercial, professional-ethics and anti-money-laundering regulations.

2.4. Browsing the website

Technical browsing data is processed as described in the Cookie policy.

3. Disclosure of data to third parties

Data is not disclosed to third parties except where legally required. The providers necessary for the operation of the service do have access to it, as data processors under a contract in accordance with Article 28 of the GDPR:

  • Web hosting provider: [PENDING]
  • Email provider: [PENDING]
  • Accounting firm or advisers, where applicable: [PENDING]

In the course of providing legal services, data may be disclosed to courts and tribunals, public authorities, the opposing party and their legal representatives, and any other participants necessary for the defence of the matter.

4. International transfers

No international transfers of data outside the European Economic Area are carried out, except those that might arise from the providers listed, in which case they will be made with the safeguards provided for in Chapter V of the GDPR. [PENDING] To be confirmed with each provider.

5. Rights of data subjects

Anyone can exercise the following rights by writing to info@cosinlegal.com, stating the right they wish to exercise and attaching a copy of a document proving their identity:

  • Access: find out what data about you is being processed.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion of the data when it is no longer necessary.
  • Objection and restriction: object to the processing or request its restriction in the cases provided for by law.
  • Portability: receive the data in a structured, commonly used format.
  • Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

If you consider that your rights have not been properly addressed, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.

6. Security

Appropriate technical and organisational measures are applied to ensure a level of security appropriate to the risk, including encrypted transmission via HTTPS and access control to the systems. The owner is also bound by the professional secrecy inherent to the legal profession.

7. Minors

The services and forms on this site are not aimed at children under 14. Data from minors is not knowingly collected without the consent of those who hold parental authority or guardianship.

8. Changes to this policy

This policy may be modified to adapt it to legislative changes or to changes in the processing carried out. Regular review is recommended.

Last updated: [PENDING]