Privacy policy
Last updated: 03.10.2026
Data controller
- Firm
- Peralta Rojas Abogados
- Lawyer in charge
- David Peralta Rojas
- NIF
- 49617699-Y
- Bar association
- Ilustre Colegio de Abogados de Sevilla (ICAS) · no. 15.174
- Professional address
- Calle Mendez Nunez 1, 3 izq., 41001 Sevilla
- Contact
- +34 955 314 558 · info@peraltarojas.com
What data we process
- Identification and contact details: name, email, phone, nationality and identity document.
- The information you give us about your situation in Spain, including immigration status, family and employment details.
- Documents needed for the procedure, which may include criminal record certificates (data relating to offences, art. 10 GDPR) or medical certificates (health data, art. 9 GDPR), processed only to file your application.
- Payment data needed to charge our fees. Card details are handled by the payment provider and never stored by us.
Why we process it and on what legal basis
- Answering your enquiry and preparing a quote: steps taken at your request before a contract (art. 6.1.b GDPR).
- Handling the matter you instruct us on and filing it with the authorities: performance of the engagement contract (art. 6.1.b), and for special category data, the establishment and defence of legal claims and your explicit consent (art. 9.2.f and 9.2.a GDPR).
- Meeting the legal duties of a law firm, such as tax, accounting and anti-money laundering rules: legal obligation (art. 6.1.c).
How long we keep it
Enquiries that do not become a matter are kept for up to one year from the last contact. Client files are kept while the matter is open and afterwards for the periods required by law, generally five years, and longer where tax or professional rules require it.
Who receives it
The Spanish authorities with which your procedure is filed (immigration offices, the Large Companies Unit, consulates, the Ministry of Justice). Service providers acting on our behalf under a data processing agreement: web hosting in Spain, email and office software, the firm's case management system and the card payment provider (Stripe). Where a provider is located outside the European Economic Area, transfers rely on an adequacy decision or the European Commission's standard contractual clauses. We do not sell your data or use it for advertising.
Your rights
You can request access, rectification, erasure, restriction, objection and portability, and withdraw consent at any time, by writing to info@peraltarojas.com with a copy of your identity document. If you are not satisfied, you may complain to the Spanish Data Protection Agency (www.aepd.es).
Security and confidentiality
Documents uploaded to the client area are stored outside the public web space and can only be opened by you and the firm. Everything you tell us is covered by lawyer professional secrecy.