In compliance with the principle of transparency and the duty to provide information established by current EU and national data protection legislation, this Policy informs data subjects of the circumstances and conditions under which their personal data is processed, as well as their rights.
This Privacy Policy forms part of the General Terms and Conditions of Use governing this website (hereinafter, the “Website” or the “Site”).
Who is responsible for processing your data?
In accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD), the data controller is:
CASES & LACAMBRA ABOGADOS, S.L.P.
Tax Identification Number (CIF): B65965188
Registered office: Avenida Diagonal, 618, 08021 Barcelona
Email address of the Data Protection Officer: dataprotection@caseslacambra.com
For the purposes of this policy, the data controller shall be referred to as “Cases & Lacambra”.
Cases & Lacambra hereby informs you that it has other companies located in Andorra and Miami (United States). Consequently, Cases & Lacambra informs users that the processing of their personal data by the aforementioned companies will comply with the specific privacy regulations of those countries, in all matters not covered by the GDPR and the LOPD-GDD.
You can find the exact location/address of each of our companies on our Website.
We reserve the right to amend or adapt this Privacy Policy at any time. We recommend that you review it to keep up to date.
For what purpose do we process your personal data?
At Cases & Lacambra, we process the personal data provided to us by our clients and users (hereinafter, the “User” or “Users”) for the following purposes:
- To prepare proposals for professional services and quotations and to follow up on these through communications between both parties.
- To provide the contracted legal services, as well as to manage and maintain the professional relationship with our clients.
- To provide information via electronic means regarding your enquiries.
- To provide business development information relating to our legal services (e.g. newsletters, bulletins, legal updates, marketing communications, etc.) or events via electronic means.
- Invoicing and filing the relevant tax returns.
- To manage the recruitment processes offered by Cases & Lacambra.
How long do we keep your data?
For the duration of the relationship between the parties and, once this has ended, duly blocked for the limitation periods arising therefrom.
What categories of personal data do we collect?
We will process the identification and contact details of our clients’ representatives for the purpose of managing the contractual relationship we have with the legal entities they represent.
If you are a natural person, we will process your identification details (first name, surname, identification document), contact details (telephone number, email address, postal address) and financial details (e.g. activities, businesses, trading licences or bank accounts), taking into account the purposes mentioned in the previous sections.
If you are a candidate in one of our recruitment processes, we will process the information contained in your CV.
What is the legal basis for processing your data?
Where the purpose of processing your personal data is to provide the contracted legal services, manage our existing client relationships, provide information requested by the data subject, or prepare and follow up on proposals for professional services or quotations, the legal basis for such processing will be the existence of a contractual relationship between the parties or the implementation of pre-contractual measures at the request of the data subject.
The processing of your personal data for the purpose of sending business development information relating to our legal services or events by electronic means will be legitimised by the consent given by the data subject or by the legitimate interest of Cases & Lacambra, where applicable.
Furthermore, your personal data may be processed by Cases & Lacambra where necessary to comply with a legal obligation.
In the context of a recruitment process, the purposes for which we will process your personal data are the organisation and management of the said process, to invite you to job interviews and to assess your application and, with your consent, to store your CV for future recruitment processes should you not be selected in the process for which you have applied.
To whom will your data be disclosed?
Your data will not be disclosed to third parties, except where required by law or where you have given your prior consent.
In particular, your data may be disclosed to tax authorities and to banks and financial institutions for the collection of payment for the service provided or product purchased.
To fulfil the purposes set out in this Policy, we will rely on the assistance of service providers who may have access to your personal data in their capacity as data processors. Cases & Lacambra has entered into the relevant data processing agreement with these providers, which imposes, amongst other things, the following obligations on them: to implement appropriate technical and organisational measures; to process personal data for the agreed purposes and solely in accordance with the instructions provided by Cases & Lacambra.
What rights do you have?
- To access your personal data, as well as to obtain confirmation as to whether or not Cases & Lacambra is processing personal data concerning you.
- To request the rectification of your data if it is inaccurate or incomplete.
- To request the erasure of your data when, amongst other reasons, the data is no longer necessary for the purposes for which it was collected. In cases of rectification or erasure, Cases & Lacambra will notify each of the recipients to whom your personal data has been disclosed, unless this is impossible or would require a disproportionate effort.
- To object to the processing of your data, in which case Cases & Lacambra will cease to process it, unless there are compelling legitimate grounds for the processing that override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
- To withdraw any consent given. However, the withdrawal of consent shall not affect the lawfulness of processing based on consent given prior to its withdrawal.
- To request the restriction of the processing of your data.
- Not to be subject to decisions based solely on the automated processing of your data, including profiling, which produce legal effects or significantly affect you.
- To data portability, whereby your data will be provided to you in a structured, commonly used and machine-readable format.
- To lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing of your data does not comply with current legislation.
If you change any of your details, please let us know so that we can keep them up to date.
How can you exercise your rights?
To exercise your privacy rights, please contact us at the postal or email addresses provided at the beginning of this Policy, providing sufficient proof of your identity.
If there is reasonable doubt as to your identity, we will be obliged to ask you for additional identification information in order to process your request.
How long does it take us to respond to a request to exercise your rights?
One month from receipt, extendable by a further two months, provided that the exercise of the right so requires due to its complexity, in which case you will be notified in due course.
What security measures do we apply?
We have adopted an optimal level of protection for the personal data we process and have implemented all the technical means and measures at our disposal, in line with the state of the art, to prevent loss, misuse, alteration, unauthorised access and theft.
Do we use cookies?
Yes, it uses other types of cookies that are not strictly necessary. You can consult the cookie policy via the relevant link, available on our Website.
Date of last update: 16 March 2026