Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is:

• Entity: Salama Legal SLP
• Responsible lawyer: Jacob Salama
• Address: Plaza de Andalucía 6, 29620 Torremolinos, Málaga, Spain
• Email: taxlegalspain@gmail.com
• Phone: +34 644 121 802

2. Data We Collect

We collect personal data only when you voluntarily provide it to us:

• Contact form: name, email address, phone number, message content
• WhatsApp / email contact: name, phone number, email address and any information you include in your message
• Analytics cookies (with your consent): anonymised usage data via Google Analytics — see our Cookie Policy for full details

We do not collect sensitive categories of personal data (health, financial account numbers, etc.) through this website.

3. Purposes and Legal Basis for Processing

Purpose	Legal Basis
Responding to enquiries and providing legal services	Pre-contractual measures / performance of contract (Art. 6(1)(b) GDPR)
Legal and regulatory compliance	Legal obligation (Art. 6(1)(c) GDPR)
Website analytics and improvement	Consent (Art. 6(1)(a) GDPR) — optional
Legitimate business interests (fraud prevention, security)	Legitimate interests (Art. 6(1)(f) GDPR)

4. Data Retention

We retain your personal data only for as long as necessary:

• Enquiries / pre-contractual communications: up to 1 year if no engagement follows
• Client files: 10 years following conclusion of the matter, in compliance with Spanish professional and tax obligations
• Analytics data: 26 months (Google Analytics default), subject to your consent

5. Data Sharing and International Transfers

We do not sell or rent your personal data. We may share it with:

• Google LLC (analytics) — processed in the US under Standard Contractual Clauses and the EU–US Data Privacy Framework
• Spanish notaries, land registries, tax authorities (AEAT) — only when strictly required to provide the legal service you requested, under Art. 6(1)(c) GDPR
• Professional third parties (translators, specialist lawyers) — bound by confidentiality obligations and data processing agreements

6. Your Rights

Under GDPR and LOPDGDD, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten"), subject to legal retention obligations
• Restrict or object to processing
• Portability — receive your data in a machine-readable format
• Withdraw consent at any time, without affecting the lawfulness of prior processing
• Lodge a complaint with the Spanish Data Protection Authority (AEPD): www.aepd.es

To exercise any of these rights, contact us at taxlegalspain@gmail.com. We will respond within one month.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. All data transmitted via contact forms is encrypted in transit (HTTPS/TLS).

8. Cookies

For full information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

Last updated: May 2026