Privacy Policy

http://www.trulaw.es/ This is an internet domain owned by Marc Truyol Rodríguez, whose national identity number is 43150427N and whose registered address is C/Varón de Pinopar, No. 4, mezzanine floor, 07002 Palma de Mallorca.

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights, we set out our Privacy Policy below, I hereby inform you about the processing of personal data in connection with the engagement of legal services.

Furthermore, I undertake to guarantee the confidentiality, integrity and security of the personal data processed, and to use it solely for the legitimate purposes expressly set out in this Privacy Policy, in the course of my professional practice providing legal advice and representation in the fields of criminal law and commercial law.

I reserve the right to amend this Privacy Policy to bring it into line with new legislation, case law or interpretations issued by the Spanish Data Protection Agency. In such cases, these changes will be announced, clearly indicating the amendments made and giving due notice in advance.

What sort of data will be processed?

• Identifying data: (Tax Identification Number/National Identity Card number, Address, Image/voice, Social Security number/Mutual Insurance number, Telephone number, Physical characteristics, First name and surname, Signature, Electronic signature, Health card)
• Personal characteristics (Marital status, Family details, Date of birth, Age, Sex, Nationality, Mother tongue, Physical or anthropometric characteristics)
• Financial and insurance matters (Income, earnings, investments, assets, credit, loans, guarantees, bank details, pension schemes, retirement, payroll details, tax deductions/tax information, insurance, mortgages, benefits, credit history, credit cards)
• Transactions involving goods and services (Goods and services supplied by the affected party, Goods and services received by the affected party, Financial transactions, Compensation/Indemnities)
• Social circumstances (Accommodation/housing characteristics, Military status, Property/possessions, Interests and lifestyle, Membership of clubs/associations, Licences/permits/authorisations)
• Academics and professionals (Education, qualifications, academic record, professional experience, membership of professional bodies or associations)
• Employment details (Occupation, Job titles, Non-financial payroll data, Employee history)
• Commercial information (Activities and businesses, Business licences, Subscriptions to publications/media, Artistic, literary, scientific or technical works)
• Special categories of data (political opinions, trade union membership, religious or philosophical beliefs, racial or ethnic origin, genetic data, biometric data, health data, data concerning sex life or sexual orientation)
• Pseudonymized data (Data that does not allow the direct identification of customers)

For what purposes will the data be used?

The personal data collected through this website, as well as that provided by interested parties, potential parties and third parties related to the matters entrusted, will be processed for the following purposes:

• Provision of professional legal services: Studying, managing, and processing legal matters entrusted to us by clients in the areas of criminal law, commercial law, and other practice areas of the firm. Preparing reports, legal opinions, procedural documents, contracts, and any other documentation necessary for legal defense or advice.
• Management of the contractual and professional relationship: Formalizing professional engagements. Managing invoicing, fee collection, accounting, and compliance with administrative obligations arising from the provision of the service.
• Handling inquiries and information requests: Responding to inquiries made through contact forms, email, telephone, or other available channels. Managing requests for quotes or initial assessments of legal matters.
• Representation and defense of interests: To exercise the representation, defense and legal assistance of clients before courts, tribunals, public administrations, regulatory bodies, notaries, registries and other public or private entities when necessary for the provision of the contracted service.
• Supplier and collaborator management: Maintain professional, administrative and commercial relationships with suppliers, experts, solicitors, external collaborators and other professionals linked to the firm’s activity.
• Sending professional communications: Sending information related to the legal services provided, the management of files and other communications necessary for the development of the professional relationship.

What are the legitimate grounds for processing?

The personal data of the data subject may be processed based on legitimate interest, particularly to provide the service and to send communications, both electronically and by traditional means, related to the services and activities.

When the legal basis for processing is the data subject’s consent, I will request explicit consent for the processing of their personal data. The data subject may withdraw this consent at any time by sending an email to the following address: m.truyol@icaib.org

How long will the data be kept?

The data of the interested party will be kept for as long as necessary, the relationship as a client continues and to comply with legal obligations.

To whom can we communicate the data?

Personal data will not be transferred to third parties, except where there is a legal obligation to do so, when the data subject has given their express consent, or when such transfer is necessary for the proper development and execution of the contractual relationship and the provision of the requested services.

In order to manage the services you request, in some cases it will be necessary to transfer data to service providers for administrative purposes, storage, or to support communication. In such cases, the corresponding data processing agreement will be in place.

International data transfers outside the European Economic Area are not foreseen, except in cases where it is strictly necessary for the provision of the requested service or when the data subject has given their express consent after having been duly informed of the applicable safeguards.

Likewise, when such processing is necessary for compliance with a legal obligation or a requirement of competent public authorities, the data may be communicated to said authorities.

How can rights be exercised?

Interested parties may exercise their rights of access, rectification, objection, and erasure of their data, as well as request the restriction and portability of said data, by sending an email to m.truyol@icaib.org.

In the following cases:

• To rectify inaccurate data or, where applicable, request its deletion (right to be forgotten) when, for example, you have withdrawn your consent. In that case, we will only retain them for the exercise or defense of legal claims and/or for compliance with a legal obligation.
• To request the limitation of the processing of data when, for example, the data is no longer necessary for the purposes for which it was collected.
• To request data portability in an automated format that allows its copying, transfer and transmission, when the processing is carried out by automated means.
• Furthermore, you may file a complaint with the Supervisory Authority (Spanish Data Protection Agency www.agpd.es