Privacy Policy and Data Protection

Website owner.

• Company Name: LAWYOU SERVICIOS PARA JURISTAS, S.L. (hereinafter referred to as «LAWYOU»).
• CIF: B75164913.
• Company address: Paseo Mikeletegi, 56, 20009 San Sebastián, Gipuzkoa.
• Corporate address: Paseo Mikeletegi, 56, 20009 San Sebastián, Gipuzkoa.
• Contact telephone number: 943477365.
• Statements, Code of Conduct and applicable regulations: Ethical codes (Code of Ethics of the Spanish and European Union Lawyers), other regulations applicable to the practice of the profession (consult BOE).
• Statements, Code of Conduct and applicable regulations: Ethical codes (Code of Ethics of the Spanish and European Union Lawyers), other regulations applicable to the practice of the profession (consult BOE).
• Website: https://lawyoulegal.com/
• Email: dpo@lawyoulegal.com

Regulatory Compliance Statement.

Through this Policy you are informed that your personal data will be processed in accordance with the principles of transparency, purpose limitation, data minimization, accuracy, completeness and confidentiality, as well as respecting the other obligations and guarantees set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

Type of data subject to processing.

1. Name, address, e-mail address, telephone number, ID card number or other recognized personal identification document number

.

2. Personal names of the persons involved, technical data, file numbers, relevant dates, information related to the issue in question and documentation and reports related to your inquiry.
3. Financial or financial data or other information related to your inquiry.
4. Economic or financial data, when the matter in question so requires; or, when payment for legal services is necessary.
5. Academic and professional data, degrees and proof of training, professional experience and academic records, in the case of receiving job applications or spontaneous candidatures.

Ways of obtaining your personal data.

1. Web forms, via telephone and e-mails.
2. Social networks through LAWYOU profiles on the Internet, such as Google (My Business), Linkedin, Facebook, Twitter or Instagram.
3. Web browsing (cookies) on the website www. lawyoulegal.com.
4. In case you provide your consent, data provided by third parties such as geomarketing companies, RRSS and companies that provide information on the economic activities of freelancers or professionals.

Purposes of the processing of your personal data.

The purposes of the processing are:

1. To provide our legal assistance and defense services: resolution of legal consultations, handling of procedures or issues in progress, invoicing and collection management.
2. Commercial prospecting and informative communications.
3. Profiling for the personalized sending of commercial proposals.
4. Selection of candidates to fill vacancies for both employees and external collaborators.
5. Selection of candidates to fill vacancies for both employees and external collaborators.
6. Complying with our legal obligations.
7. Develop our work capacity, conduct internal research and statistics.

.

Time of conservation of personal data.

In compliance with current regulations, LAWYOU informs that the data will be retained for the period strictly necessary to comply with the provision of its services, the billing of these, if applicable depending on the services requested, as well as, statistical purposes. Also when the processing of the data is necessary for the satisfaction of legitimate interests pursued by the controller, provided that such interests do not override the interests or fundamental rights and freedoms of the data subject that require the protection of personal data.

Customers’ personal data will be processed until the end of the contractual relationship. The period of conservation of personal data will be the minimum necessary, being able to be kept until:

1. 4 years: Law on Infractions and Penalties in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of salaries…); Arts. 66 et seq. General Tax Law (accounting books…)
2. 5 years: Art. 1964 Civil Code (personal actions with no special time limit)
3. 6 years: Art. 30 Código de Comercio (accounting books, invoices…)
4. 10 years: Art. 25 Prevention of Money Laundering and Terrorism Financing Law.
5. No time limit: disaggregated and anonymized data.

Personal, academic and professional data received from job offers or spontaneous applications will be kept for a maximum period of one year from the receipt of the data, without prejudice to the exercise of the right of deletion of the data subjects.

We always try to use secure tools whose servers are preferably located in Spain, or failing that in a member state of the European Union, or that comply with European law according to the guidelines and recommendations of the Spanish Data Protection Agency.

Legal basis of the treatment.

Prior to sending any request for information through any contact form or contracting our services, as a user you must agree to have read this privacy policy and the conditions of use of this website, in order to provide your express and informed consent to the processing of your data for the purposes indicated in this privacy policy. Such approval entails your express consent to:

• The incorporation of your personal data in the personal data files of LAWYOU.
• Access by LAWYOU to the data that, in accordance with the infrastructure of this company, is required to contact the user, provide our services, manage comments on the website, validations or recommendations.
• The authorization to communicate electronically with you in response to your inquiries or for sending advertising information.
• To store telephone conversations when it is precious for statistical and quality of service purposes.
• To store telephone conversations when it is precious for statistical and quality of service purposes.
• To store telephone conversations when it is precious for statistical and quality of service purposes.
• The periodic realization of analysis studies of the company for statistical purposes based on the data provided. As a result of your registration and interaction through the LAWYOU platform may collect and store the following information of a personal nature:
• Tract your name, email address and contact information.
• Tract your name, email address and contact information.
• To process data on your activities on the website and/or RRSS (content that you visit or are related to your browsing profile).
• To process your comments and ratings on website and/or RRSS.
• To process your comments and ratings on website and/or RRSS.
• To process your comments and ratings on website and/or RRSS.
• Treat the electronic communications you send us or data you issue in your queries.

Once we have received from you a firm order for the provision of legal advice or assistance, the legal basis for the processing will also be the execution of the contract itself..

We will not use your data for any other purpose not expressed in this privacy policy, nor will we send additional information not requested by your express consent.

User commitments.

Users must guarantee the truthfulness, accuracy, authenticity and validity of the personal data provided or that have been collected. As long as you do not inform us otherwise, we will understand that your data have not been modified, that you agree to notify us of any variation and that we have your consent to use them for the aforementioned purposes. The user is solely responsible for any damage or harm, direct or indirect, that may be caused to LAWYOU or a third party, if you provide false data or data of third parties causing deception, damage or harm.

LAWYOU will not be responsible for incidents on personal data when they are derived from an attack or unauthorized access to the systems in such a way that it is impossible to detect by the security measures implemented or when it is due to the lack of diligence of the user regarding the guard and custody of their access passwords or their own personal data.

Transfer of personal data to third parties.

LAWYOU will not transfer or communicate to any third party your data, except:

1. In the cases provided for by law or when the provision of a service implies the need for a contractual relationship with a Data Processor.

1. To companies collaborating with LAWYOU in the telecommunications, financial, insurance, technology, energy, audiovisual, security, education, leisure, automotive, advertising, mass consumption and «third sector» sectors, in order to provide you, by electronic and/or conventional means, with commercial information, provided that we have your prior consent.

On the occasion of the request for the provision of our services your data may be transferred to the following recipients:

1. Employees and lawyers collaborating with LAWYOU for the purpose of providing the requested services, with whom the corresponding confidentiality contract has been agreed upon.
2. To the administrative and tax agency that collaborates with LAWYOU.
3. To the administrative and tax agency that collaborates with LAWYOU.
4. To Cloud service providers that comply with data protection regulations.
5. To the Office of Consumers and Users in case of any claim.
6. In the legally established cases, as is the case of Seblac, Courts and Tribunals, tax authorities, labor authorities, Security Forces and Corps, etc.

LAWYOU ensures the confidentiality of the data provided and guarantees that, in no case, will be transferred for any other use without prior express consent of our users.

Privacy of minors.

We do not collect personal data from minors. It is the responsibility of the parent/legal guardian to ensure the privacy of minors, making every effort to ensure that they have authorized the collection and use of the minor’s personal data. In the event that LAWYOU detects users who may be under 14 years of age, LAWYOU reserves the right to request a copy of their ID card or equivalent document, or, where appropriate, authorization from their parents or guardians, causing cancellation in case of failure to prove compliance with this requirement or lack of response.

Exercise of your rights.

LAWYOU informs that it will proceed to treat the data in a lawful, loyal, transparent, adequate, relevant, limited, accurate and updated manner. That is why LAWYOU undertakes to take all reasonable measures to ensure that they are deleted or rectified without delay when they are inaccurate.

At any time the user can modify their preferences for commercial shipments, as well as exercise their rights of access, rectification, limitation, cancellation, opposition and portability provided for in the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, by means of a written communication addressed to LAWYOU via email to dpo@lawyoulegal.com. In this case, the user must attach a copy of his/her national identity card, passport or other valid document that identifies him/her. All this without prejudice that, based on the legitimate interests of the company, some data may be blocked and stored.

In the event that consent has been granted for any specific purpose, the User has the right to withdraw consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

If a User considers that there is a problem with the way in which LAWYOU is handling his or her data, he or she may address his or her complaints to the security officer or to the corresponding data protection authority, being the Spanish Data Protection Agency the one indicated in the case of Spain.

Blog and social networks.

The data incorporated into the form to make comments on this website or RRSS may be read by third parties, also may be read the name and other data that reflects. If you make comments on the website of LAWYOU or in your profile on RRSS you assume the visualization of the comment and the data used to assign the comment in its realization.

Through our website you can access the social networks Facebook, Twitter, Youtube or LinkedIn open access to all users. These are websites where the user can register and follow us for free. In these social networks users can learn about our activities, opinions, access to photos and videos. Users of these social networks should be aware that this site is independent of the LAWYOU platform, and is open, that is, it is visible to all users, and the privacy policies to be applied to these contents are those set by Facebook, Twitter, YouTube or LinkedIn. LAWYOU is not the owner of the social networks.

Cookies

Like other Internet portals, LAWYOU uses a technology called «cookies» to collect information about user interactions and how users use the Websites.

For detailed information on how LAWYOU uses cookies, please see the Cookie Policy here.

Security.

We store user’s personal data on secure servers, protected against the most common types of attacks.

However, and given that there is no invulnerable technology, the user must also put the means at their disposal to maintain the level of security of their data, by using strong passwords, periodically changing their passwords, avoiding using the same in different accounts, as well as avoiding taking note of them in any physical or unencrypted media.

LAWYOU uses state-of-the-art technologies to protect your personal data and information, ensuring the strictest confidentiality and application of technical and organizational information security tools (passwords, physical security, data encryption, etc.) in accordance with the applicable legislation, as well as keeping the security document updated at all times with the regulatory measures established.

The objectives of the information security policy are as follows:

• The information is protected against loss of availability, confidentiality and integrity.
• The information is protected against loss of availability, confidentiality and integrity.
• The information is protected against unauthorized access with AES-256 encryption.
• Business requirements, legal or regulatory requirements, and contractual security obligations are met.
• Incidents of unauthorized access to information are protected against loss of availability, confidentiality and integrity.
• Security incidents are reported and appropriately addressed.
• Security incidents are reported and appropriately addressed.
• Controls are in place to ensure that security incidents are reported and appropriately addressed.
• Controls are established to ensure adherence to the Security Policy, to align with the organization’s risk management strategy and to establish risk estimation criteria.
• The Information Security Manager, together with the company’s Data Protection Officer, will be responsible for maintaining this policy, procedures and providing support in its implementation, as well as ensuring its compliance.
• Each employee is responsible for complying with this Policy and its procedures as applicable to his or her position.

LAWYOU will not be responsible for incidents on personal data when they are derived from an attack or unauthorized access to the systems in such a way that it is impossible to detect by the security measures implemented or when it is due to the lack of diligence of the user regarding the custody and safekeeping of their access passwords or their own personal data.

Modification.

LAWYOU may modify this privacy policy at any time by posting it on this website, which will always state the date of the last applicable update.

It is the individual responsibility of the owner of the data to read this updated document, in order to know their rights and obligations in this regard at all times.

This privacy policy is updated as of January 2, 2020 and is currently in force.

In order to facilitate the exercise of your rights, we provide links to the application form for each of your rights:

Exercise form for the right of access.

Form for exercising the right to rectify

Exercise of the right of objection form

Form for exercising the right to erasure (right «to be forgotten»)

Form for exercising the right to limit the processing of personal data

Form for exercising the right to portability

Form for exercising the right not to be subject to automated individual decisions.