Privacy Policy

Last updated: 8/12/2025

Introducción

Welcome to the website aclboutiquelegal.com. Your privacy is of utmost importance to us. Through this Privacy Policy, we inform you clearly and transparently about what personal data we collect, how we process it, and your rights, in compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).

Access to and use of this website implies full and unreserved acceptance of this policy.

  1. Data Controller

The person responsible for processing your personal data is:
Data Controller: Ana Castaño López.
Tax ID: 70880930J.
Business Name: ACL Boutique Legal.
Professional Address: Calle Tenor Viñas, 4-6, 3º-2ª. 08021. Barcelona.
Email:
info@t4o.d12.myftpupload.com.
Phone: 931 820 179/ 671 377 204.
Bar Association Details: Member No. 2,971 ICASBD.
Academic Qualification: Law Degree from the University of Salamanca.
Applicable Professional Regulations: Professional activity is governed by the General Statute of the Spanish Legal Profession and the Code of Ethics for Lawyers.

  1. Principles Applicable to Data Processing

In processing your personal data, we will apply the following principles, in accordance with the requirements of the GDPR:

  • Lawfulness, fairness and transparency: We will always require your consent to process your data for one or more specific purposes, which we will inform you of beforehand with absolute transparency.
  • Data minimization: We will only request the data that is strictly necessary in relation to the purposes for which we require it.
  • Limitation of the retention period: The data will be kept for no longer than is necessary for the purposes of the processing.
  • Integrity and confidentiality: Your data will be processed in such a way as to ensure adequate security and guarantee its confidentiality, as established in Article 5. Duty of confidentiality.

  1. Purpose of Processing Personal Data

We collect and process your personal data for the following purposes:

  1. Contact Form:
    • Data collected: Name, email address, phone number (optional) and the content of your message.
    • Purpose: To manage and respond to inquiries, requests for information or petitions that you make through the contact form.
  2. Newsletter Subscription:
    • Data collected: Email address.
    • Purpose: To send you periodic communications, current legal news, blog articles, and advertising about our services, provided we have your explicit consent.o.
  3. Professional Relationship Management:
    • Data collected: Identification, contact and financial data necessary for the provision of the service.
    • Purpose: To manage the pre-contractual and/or contractual relationship if you request our legal services, including the preparation of budgets, the provision of legal advice and the corresponding invoicing.
  4. Browsing Data (Cookies):
    • Purpose: To improve your user experience, analyze website traffic, and ensure its proper functioning. For more information, please see our Cookie Policy.

  1. Legal Basis for the Processing

The processing of your data is based on the following legal grounds:

  • Data subject consent (Art. 6.1.a GDPR): To respond to your inquiries through the contact form and to send you our newsletter. You may withdraw your consent at any time.
  • Application of pre-contractual measures or execution of a contract (art. 6.1.b GDPR): For the management of the legal services you request from us.
  • Compliance with a legal obligation (art. 6.1.c GDPR): To comply with tax, fiscal and other legally required obligations.
  • Legitimate interest (art. 6.1.f GDPR): To maintain professional relationships, protected under Article 19. Processing of contact data of individual entrepreneurs and liberal professionals.

  1. Data Retention Period

We will retain your personal data only for as long as necessary to fulfill the purpose for which it was collected:

  • The query data will be kept until the final resolution of the queries.
  • Customer data will be kept for the duration of the professional relationship and, once it has ended, for the legal periods of limitation of liabilities (tax, civil, etc.).
  • Data for sending commercial communications will be kept until you revoke your consent.

  1. Data Recipients

We will not share your personal data with third parties, unless there is a legal obligation to do so (for example, to the Tax Administration or to Courts and Tribunals).

However, for the proper provision of the service, third-party providers (data processors) may need access to your data, for example:

  • Web hosting providers.
  • Tax and accounting advice.
  • Email marketing platforms.

They have all signed the corresponding data processing agreements, guaranteeing compliance with the regulations.

  1. Rights of Interested Parties

You can exercise the following rights at any time:

  • Access: Request what personal data we have about you.
  • Rectification: Requesting the correction of inaccurate data.
  • Deletion: Request the deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
  • Objection: To object to the processing of your data.
  • Restriction of processing: Request the restriction of the processing of your data in certain circumstances.
  • Portability: To receive your personal data in a structured, commonly used and machine-readable format.

To exercise these rights, you can send a request by email to info@t4o.d12.myftpupload.com indicating your name, surnames and attaching a photocopy of your ID card or equivalent document.

  1. Security Measures

I have adopted all the necessary technical and organizational measures to guarantee the security and integrity of the personal data I process, and to prevent its loss, alteration and/or access by unauthorized third parties.

  1. Changes to the Privacy Policy

I reserve the right to modify this policy to adapt it to new legislation or case law. Any modifications will be duly published on this website. Users will be informed of any substantial changes that affect the purposes of data processing or their rights.

  1. Complaints to the Supervisory Authority

Si consideras que el tratamiento de tus datos personales infringe la normativa, tienes derecho a presentar una reclamación ante la autoridad de control competente, en este caso, la Agencia Española de Protección de Datos (AEPD), a través de su sede electrónica o en su domicilio.