Privacy Policy

According to the specifications set out in the General Data Protection Regulation 2016/679 of the European Parliament and of the Council (hereinafter referred as “GDPR”), Pena Fraga Law Firm (“we” or “us”) have drafted all relevant information which is applicable to the processing of its clients personal data (“you” or “your”). We aim to be transparent about how your details are processed as well as encourage to make you aware of the legal implications of sharing your data.

Nature of the data

The source of the personal data processed may be any of the following:

We may collect the following details including but not limited to your name, home address, email address, phone number, ID number, Passport Number, any sort of legal records you make us available to assess your case which may include personal details, ad hoc information including personal data as solely required to provide the services hired.

Data protection principles applicable to our processing

Under the GDPR, we process your data according to the following key principles:

  • Lawfulness, fairness and transparency
  • Purpose limitation
  • Data minimisation
  • Accuracy
  • Storage limitation
  • Integrity and confidentiality (security)
  • Accountability

How we get the information and why we do have it

Under the GDPR, the lawful bases we rely on for processing your personal information are:

  • Your consent via our contact form. You can remove your consent at any time. You can do this by contacting:
  • We have a contractual understanding or agreement reached in writing.

What we do with the information

We use the information you have given us for the following purposes:

  • Address your enquiry received via email.
  • Offered the consultation services hired.
  • Comply with our contractual obligation to provide legal services.

Disclosure of the information

The personal data you have provided in connection with your contact request will be solely used for the purposes outlined above.

We may share your personal details when we are legally required to comply with the law or in the good faith belief that such action is necessary to conform to the requirements of law or comply with any legal proceeding served on us. Except as described above, we do not otherwise use, share, or disclose your data to any third parties.

How and for how long we store your information

Your information is safely stored in our secured and encrypted office database servers located in France.

We store your personal details as long as there is a mutual interest to maintain the provision of services and, in any case, up to either a maximum of 5 calendar years following no activity from you or when we are legally compelled to keep your information for judicial purposes. We will then dispose of your information by deleting permanently the saved files stored in our database servers as well as every communication saved by any means (email, text messages, voice calls, etc.).

Your data protection rights

Under the GDPR, you have rights including:

  • Your right of access – You have the right to ask us for copies of your personal information.
  • Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
  • Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
  • Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
  • Your right to object to processing – You have the right to object to the processing of your data in certain circumstances.
  • Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have 1 calendar month to respond. Please contact us at if you wish to make a request.

How to complain

You can also lodge a formal complaint to the Agencia Española de Protección de Datos (AEPD) from Spain or the competent authority from your residence country if you are unhappy with how we have processed your data.

Our details, as Data Controllers, are:

  • Name: Pena Fraga Abogados SLP
  • Company Registered in Spain: B-27825843
  • Phone Number: +34 986443452