Privacy Policy

In compliance with Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018 (LOPDGDD), we inform you about the processing of your personal data.

Index

1. Identification and contact details of the Data Controller

AURUM ASESORES JURIDICOS, S.L., with registered office at C/ Orense, 70, 9.º, puerta B, 28020 Madrid, CIF B26582668, registered in the Registro Mercantil de Madrid, Sección 8, Hoja M-875688, IRUS 1000465818879, Inscripción 1 (hereinafter, «AURUM» or the «Company»), is the data controller of your personal data.

The Company has not appointed a Data Protection Officer, as it does not fall within the cases under article 37 GDPR that require one. However, for any matter relating to the processing of your personal data, you may contact: privacidad@aurumjuridicos.es

2. Necessary and up-to-date information

All fields marked with an asterisk (*) in the website forms are mandatory. Omitting any of them may make it impossible to provide the requested services or information.

You must provide truthful information and notify the Company, as soon as possible, of any change to your personal data by email to privacidad@aurumjuridicos.es.

Likewise, by clicking the «Send» button (or equivalent), you declare that the information and data you have provided are accurate and truthful.

3. General information on the processing activities

In this policy you will find, for each of the data processing activities carried out by the Company:

  • The purposes of the processing of your personal data.
  • The legal bases that permit the processing for each purpose.
  • The possible recipients of your data and the reason for such communication.
  • The existence of potential international transfers of data.
  • The retention period of the data.

AURUM does not disclose your personal data to third parties unless there is a legal obligation or your prior consent. Data processors (technology service providers) access the data solely for the performance of their functions, pursuant to art. 28 GDPR.

Likewise, we inform you that your data will remain blocked for the handling of judicial, administrative or tax claims during the periods resulting from the applicable legislation.

4. Detailed information on the processing activities

Purpose of the processing Legal basis Recipients International transfers Retention period
Managing the inquiries and information requests received through the website contact form Express consent of the data subject (art. 6.1(a) GDPR) and, where applicable, performance of pre-contractual measures (art. 6.1(b) GDPR) Associated, bar-registered and independent lawyers, duly registered with their respective Colegios de Abogados, to whom your case file is transferred, subject to prior consent. Technology service providers acting as data processors. No international transfers are carried out, except those arising from technology tools with providers adhering to the EU-US Data Privacy Framework. Until your request is resolved and, thereafter, for the periods legally required.
Management and performance of the contracted engagement: organizational coordination, document collection, preparation of the case file, and coordination with the associated lawyer Performance of the contract (art. 6.1(b) GDPR) Associated, bar-registered and independent lawyers, duly registered with their respective Colegios de Abogados, subject to the Client's prior consent. Public authorities where there is a legal obligation. No international transfers are carried out, except those arising from technology tools with providers in countries with an adequate level of protection or under Standard Contractual Clauses (Decision (EU) 2021/914). For the duration of the contractual relationship and, thereafter, up to 5 years for civil and commercial obligations; up to 10 years for tax obligations.
Sending commercial communications about AURUM's services Consent of the data subject (art. 6.1(a) GDPR) Data is not disclosed to third parties for this purpose. No international transfers are carried out. Until consent is withdrawn.
Compliance with legal and tax obligations Legal obligation (art. 6.1(c) GDPR) Public authorities and regulatory bodies where there is a legal obligation. No international transfers are carried out. Applicable legal periods (generally, up to 10 years).
Analysis of website use through analytics cookies Consent of the data subject (art. 6.1(a) GDPR) Google LLC (Google Analytics), acting as data processor. Transfers to the USA covered by the EU-US Data Privacy Framework (Commission Decision of 10.07.2023) and by the Standard Contractual Clauses (Decision (EU) 2021/914). In accordance with the cookie policy. Google Analytics data is retained for a maximum of 14 months.
Measurement of the effectiveness of advertising campaigns and remarketing through the Meta (Facebook) pixel Consent of the data subject (art. 6.1(a) GDPR) Meta Platforms Ireland Ltd. (Ireland), with transfer to Meta Platforms, Inc. (USA). Transfers to the USA covered by the EU-US Data Privacy Framework (Commission Decision of 10.07.2023) and by the Standard Contractual Clauses (Decision (EU) 2021/914). In accordance with the cookie policy. The _fbp cookie is retained for a maximum of 90 days.

5. Recipients of the data

Your personal data may be communicated to:

  • Associated lawyers assigned to your case file, subject to the data subject's prior consent.
  • Technology service providers (hosting, email), acting as data processors pursuant to art. 28 GDPR.
  • Public authorities, where there is a legal obligation.

AURUM does not disclose personal data to third parties for their own purposes without the data subject's prior consent.

6. Exercise of your rights

We inform you that you may exercise the following rights:

  1. Right of access to your personal data, to know which data are being processed and the operations carried out.
  2. Right to rectification of any inaccurate personal data.
  3. Right to erasure of your personal data, where this is possible.
  4. Right to request the restriction of the processing where the accuracy, lawfulness or necessity of the processing is in doubt.
  5. Right to data portability, where the legal basis is the contractual relationship or consent.
  6. Right to object to the processing, where the legal basis is legitimate interest.
  7. Right to withdraw your consent at any time, without affecting the lawfulness of processing prior to its withdrawal.

For those processing activities whose legal basis is consent, you have the right to withdraw it at any time without affecting the lawfulness of the prior processing.

You may exercise your rights by sending an email to privacidad@aurumjuridicos.es or by postal mail to AURUM ASESORES JURIDICOS, S.L., C/ Orense, 70, 9.º, puerta B, 28020 Madrid, indicating the right you wish to exercise and your identifying details.

If you consider that we have not processed your data appropriately, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD).

7. Modifications

AURUM reserves the right to modify this privacy policy in order to adapt it to legislative or case-law developments or to business practice. In the event of substantial modifications, users will be informed through the website with due advance notice.

8. Security measures

AURUM ASESORES JURIDICOS, S.L. adopts the security levels required by the GDPR appropriate to the nature of the data being processed. However, technical security on the Internet is not impregnable and malicious actions by third parties may occur, although the Company applies all the means at its disposal to prevent such actions.

AURUM uses WhatsApp Business as a channel for first contact and general communication. For the exchange of confidential documentation, only encrypted email or secure platforms designated by AURUM will be used.

9. Minors

Minors under 14 years of age may not use the services available through this website without the prior authorization of their parents, guardians or legal representatives, who shall be solely responsible for all acts carried out through the Website by the minors in their care.

Last updated: April 2026  |  GDPR (EU) 2016/679 · LOPDGDD 3/2018