RGPD · GDPR

Privacy & Data Protection

This policy explains how Rosario Martínez Legal Services processes your personal data under the GDPR and Spanish law.

Data controller

Rosario Martínez Legal Services, Marbella, Málaga (Spain). [Registered details & tax number to be confirmed]. Contact: info@rmlegalservices.es.

What data we process

Identification and contact data, the documents you provide for your matter, and the information needed to deliver legal services and meet anti-money-laundering obligations (KYC/AML).

Purpose

To provide legal services, communicate with you, manage your case file and comply with legal and professional obligations.

Legal basis

Performance of the engagement, compliance with legal obligations (including AML) and our legitimate interest in running the practice.

Retention

We keep your data for as long as required by law and professional rules, and then securely delete it.

Processors

We use providers that process data on our behalf, with appropriate safeguards: OpenAI (AI drafting & OCR), Resend (email), Supabase (database & storage), Vercel (hosting).

Your rights

You may access, rectify, erase, restrict or object to processing, and request portability. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD). To exercise them, email info@rmlegalservices.es or use your client portal.

Last updated: to be confirmed by Rosario.