1. Information for users
Christian Castellá Hammerstein, as data controller, informs you that he will process your personal data as set out in this Privacy Policy, in accordance with:
- Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation, “GDPR”);
- Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD”).
This policy explains what data we collect, why we collect it, who we share it with, how long we keep it and what rights you have.
2. Data controller
- Owner
- Christian Castellá Hammerstein
- Trading name
- Castellá Hammerstein
- Tax ID (NIF)
- 44011426Y
- Professional body
- Lawyer registered with the Barcelona Bar Association (Ilustre Colegio de la Abogacía de Barcelona, ICAB), no. 23265
3. Principles
We process your data in accordance with the following principles:
- Lawfulness and transparency: we only process data on a lawful basis and tell you clearly that we are doing so.
- Purpose limitation: we use your data only for the purposes stated.
- Data minimisation: we ask only for the data we need.
- Accuracy: we take steps to keep your data correct and up to date.
- Storage limitation: we keep data only for as long as necessary.
- Security and confidentiality: we apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration. As a lawyer, the Owner is also bound by the duty of professional secrecy.
4. What data we process and why
This website has no forms and does not use analytics, advertising or third-party cookies. We only process the data you choose to give us when you contact the firm by email or telephone:
- identification and contact details (name, email address, telephone number);
- any information you decide to include about your enquiry or matter.
We use this data to:
- deal with your enquiry and reply to you;
- where applicable, assess the matter and manage any subsequent instruction;
- comply with the legal obligations that apply to the practice of law.
We do not carry out profiling or automated decision-making with your data, and we do not use it to send marketing communications.
5. Legal basis for processing
- Your consent, when you contact us on your own initiative. You may withdraw it at any time.
- Steps taken prior to entering into a contract, or the performance of a contract for professional services, when you instruct us on a matter.
- Compliance with legal obligations, in particular those arising from the professional rules for lawyers, tax law and anti-money laundering legislation.
6. How long we keep your data
- Enquiries that do not lead to an instruction are kept for as long as needed to deal with them, and then for the limitation periods of any possible liabilities.
- Client data is kept for the duration of the professional relationship and, after that, for the periods required by applicable law.
7. Recipients of your data
Your data will not be disclosed to third parties unless required by law.
To provide his services, the Owner may use providers that process data on his behalf as data processors, with the safeguards required by Article 28 GDPR. Examples are website hosting and email providers.
If any of these providers processes data outside the European Economic Area, it will do so with the safeguards provided for in the GDPR: an adequacy decision, such as the EU-US Data Privacy Framework, or the European Commission’s standard contractual clauses.
8. Your rights
You may exercise the following rights at any time:
- access to your data (Article 15 GDPR);
- rectification of inaccurate or incomplete data (Article 16 GDPR);
- erasure (Article 17 GDPR);
- restriction of processing (Article 18 GDPR);
- data portability (Article 20 GDPR);
- objection to processing (Article 21 GDPR);
- withdrawal of consent, without affecting the lawfulness of processing carried out before withdrawal.
To exercise them, write to chcastella@castellahammerstein.com stating which right you wish to exercise. If there is reasonable doubt about your identity, we may ask for additional information to confirm it.
If you consider that your data is not being processed in accordance with the law, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
9. Changes to this policy
This policy may be updated to reflect changes in the law or in this website. The version in force will always be the one published on this page.