This document affects the data processing carried out in all procedures, platforms, applications, and tools developed and/or managed by AGENCIA DE SERVICIOS LEGALES Y EDUCATIVOS EN ESPAÑA, S.C.P

Registration or sign-up as a user of AGENCIA DE SERVICIOS LEGALES Y EDUCATIVOS EN ESPAÑA, S.C.P implies the express acceptance of our Privacy Policy. This document regulates the processing of our users’ and/or students’ personal information, access keys to the service, and the security measures implemented to prevent unauthorized access, modification, or deletion of our files. This processing will be governed by the provisions of the EU General Data Protection Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Who is responsible for processing your data? The controller of your data is LEGAL AND EDUCATIONAL SERVICES AGENCY IN SPAIN, S.C.P, with tax identification number J72443922, with its registered address at C/ Sol i Ortega, 8, Reus (Tarragona), 43204, contact telephone number +34 626 33 98 82, and email address info@legalspain.es, hereinafter referred to as LegalSpain.

What data do we collect and store?

Among the information collected by LegalSpain is:

• Personal information such as your name, surname, ID/Passport number, physical and email address, and contact phone number.
• Information on transactions you make with us and the use of the services we offer, including inquiries or suggestions received through our contact pages, recording activities in the logs of our servers, and noting your browser settings and IP address from which you access, the requested pages, and the actions performed.
• Session cookies (when logging into the system, we will record a cookie on your device to maintain open access, without treating it differently or keeping it once the session is closed) and analysis cookies (user’s origin when registering). In any case, you can configure your browser to delete this type of trace.

What is the purpose of processing your personal data?

At LegalSpain, we process the information provided by the interested parties for the following purposes:

• Managing the enrollment of our students and/or users.
• Providing information about our products and/or services to users who request it.
• Providing the contracted services.
• Sending communications, newsletters, or bulletins about our products or services, only when absolutely necessary for the proper functioning of the contracted services, or when you explicitly request it.

What is the legal basis for processing your data?

The legal basis for processing your data is the development of the services and/or delivery of products offered by LegalSpain to users, which will always be provided by the interested party themselves. Basic identification data will be stored indefinitely (Name, Surname, ID/Passport number, or equivalent and email address) to facilitate user enrollment in our courses unless the interested party exercises their data protection rights. However, LegalSpain must keep such data for a period of FIVE YEARS, exclusively for tax purposes, from the payment of the enrollment fee in compliance with article 29.2, letter e) of Law 25/2003 of December 17, General Tax Law, as stated in article 22 of Royal Decree 1720/2007 of December 21.

To whom will your data be disclosed?

The data provided to LegalSpain will be communicated to third parties according to the following purposes:

Accounting, tax, and/or legal consultancy. Your basic identification data will be provided to Quero&Marcet, located at Plaza Llibertad,

To whom will your data be disclosed?

The data provided to LegalSpain will be communicated to third parties in accordance with the following purposes:

Accounting, tax and/or legal advice. Your basic identification data will be provided to Quero&Marcet, located at Plaza Llibertad, 1-3, esc 2, penthouse, 43201, Reus, whose processing will consist of providing labor, accounting, tax, and legal advisory services.

The transfer of data will expire after SIX years, as required by current legislation in tax, fiscal, and/or accounting matters.

Authorities It may happen that LegalSpain must provide personal data to certain authorities (e.g., tax or police authorities) in accordance with mandatory law and in order to comply with legal obligations in each jurisdiction. In case of a data security breach, it is likely that certain personal data must be provided to data protection authorities.

What are your rights when you provide us with your data?

Anyone has the right to obtain confirmation as to whether or not LegalSpain is processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the limitation of the processing of their data, in which case we will only retain them for the exercise or defense of claims. In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. LegalSpain will stop processing the data, except for compelling legitimate reasons or the exercise or defense of possible claims.

How did we obtain your data?

The personal data we process at LegalSpain comes from direct communication from the interested party through our website, social networks, email, phone, or any other system, method, or communication tool, or from communication through academies and/or collaborating companies with the prior authorization of the interested party.

How are your personal data protected? LegalSpain applies appropriate technical and organizational measures to protect your personal data and ensure that only authorized persons can access them. LegalSpain uses technical security systems, such as firewalls, encryption technologies, passwords, and antivirus programs, to prevent and avoid unauthorized use of personal data.

The categories of data being processed are:

• Identification data
• Identification codes or keys
• Postal or electronic addresses
• Commercial information

What are your rights regarding personal data?

• Right of access and rectification. You have the right to obtain information about what personal data LegalSpain processes about you, the source of the data, for what purposes the data has been used, and the identity of the parties to whom the data has been provided. If a request is manifestly unfounded or excessive, particularly due to its repetitive nature, LegalSpain may also refuse to act on the basis of the request. Likewise, you have the right to request, at any time, the correction of inaccurate or incomplete personal data. Right to erasure («right to be forgotten»). You can request, in certain circumstances, the deletion of your personal data if, for example, you have unsubscribed from the service, the personal data is no longer necessary for the purposes for which it was collected, there is no legal basis for its continued processing, the processing is unlawful, or the personal data must be deleted to comply with a legal obligation established in the applicable European Union law to LegalSpain. This list is not exhaustive. LegalSpain has implemented an immediate account deletion system to facilitate the execution of this right, which can be found by accessing your account, prior access with your login credentials, and clicking on the button titled «Delete my account». Please note that this action is irreversible. If you choose to manage the account deletion, it will not be possible to recover all the information associated with it.

• Right to object. You have the right to object to the processing of personal data concerning you if it is based on our legitimate interest related to your particular situation. If you raise an objection, and the processing is based on a legitimate interest, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your privacy rights. However, please note that even if you object to certain processing, LegalSpain may retain such processing if it is based on another legal basis, such as the provision of the Service (if you wish to continue receiving it) or the fulfillment of legal obligations.
• Right to limitation of processing. You may request the limitation of the processing of your personal data when the personal data may not be correct, if you consider that the processing is unlawful, if LegalSpain bases its processing on a legitimate interest or if you believe that LegalSpain no longer needs the personal data for the purposes established in this document.
• Right to withdraw consent. If at any time you have given LegalSpain your consent to the processing of personal data, you can always withdraw consent for any future processing that is subject to such consent.
• Right to data portability. You have the right to receive the personal data concerning you that you have provided to us and that we process based on consent or to fulfill the agreement formalized with you in a structured, common, and machine-readable format. You can also ask us to transmit this data directly to another data controller when technically feasible.
• How to use your rights? You can exercise some of your rights, such as the right to object to receiving commercial communications based on your use, by writing an email to the address info@legalspain.es

What should you do if you wish to file a complaint?

If you have a complaint regarding how we use your personal data, or if you want more information, please contact our data protection officer using the contact details above. But you can also file a complaint regarding how we process your personal data with the relevant public control authority, specifically with the authority of your country of residence, work, or where the alleged infringement occurred. The competent authority in Spain is:

Spanish Data Protection Agency – www.agpd.es C / Jorge Juan 6. 28001 – Madrid

Without prejudice to your right to file a complaint, if you believe that your rights have been infringed under this Personal Data Policy as a result of the processing of your personal data in breach of applicable laws, you may also file a claim with the competent courts, including the courts of the EU member state where you have your habitual residence.

Updates LegalSpain may modify this Personal Data Policy at any time. If LegalSpain wishes to use personal data in a manner other than stipulated in the Personal Data Policy in force at the time of data collection, it must notify those concerned in a visible manner (e.g., by publishing the notice on the LegalSpain website or by sending it by email).