Privacy Policy

1. Data Controller

• Controller: Salama Legal, S.L.P.
• Address: Málaga, Spain
• Email: taxlegalspain@gmail.com
• Telephone: +34 644 121 802

2. Categories of Data Collected

Through our contact forms, email, telephone, WhatsApp and consultation bookings we may collect:

• Identification data: first name, surname, telephone, email address.
• Case data: location of the estate in Spain, type of legal service requested, free-text description of your situation.
• Browsing data: IP address, device and browser, pages visited, referrer (only via strictly necessary technical logs).

We do not collect special categories of data (Article 9 GDPR) through web forms. If sensitive information is needed during the legal engagement, it will be requested separately and protected under the rules of professional secrecy applicable to lawyers (Art. 542.3 LOPJ).

3. Purposes and Legal Basis

• Reply to enquiries — pre-contractual measures at your request (Art. 6.1.b GDPR).
• Legal services engagement — performance of the engagement contract (Art. 6.1.b GDPR).
• Compliance with tax, accounting and anti-money-laundering obligations — legal obligation (Art. 6.1.c GDPR; Law 10/2010 on AML).
• Booking paid consultations via Calendly — performance of a contract (Art. 6.1.b GDPR).
• Improving the website (analytics, cookies) — your consent (Art. 6.1.a GDPR), as set out in our Cookie Policy.

4. Recipients

We do not sell or rent personal data. Data may be disclosed to:

• Public authorities when required by law (AEAT, courts, notaries, Land Registry).
• Processors acting under our instructions with a written data-processing agreement: web hosting, the form provider Formcarry, the booking platform Calendly, our email provider, and similar suppliers.
• International transfers: some processors may be located outside the EEA. In that case the transfer is protected by EU Standard Contractual Clauses (Art. 46 GDPR) or another valid mechanism.

5. Retention

• Enquiries that do not lead to engagement: up to 12 months from the last contact.
• Engaged matters: for the duration of the engagement plus any period required by law (typically up to 10 years for AML records and 6 years for accounting records).
• Cookies: as set out in the Cookie Policy.

6. Your Rights

You have the right to access, rectify, erase, restrict, object to and port your personal data, as well as the right not to be subject to solely automated decisions. You may exercise these rights by writing to taxlegalspain@gmail.com, attaching a copy of your ID document.

You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos): aepd.es.

7. Security

We apply technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS), access controls and confidentiality obligations binding all members of the firm under the rules of professional secrecy.

8. Changes

This policy may be updated to reflect legal or operational changes. The version in force at the time of access applies.

Last updated: 2026-05-09