Privacy and Cookies

1. Who is the Data Controller of my personal data?

The Data Controller of my data is Elabogado Directories, S.L. (hereinafter, elAbogado), with registered office in Barcelona, calle Ausias Marc, núm. 7, 3ª planta (C.P. 08010) and email dpo@elabogado.com.

elAbogado has appointed a Data Protection Officer who can be contacted at dpo@elabogado.com or at the postal address Barcelona, calle Ausias Marc, núm. 7, 3ª planta (C.P. 08010).

2. What Does elAbogado do with My Data?

We inform you that elAbogado processes data of lawyers and clients or potential clients, jointly referred to as Users. In both cases, elAbogado will process them for the following purposes, as appropriate:

  1. To keep informed, including by electronic means, about news and events related to elAbogado, as well as about the products and services marketed both by elAbogado and by third parties belonging to or aimed at the legal sector. The legal basis for carrying out this data processing is the consent of the User. The data processed for this purpose will be kept until such time as the User withdraws his/her consent and thereafter for the legally stipulated periods of conservation and prescription of responsibilities. The User may at any time expressly indicate whether or not he/she authorises the said processing of his/her data.
  1. Conduct satisfaction and quality surveys on the elAbogado service. These surveys may be addressed both to lawyer Users and to their client Users or potential clients. The legal basis for carrying out this data processing is the legitimate interest of elAbogado. The data processed for this purpose will be kept for the legally stipulated periods of conservation and prescription of responsibilities.
  1. To deal with requests for information and/or queries made by the User. The legal basis for carrying out this processing is the consent of the User. The data processed for this purpose will be kept until the request for information and/or consultation has been answered and, after that, for the legally stipulated periods of conservation and prescription of responsibilities.

In addition, the data of lawyer Users will also be processed for the following purposes, as appropriate:

  1. To enable the maintenance, development and management of the relationship with the lawyers in relation to the forwarding of contacts of potential clients. The legal basis for carrying out this data processing is: a) in relation to the self-employed lawyer, the performance of a contract to which the data subject is a party; b) in relation to contact persons who provide their services in law firms, the legitimate interest of elAbogado in contacting the firm through them. The data processed for this purpose shall be retained for as long as this relationship is maintained, and thereafter for the legally stipulated periods of retention and limitation of liability.
  1. Call recording. For reasons of quality control and service management, elAbogado may randomly record telephone calls received by User lawyers who have an active campaign in price per call mode (PPLL). The legal basis for this data processing is the legitimate interest of elAbogado. The data processed for this purpose will be stored for the legally stipulated periods of conservation and prescription of responsibilities.

In relation to the data of client Users or potential clients, it may also be processed for the following purposes, as appropriate:

  1. To enable the provision of the services requested in relation to client Users or potential clients in order to provide a personalised service to put them in contact with lawyers from the directory and offer them alternatives in the event that the lawyers initially contacted cannot or will not attend to the case. The legal basis for carrying out this data processing is the consent given in your request so that elAbogado can attend to you. The data processed for this purpose will be kept until the consent is withdrawn, and after that, during the legally stipulated periods of conservation and prescription of responsibilities.
  1. Publication of opinions. Management of the publications made by client Users about the opinion of a lawyer or law firm. These publications may contain your image and the name of the profile on the social network you have used to authenticate yourself. In addition, as long as the opinion remains published, elAbogado will internally store the email, IP and social network identifier of the Client User. The published opinion is accessible to any User who accesses the Website and wants to see the opinions made about a particular lawyer or firm. The legal basis for data processing is the consent of the User client. The data processed for this purpose will be kept until such time as the Client User withdraws his or her consent, and thereafter for the legally stipulated retention and prescription periods.
  1. To enable the registration and creation of an account for Client Users, being able to keep track of their cases, create and manage new cases and edit their profile. The legal basis for the processing is the consent given by the Client User. The data processed for this purpose will be kept until such time as the User withdraws his/her consent and, after that, for the legally stipulated periods of conservation and prescription of responsibilities.

3. Third party recipients and Data Processors

The data may be communicated to the following third party recipients: Public Administrations for the fulfilment of legal obligations; to lawyers for the execution of the services requested by client Users or potential clients; to banking institutions for the management of collections and payments of invoices from Lawyer Users; and to duly selected data processors. These processors may be located outside the European Economic Area, with whom appropriate safeguards for the security of the transfer will be adopted.

4. Exercise of the data subjects rights

This privacy policy owned by elAbogado informs the data subject that he/she may at any time exercise the rights of access, rectification, erasure, restriction of processing, object or data portability by sending an email to dpo@elabogado.com or by writing to elAbogado c/ Ausias Marc, 7, 3 08010 - Barcelona (Spain). In the case of processing whose legitimacy is based on consent, the data subject has the right to withdraw said consent at any time, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal. The data subject shall have the right to lodge a complaint with the supervisory authority.

5. Prohibition of registration for minors

Children under the age of 14 should not provide their personal data to elAbogado without the prior consent of their parents or guardians. If you are a minor, please ask your parents or guardians to contact us first.

6. elAbogado as Data Processor

elAbogado shall be considered to be Data Processor of all personal data belonging to the Lawyer User to which it has access during the provision of the services requested by them. In this regard, elAbogado undertakes to:

  1. Process personal data only in accordance with documented instructions from the Lawyer User, including with respect to transfers of personal data, unless obliged to do so under Union or Member State law; in such a case, elAbogado shall inform the Client of such legal requirement prior to processing, unless such law prohibits it for important reasons of public interest;
  2. Ensure that persons authorised to process personal data have undertaken to respect confidentiality or are subject to a confidentiality obligation of a statutory nature;
  3. Take all necessary measures in accordance with Article 32 of the GDPR;
  4. Where the Data Processor uses another data processor to carry out certain processing activities on behalf of the Client, it shall impose on that other processor, by contract, the same data protection obligations as those stipulated in this document;
  5. To assist the Customer, taking into account the nature of the processing, by means of appropriate technical and organisational measures, whenever possible, to enable the Client to comply with its obligation to respond to requests aimed at exercising the rights of data subjects. The communication must be made immediately and in no case later than the working day following receipt of the request, together, where appropriate, with any information that may be relevant to the request.
  6. Assist the Client in ensuring compliance with the obligations set out in Articles 32 to 36 of the GDPR, taking into account the nature of the processing and the information available to the data processor;
  7. Unless otherwise instructed by the Client, delete all personal data upon termination of the provision of the Services, as well as delete existing copies, unless the retention of personal data is required by Union or Member State law;
  8. Make available to the Client all information necessary to demonstrate compliance with the obligations set out in Article 28 of the GDPR;
  9. Immediately inform the Client if, in the opinion of the Data Controller, an instruction infringes the GDPR or other data protection provisions of the Union or of the Member States;
  10. To comply with any other obligation incumbent upon it under current data protection legislation.
  11. Notify the Client of any personal data security breach of which it becomes aware, together with all relevant information for the documentation, resolution and communication of the incident.