Privacy policy

This is a translation provided for information only. The Spanish version of this policy is the binding one; in the event of any discrepancy, the Spanish text prevails.

1. Data controller

• Controller: Global Abogados, S.L.P. (Escalera & Tuset Abogados)
• Spanish tax number (NIF/CIF): B88582739
• Address: Calle de Alcalá, 209, 28028 Madrid, Spain
• Telephone: +34 911 923 480
• Email: administracion@escaleratuset.com
• Data protection officer: none has been appointed. For any question about your data you can write to administracion@escaleratuset.com.

2. What data we process and why

We only process the data you give us voluntarily. There are two collection points on this site: the contact and quote request form, and the application form on the "Work with us" page.

Processing	Data	Purpose	Legal basis
Contact form	First name and surname, telephone, email address and the description of the matter you write	To deal with your enquiry, assess the matter and send you a quote where appropriate	Consent of the data subject and pre-contractual steps at your request (art. 6.1.a and 6.1.b GDPR)
Job applications	First name and surname, telephone, email address, area of interest, the message you write and your CV	To assess your application in the recruitment processes of the firm	Consent of the data subject (art. 6.1.a GDPR)
Contact by telephone or email	The data you communicate	To maintain the communication you have asked for	Consent and legitimate interest in responding to whoever contacts us (art. 6.1.a and 6.1.f GDPR)

We do not ask you for special category data. Please do not include information about health, beliefs, criminal convictions or any other sensitive data in the form: that is what the first consultation is for, where we can collect it with the proper safeguards.

3. How long we keep it

Form data is kept for as long as needed to deal with your enquiry and, after that, for the limitation period of any actions that might arise. If your enquiry does not lead to a professional engagement, it is deleted after one year.

Job applications and CVs are kept for one year from receipt and then deleted, unless you withdraw your consent before that.

If a professional relationship does come about, the retention periods set out in Spanish tax, commercial and anti-money-laundering legislation apply.

4. Who we share your data with

We do not transfer your data to third parties except where the law requires it. The following service providers do take part, acting as processors under an article 28 GDPR contract:

• Web hosting provider: Sysprovider, S.L. (NIF B01638832), of Calle Rio Lomo 4, 26006 Logrono (La Rioja), Spain, which hosts the site and the record of form submissions.
• Email provider: Microsoft Ireland Operations Ltd. (Microsoft 365)

We make no international data transfers. Should any of these providers need to process data outside the European Economic Area, they will do so with the safeguards set out in the GDPR, such as the standard contractual clauses approved by the European Commission.

5. Automated decisions

We take no automated decisions and carry out no profiling with your data.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw the consent you have given, by writing to administracion@escaleratuset.com or by post to Calle de Alcalá, 209, 28028 Madrid, Spain, stating the right you are exercising and enclosing a copy of a document proving your identity.

If you consider that the processing does not comply with the rules, you can lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid).

7. Security

We apply appropriate technical and organisational measures to protect your data against destruction, loss, alteration or unauthorised access. The form is submitted over an encrypted connection and its content is recorded in a restricted-access file before being sent on to us by email.

8. Cookies

This site installs no first-party or third-party cookies for analytics or advertising. You can read the detail in the cookie policy.