Privacy policy

INTRODUCTION

In accordance with the General Data Protection Regulation (GDPR) and the Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we present this Privacy Policy with the aim of informing you in a clear and transparent manner about the collection and processing of your personal data through the Website creativelawalliance.com .

DATA CONTROLLER

SANTIAGO MEDIANO ABOGADOS, S.L.P.; hereinafter SMA).
Address: Calle Campoamor 18, Planta 1, 28004, Madrid, Spain.
Tax Identification Number: ESB83533455.
Telephone: +34 91 310 63 63
E-mail: info@santiagomediano.com

SCOPE OF THE POLICY

By accessing and using this website, enjoying our services or using any other means that involves the processing of personal data, you accept this Privacy Policy, together with the provisions set out in the Legal Notice and the Cookies Policy.

At SMA, we provide information so that, before filling in your personal data, you can access the Privacy Policy and any other relevant information on Data Protection.

WHAT WE USE YOUR DATA FOR

SMA treats your personal data (name, surname, email, telephone and any information necessary for the management and maintenance of services) for the following purposes:

CONTRACTUAL: (i) to manage the contracting of services provided through the website, as well as the corresponding invoicing and delivery; (ii) to manage your registration as a user. All of this in accordance with the provisions of the Legal Conditions of Use of the Register and Housing Offers.
CONSENT: (i) any marketing and commercial action carried out by any means, including telematic means, (ii) to attend to and properly manage Users’ queries, comments, incidents or suggestions made through the means provided on the Website, (iii) to make available to Users a specific form for submitting proposals, ideas or needs related to the services offered, guaranteeing a quick and efficient response, (iv) allow Users to book meetings in a simple and accessible way through the Website and (v) receive automatic notifications about new selection processes opened in SMA, subject to the User’s acceptance.
LEGITIMATE INTEREST: (i) to send recommendations of products and services taking into account those you have contracted in the past, (ii) also for the prevention, investigation and detection of fraud and (iii) to deal with the queries you send us, (iv) to ensure the proper use of our services, preventing illegal uses or uses contrary to our policy, values or current legal regulations, and (v) to manage suggestions, complaints and queries about the products and/or services purchased through our website.
LEGAL OBLIGATION: (i) To comply with legally established obligations, as well as to verify compliance with contractual obligations, including the prevention of fraud and the prevention of money laundering.

HOW LONG WE PROCESS YOUR DATA

The period of retention of personal data will vary depending on the service you contract. In any case, your data will be kept for the duration of the commercial relationship. Once the commercial relationship has ended, we will keep your data blocked during the periods of limitation of the obligations that may have arisen from the processing and/or the applicable legal periods, remaining at the disposal of the competent authorities for the attention of the possible responsibilities derived from the processing. By way of example and without limitation, the following periods shall be taken as a reference:

Contact data and data for sending commercial communications (Newsletter): We will keep this data as long as your consent to send electronic commercial communications and Newsletter has not been revoked.
Job applicants’ data: 1 year from the time of receipt of their CV or from the selection process.
Documentation relating to personal obligations that do not have a fixed limitation period: 5 years (art.1964.2 of the Civil Code).
Books, correspondence, documentation and supporting documents concerning the business: 6 years (art.30 of the Commercial Code).
Documentation relating to tax obligations: 4 years (66 to 70 of Law 58/2003, of 17 December, General Taxation).
Documentation relating to compliance with social obligations: 4 years.
Employment documentation (actions arising from the employment contract): 1 year (article 59 of Royal Legislative Decree 2/2015, of 23 October, approving the revised text of the Workers’ Statute Law).
Documentation relating to compliance with data protection obligations: 3 years (art.78 LOPDGD).
Documentation relating to legislation on the prevention of money laundering: 10 years.
Health documentation for people with reduced mobility to adapt the conditions of enjoyment of our services: 5 years.

HOW YOU CAN EXERCISE YOUR RIGHTS

As the owner of the rights to your personal information, you have control over that data. In this way, we also ensure that the information we process is accurate and truthful.

The rights that you can exercise are those recognised in the legislation in force, among them:

Right of Access: you may consult if we are processing personal data concerning you to SMA.
Right of rectification and deletion: you may access your personal information and request the rectification or deletion of your data when it is inaccurate or you consider that it is no longer necessary for the purposes for which it was collected.
Right of Opposition: you may oppose the processing of your data, unless, for compelling legitimate reasons or in the exercise or defence of possible claims, we keep them duly blocked for the corresponding periods while the legal obligations subsist.
Right to limit processing: you may request that we limit the processing of your personal information while we verify that the accuracy or lawfulness of your data is being challenged and during the exercise or defence of any claims or litigation.
Right of portability: you may request portability of the data you have provided to us to another data controller in certain circumstances.

You will be able to exercise your rights free of charge.

These rights can be exercised in various ways:

Sending a written communication to the postal address of the Controller.
By sending an e-mail to info@santiagomediano.com.

HOW CAN I COMPLAIN TO THE SUPERVISORY AUTHORITY?

If you consider that there is a problem with the way in which SMA is handling your data, you can address your complaints either to the address Calle Campoamor 18, Planta 1, 28004, Madrid, Spain, as stated in the header, or to the corresponding data protection supervisory authority, being the Spanish Data Protection Agency the one indicated in the case of Spain through its website: www.aepd.es.

WILL MY DATA BE COMMUNICATED TO OTHER RECIPIENTS?

We guarantee that your data will only be disclosed to:

Competent Public Bodies, Tax Agency, State Security Forces and Corps, Judges and Courts, when SMA has the legal obligation to provide them.
Financial institutions in the case of financing the services provided.
Companies that are members of the alliance, to the extent necessary for the proper provision of the contracted services. Which .
Third parties necessary for the provision of the contracted service: service providers, call centres, subcontracted professionals, etc.

Under no circumstances will your personal data be shared with companies outside the alliance without complying with the legally established requirements.

We rely on the collaboration of suppliers who may have access to your data and who will process the aforementioned data in the name and on behalf of SANTIAGO MEDIANO ABOGADOS S.L.P., the selection of suppliers will follow an exhaustive process of verification of compliance, in order to guarantee adequate control in terms of data protection. In addition, a contract will be signed, in accordance with article 28 of the General Data Protection Regulation, in which these suppliers undertake to apply appropriate technical and organisational measures and to process personal data only in accordance with the documented instructions of the co-responsible parties.

If the data processors include a processor located outside the European Economic Area, the joint controllers will enter into Standard Contractual Clauses with them, which will provide adequate safeguards and protect the access that such third parties may have to your data at all times.

SECURITY

At SMA, we maintain the highest levels of security required by law to protect your personal data against accidental loss and against unauthorised access, processing or disclosure, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed. When we receive your data, we use rigorous procedures and security features to prevent unauthorised access.

The actions described in this section and aimed at ensuring a level of security appropriate to the risk identified shall include, if necessary, the following measures:

Pseudonymisation and encryption of personal data.
Measures capable of ensuring the continued confidentiality, integrity, availability and resilience of processing systems and services.
Measures capable of restoring availability and access to personal data quickly in the event of a physical or technical incident.
Existence of a process of regular verification, evaluation and assessment of the effectiveness of technical and organisational measures to ensure the security of processing.
Periodic assessment of the risk of accidental or unlawful destruction, loss or alteration of, or unauthorised disclosure of or access to, personal data transmitted, stored or otherwise processed.
Measures to ensure that any person acting under the authority of SMA who has access to personal data can only process such data on instructions from SMA.

CONFIDENTIALITY

The personal data that may be collected will be treated with absolute confidentiality, undertaking to keep them secret and guaranteeing the duty to store them by adapting all the necessary measures to prevent their alteration, loss and unauthorised processing or access, in accordance with the provisions of the applicable legislation.

ACCEPTANCE AND CONSENT

The user declares to have been informed of the conditions on protection of personal data, accepting and consenting to the processing thereof by SMA in the manner and for the purposes stated in this Privacy Policy.

CHANGES TO THE PRIVACY POLICY

SMA reserves the right to modify this policy to adapt it to new legislation or jurisprudence, as well as other industry practices. In such cases, SMA will announce on this page the changes introduced with reasonable notice before their implementation.

This version of the Privacy Policy corresponds to an update published and entered into force in January 2025. You can contact SMA through the established contact channels for related queries.