Last updated: 16 July 2026
1. Data controller
The controller responsible for processing personal data is:
MITJANS ADVOCATS, S.L.P.
Tax identification number: B62930581
Registered address: C/ Enric Granados, 86-88, 5th Floor, Offices 1 and 2, 08008 Barcelona, Spain
Email: info@ms-advocats.com
Telephone: +34 93 268 87 40
2. Scope of this policy
This policy explains how MITJANS ADVOCATS, S.L.P. processes personal data obtained through the website, communications addressed to the firm and the professional, contractual or commercial relationships maintained with clients, prospective clients and suppliers.
Personal data is obtained primarily:
- When a person contacts the firm by email, telephone or another available channel.
- When a person requests information or advice regarding the legal services offered.
- When a professional or contractual relationship is established or maintained.
- Through cookies and similar technologies used on the website.
3. Personal data processed
Depending on the relationship maintained with the firm, the following categories of personal data may be processed:
- Identification data, such as first name, surname or tax identification number.
- Contact details, such as email address, telephone number or postal address.
- Financial, tax and billing information required to manage a contractual relationship.
- Information voluntarily included by the data subject in an enquiry or communication.
- Technical and browsing data obtained through cookies or similar technologies, such as device identifiers, IP address, browser information or pages visited.
MITJANS ADVOCATS, S.L.P. will process only data that is adequate, relevant and necessary for each purpose.
4. Purposes, legal bases and retention
4.1. Responding to enquiries and requests for information
The personal data provided will be processed to:
- Respond to enquiries.
- Provide information about the firm’s legal services.
- Manage contact requests.
- Take pre-contractual steps requested by the data subject, where applicable.
The legal basis is the taking of pre-contractual steps at the request of the data subject, in accordance with Article 6(1)(b) of the General Data Protection Regulation.
The data will be retained for the time necessary to deal with the enquiry. It may subsequently be kept in restricted form for the periods during which legal liabilities may arise from the processing or the communication concerned.
4.2. Management of client relationships
Personal data will be processed to:
- Manage the professional relationship.
- Provide the contracted legal services.
- Maintain the communications required with the client.
- Manage administration, invoicing, payments and accounting.
- Comply with the legal obligations applicable to the firm.
The legal bases are:
- Performance of the contractual relationship, in accordance with Article 6(1)(b) of the General Data Protection Regulation.
- Compliance with legal obligations, in accordance with Article 6(1)(c) of the General Data Protection Regulation.
The data will be retained for as long as the professional relationship remains in force and, once it has ended, for the periods required to comply with legal obligations and address potential liabilities. Where deletion is appropriate, the data will remain blocked or otherwise restricted for the applicable statutory limitation periods.
Commercial documentation and supporting records related to the firm’s activity will be retained for six years, without prejudice to any longer period that may apply.
4.3. Management of suppliers
The personal data of suppliers and their contact persons will be processed to manage the contractual, administrative, accounting and billing relationship.
The legal bases are performance of the contract and compliance with the applicable legal obligations.
The data will be retained for the duration of the contractual relationship and subsequently for the applicable statutory periods. Commercial documentation will be retained for six years, without prejudice to any other legally required period.
4.4. Informational or marketing communications
Where the data subject has expressly authorised their delivery, contact details may be used to send informational or marketing communications related to the services of MITJANS ADVOCATS, S.L.P.
The legal basis is consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation.
Consent may be withdrawn at any time through the procedure indicated in each communication or by writing to info@ms-advocats.com. Withdrawal of consent will not affect the lawfulness of any processing carried out before its withdrawal.
The data will be retained until consent is withdrawn or the data subject requests to unsubscribe.
4.5. Website operation, security and analytics
Technical data required to enable the operation and security of the website may be processed on the basis of the legitimate interest of MITJANS ADVOCATS, S.L.P. in maintaining a functional and secure website.
Analytics, advertising or personalisation cookies that are not strictly necessary will be used only where the user has given consent.
Information about the cookies used, their providers, purposes and retention periods is available in the Cookie Policy.
5. Mandatory nature of the data
The data requested to respond to an enquiry or establish a contractual relationship is necessary to manage the request or provide the corresponding service.
The data subject is not required to provide data for the purpose of receiving marketing communications or to accept cookies that are not strictly necessary.
Failure to provide the necessary data may prevent the firm from responding to the enquiry, processing the request or providing the requested service.
6. Recipients of personal data
Personal data will not be disclosed to third parties except:
- Where disclosure is necessary to provide the requested service.
- Where there is a legal obligation to do so.
- Where the data must be made available to competent authorities, public bodies, courts or tribunals.
- Where the data subject has expressly authorised the disclosure.
Providers of technology, hosting, email, maintenance, administration or support services may access personal data where necessary to provide their services. In such cases, they will act as processors and will be subject to the corresponding contractual obligations regarding confidentiality, security and data protection.
Access to personal data by a processor is not considered a disclosure of data where the requirements established by the General Data Protection Regulation and the Spanish Organic Law on Personal Data Protection and Guarantee of Digital Rights are met.
7. International data transfers
The website uses third-party services, including certain Google services, which may involve the processing or storage of information in the United States.
Google LLC is currently listed as an organisation participating in the EU–US Data Privacy Framework. The European Commission has recognised this framework through an adequacy decision applicable to certified US organisations.
Specific information about third-party services and the cookies used is available in the Cookie Policy.
8. Profiling through cookies
Advertising or marketing cookies may use information about browsing habits to create user profiles and display advertising related to the user’s preferences.
These cookies will be installed only where the user has given consent and may be rejected or disabled through the cookie settings panel.
9. Rights of data subjects
Data subjects may exercise the following rights:
- Access: to confirm whether their personal data is being processed and obtain information about the processing.
- Rectification: to request correction of inaccurate or incomplete data.
- Erasure: to request deletion of personal data where the legal requirements are met.
- Restriction: to request restriction of the processing of personal data in certain circumstances.
- Objection: to object to processing based on legitimate interests or carried out for direct marketing purposes.
- Data portability: to receive personal data in a structured, commonly used and machine-readable format where the processing is based on consent or a contract and is carried out by automated means.
- Withdrawal of consent: to withdraw consent at any time.
- Not to be subject to solely automated decisions: where the conditions established by applicable law are met.
These rights may be exercised free of charge by submitting a request to:
MITJANS ADVOCATS, S.L.P.
C/ Enric Granados, 86-88, 5th Floor, Offices 1 and 2
08008 Barcelona, Spain
Alternatively, requests may be sent by email to: info@ms-advocats.com
The request must specify the right that the data subject wishes to exercise. Where there are reasonable doubts concerning the identity of the applicant, additional information may be requested to verify their identity.
Requests will generally be answered within one month. This period may be extended by a further two months where necessary, taking into account the complexity and number of requests.
10. Complaint to the supervisory authority
Where a person considers that the processing of their personal data does not comply with applicable law, they may lodge a complaint with the Spanish Data Protection Agency, particularly where they have not previously received a satisfactory response to the exercise of their rights.
11. Security and confidentiality
MITJANS ADVOCATS, S.L.P. will implement appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access, disclosure or processing.
The measures will be determined taking into account the nature of the data, the purposes of the processing, the state of the art and the risks that the processing may pose to the rights and freedoms of individuals.
12. Updates to this policy
This policy may be updated where there are regulatory, technical or operational changes affecting the processing activities carried out by MITJANS ADVOCATS, S.L.P.
The version in force will be the version published on the website, which will indicate the date of its latest update.