Privacy Policy

1. Data controller

2. Data we collect

This website has no forms and does not collect data by itself. The only personal data we process are those you choose to include in the email you send us: the address you write from and whatever you decide to say in the message or attach to it.

We do not collect special categories of personal data, nor do we carry out automated profiling.

3. Purpose of processing

• Managing and responding to enquiries received by email.
• Assessing the fit between the received enquiry and the firm's services.
• Maintaining the pre-contractual or contractual relationship arising from the initial contact.

4. Legal basis

Where the email comes from a prospective client enquiring about the firm's services, the legal basis is the application of pre-contractual measures requested by the data subject (Art. 6(1)(b) GDPR).

For all other correspondence received, the legal basis is the controller's legitimate interest in handling and replying to it (Art. 6(1)(f) GDPR).

5. Retention period

Data will be retained for as long as necessary to handle the enquiry and, where applicable, for the duration of the contractual relationship. Once concluded, data will be kept in a blocked state for the applicable statutory limitation periods (generally three years for civil claims and five years for commercial obligations).

6. Recipients

Data are not transferred to third parties except as required by law. The following providers are involved:

• GitHub Pages (GitHub, Inc., USA) — website hosting.
• Cloudflare (Cloudflare, Inc., USA) — DNS provider for the domain.
• Google Workspace (Google) — email service where correspondence is received and stored.

Any international transfers that may occur are covered by the standard contractual clauses approved by the European Commission.

7. Data subject rights

You may exercise the following rights against the controller at any time:

• Access: to know what data we process about you.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request deletion of your data when no longer necessary.
• Restriction: to request that we suspend processing in certain circumstances.
• Portability: to receive your data in a structured, commonly used format.
• Objection: to object to processing based on legitimate interest.
• Withdrawal of consent: at any time, without retroactive effect.

To exercise your rights, send an email to info@alonsoycamposadvisors.com indicating the right you wish to exercise and attaching a copy of your identity document.

If you consider that the processing does not comply with applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Security

We implement the technical and organisational measures necessary to ensure the security of your data and prevent its alteration, loss, unauthorised processing or access, having regard to the state of the art, the nature of the data and the risks to which it is exposed.

9. Cookies

This website does not use proprietary tracking or advertising cookies. Browser local storage may be used exclusively for the technical operation of the site.

10. Amendments

We reserve the right to update this policy to adapt it to legislative changes or changes to the services provided. The current version will always be available on this page.