Privacy Policy
1. Data Controller
The party responsible for processing your personal data is:
- Full name: Josep Llorenç i Vilanova
- Tax ID (NIF): 47839875J
- Professional address: Carrer Montnegre nº 12 de Fornells de la Selva (17458) Girona
- Email: info@costabravalegal.com
- Phone: +34 683 360 780
- Professional registration: Member no. 3992 of the Bar Association of Girona
2. Purpose of Data Processing
Personal data provided through this website will be processed for the following purposes:
- Provision of legal services: To manage the professional relationship, provide legal advice in relation to property transactions in Spain, and carry out all necessary legal and administrative steps.
- Handling enquiries: To respond to requests, questions, or communications submitted through the contact form, email, or other channels.
- Compliance with legal obligations: To comply with applicable legal and regulatory requirements, including tax and anti-money laundering obligations.
- Commercial communications (where applicable): To send information about legal services, only where prior consent has been given.
- Website improvement: To analyse navigation and usage of the website in order to improve its functionality and user experience.
3. Legal Basis for Processing
The processing of personal data is based on:
- Performance of a contract or pre-contractual measures: Where processing is necessary to provide legal services or respond to a request.
- Consent: Where the user has given explicit consent (e.g. for commercial communications or certain cookies). Consent may be withdrawn at any time.
- Legal obligation: Where processing is required to comply with applicable laws and regulations.
- Legitimate interest: For administrative management and responding to enquiries.
4. Data Retention
Personal data will be retained only for as long as necessary for the purposes for which it was collected:
- Data related to legal services will be retained for the duration of the professional relationship and, thereafter, for the legally required retention periods.
- Data processed on the basis of consent will be retained until such consent is withdrawn.
- Data relating to enquiries will be retained for the time necessary to address them.
5. Data Recipients
Personal data will not be shared with third parties except where necessary for the provision of services or compliance with legal obligations. This may include:
- Public authorities and institutions involved in the transaction (such as tax authorities, notaries, or property registries)
- Financial institutions where required
- Service providers acting as data processors (e.g. hosting or IT services), under appropriate contractual arrangements
No international transfers of personal data outside the European Economic Area are carried out. If such transfers were to occur, appropriate safeguards would be implemented.
6. Data Subject Rights
You have the right to:
- Access your personal data
- Request rectification of inaccurate data
- Request erasure of your data
- Object to processing
- Request restriction of processing
- Request data portability
To exercise these rights, you may contact: privacy@costabravalegal.com
A copy of an identification document may be required to verify your identity.
If you consider that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).
7. Updates
This Privacy Policy may be updated to reflect legal or technical changes. The latest version will always be available on this website.
Last updated on May 2026