Last updated: April 2026

1. Data Controller

The data controller responsible for your personal data is:

• Firm: Rincón Bernal Abogados (RINBER Abogados)
• Address: C/ Salvago 4, 29005 Málaga, Spain
• Email: info@rinberabogados.com
• Phone: +34 952 218 126
• Bar registration: Colegio de Abogados de Málaga

2. Data We Collect

We collect personal data only when you voluntarily provide it to us, including:

• Contact enquiries: name, email address, telephone number, and the content of your message when you submit a contact form or send us an email.
• Consultations: additional information you share with us in the course of a legal consultation, which may include details of your legal matter.
• Website analytics: anonymised usage data (pages visited, time on site, browser type) collected via Google Analytics.
• Cookies: see our Cookie Policy for full details.

We do not collect sensitive personal data (health, financial account details, biometric data) through this website.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR) / Reglamento General de Protección de Datos (RGPD):

• Legitimate interests (Art. 6(1)(f) GDPR): responding to enquiries you initiate and managing our client relationships.
• Contractual necessity (Art. 6(1)(b) GDPR): where processing is necessary to provide legal services you have engaged us to deliver.
• Legal obligation (Art. 6(1)(c) GDPR): where Spanish law requires us to retain certain records.
• Consent (Art. 6(1)(a) GDPR): for non-essential cookies and marketing communications, where you have given explicit consent.

4. How We Use Your Data

We use the personal data we collect to:

• Respond to your enquiry or request for a legal consultation
• Provide criminal defence legal services where you engage us
• Maintain records required by Spanish bar regulations and applicable law
• Improve the performance and content of this website through anonymised analytics
• Communicate with you about your case or enquiry

We will never sell your personal data to third parties or use it for unsolicited marketing without your consent.

5. Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Legal obligation: courts, prosecutors, and public authorities where required by Spanish criminal procedure or court order.
• Professional advisers: expert witnesses, translators, or co-counsel engaged in your case, bound by confidentiality obligations.
• Service providers: hosting and IT providers who process data solely on our instructions under data processing agreements (including SiteGround, Google Analytics).

6. International Transfers

Google Analytics transfers anonymised data to servers in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, providing adequate safeguards. No other transfers of personal data outside the European Economic Area are made without appropriate safeguards.

7. Data Retention

• Enquiry data: retained for 3 years from the date of your last contact, unless you become a client.
• Client data: retained for 10 years after the conclusion of your matter, in accordance with Spanish bar regulations (Estatuto General de la Abogacía).
• Analytics data: retained for 26 months in anonymised form.

8. Your Rights

Under GDPR / RGPD you have the following rights in relation to your personal data:

• Right of access (Art. 15): to request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): to correct inaccurate or incomplete data.
• Right to erasure (Art. 17): to request deletion of your data where we no longer have a lawful basis to retain it.
• Right to restriction (Art. 18): to limit how we use your data in certain circumstances.
• Right to data portability (Art. 20): to receive your data in a structured, machine-readable format.
• Right to object (Art. 21): to object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@rinberabogados.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish data protection authority: Agencia Española de Protección de Datos (AEPD), www.aepd.es.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Our website is served over HTTPS. Access to client files is restricted to lawyers working on your matter.

10. Legal Professional Privilege

All information shared with us in the context of a legal consultation or engagement is protected by Spanish attorney-client privilege (secreto profesional) under Article 542 of the Ley Orgánica del Poder Judicial and the Estatuto General de la Abogacía. This is a separate and additional protection to GDPR rights.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Contact

For any questions about this Privacy Policy or your personal data, please contact us:

• Email: info@rinberabogados.com
• Post: RINBER Abogados, C/ Salvago 4, 29005 Málaga, Spain
• Phone: +34 952 218 126