Privacy policy.

Pending legal review — GDPR (EU) 2016/679 and Spanish LOPDGDD 3/2018.

1. Data controller

[Company name] · CIF [xxxxxxxx] · Sant Miquel 46, 07002 Palma de Mallorca · palma@legal-steps.com.

2. Data we process

• Contact data (name, email, phone) provided voluntarily via the form.
• Content of enquiries sent by email.
• Minimum technical server data (IP, timestamp) — kept for the legal retention period.

3. Purpose and legal basis

Responding to the enquiry (Art. 6(1)(b) GDPR, pre-contractual measures) and, where applicable, meeting statutory retention obligations (Art. 6(1)(c) GDPR).

4. Retention

Data is retained for the duration of the professional relationship and, after its end, for the applicable statutory periods (LSSI, tax law, professional rules).

5. Recipients

No data is transferred to third parties except when legally required. Data may be processed by technical service providers under a data-processing agreement (Art. 28 GDPR).

6. Your rights

You have the right of access, rectification, deletion, objection, restriction and portability. Requests to palma@legal-steps.com. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).