Privacy policy
Last updated: 30 October 2026
1. Data controller
- Controller
- Jessica Silva Menéndez
- Trade name
- Silva Menéndez Legal
- Tax ID (NIF)
- 61184378P
- Professional address
- Calle Mora de Ebre 27t, 08023 Barcelona, Spain
- [email protected]
- Phone
- +34 666 49 18 99
Silva Menéndez Legal is committed to processing users’ personal data in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 and other applicable data protection legislation.
2. What data may we process?
Depending on how the user interacts with the website, the following data may be processed:
- First name and surname.
- Email address.
- Phone number.
- Information provided voluntarily in the contact form.
- Information needed to manage a consultation request or booking.
- Technical data arising from the use of the website, where applicable.
Users are advised not to include especially sensitive or confidential documents or information in the initial contact form, unless strictly necessary.
3. What do we use the data for?
Personal data may be processed to:
- Respond to inquiries and requests for information
- When the user gets in touch through the form, by email or by other means made available.
- Manage consultation requests and bookings
- To arrange the date and time of the consultation, contact the person concerned and manage the necessary communications related to the booking.
- Manage the pre-contractual or professional relationship
- When the person concerned requests information about possibly hiring legal services or when a professional engagement is subsequently formalized.
- Comply with legal and professional obligations
- When the processing is necessary to comply with applicable legal, tax, ethical or professional obligations.
Data provided through the form will not be used to send newsletters or periodic commercial communications without the corresponding legal basis.
4. Legal basis
The legal basis depends on each processing activity and may be:
- Taking pre-contractual steps at the request of the person concerned.
- Performing the contractual or professional relationship where there is an engagement.
- Complying with applicable legal obligations.
- The consent of the person concerned, where required.
5. Data retention
Data will be kept for as long as necessary to fulfill the purpose for which it was collected.
When a professional relationship is formalized, data may then be kept for the periods needed to comply with the applicable legal, tax, professional and ethical obligations and to deal with any liability arising from the relationship.
Inquiries that do not lead to a professional relationship will only be kept for the period reasonably necessary to respond to them and handle any related follow-up communications, without prejudice to the periods required by law.
6. Recipients and providers
Personal data will not be sold or transferred to third parties for commercial purposes.
Providers of services necessary for the operation of the practice or the website, such as web hosting, email, technical support or booking management tools, may have access to certain data, acting as data processors where applicable.
- Booking provider
- Microsoft Ireland Operations Limited (Microsoft Bookings, part of Microsoft 365)
When the client pays for the consultation via Bizum, Stripe or PayPal, the data needed for the payment is processed by the relevant bank or payment provider under its own terms. Silva Menéndez Legal does not receive or store bank card details.
Where information needs to be shared with other professionals or entities in order to provide a legal service, this will be done in accordance with the applicable legislation and the corresponding professional obligations.
7. International transfers
Some technology providers may process information from countries outside the European Economic Area.
Where providers involving international data transfers are used, these transfers will be carried out in accordance with the mechanisms and safeguards provided for in the GDPR.
8. Your rights
Users may exercise, where applicable, their rights of access, rectification, erasure, objection, restriction of processing and portability, and may withdraw their consent where the processing is based on it.
To exercise them, please write to: [email protected]
The request must include the information needed to identify the person concerned and to process the request properly.
The person concerned also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing of their data does not comply with the applicable legislation.
9. Security and confidentiality
Appropriate technical and organizational measures will be taken to protect personal data against loss, alteration, unauthorized access, disclosure or improper processing.
The processing of information received in the course of a professional relationship is also subject to the applicable legal duties of confidentiality and professional secrecy.
10. Updates to this policy
This Privacy Policy may be amended when necessary due to changes in legislation, technology, the services offered or the providers used.