Respecting the provisions of current legislation, Legal Human (hereinafter, the Website) undertakes to adopt the necessary technical and organizational measures in accordance with the level of security appropriate to the risk of the data collected.

Laws incorporated into this privacy policy

This privacy policy is adapted to the current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with the following regulations:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
• Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
• Royal Decree 1720/2007 of 21 December, approving the Regulations implementing Organic Law 15/1999 of 13 December on the Protection of Personal Data (RDLOPD).
• Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

Name: Yasmina Maini Dabdoub

Address: Calle Almacil, 5, Door 10, 5th Floor, 46920, Mislata (Valencia), Spain.

Contact phone: +34 665 12 77 58

Contact email: asesorialegalhuman@gmail.com

Collection of personal data

The personal data processed by Legal Human come from the data subject themselves.

The categories of data processed are:

• Identifying data.
• Postal and email addresses.
• Commercial information.
• Financial data.
• Processing of data from potential clients and website contacts.

Only the personal data required for the purpose of the contractual relationship with the data subject are collected.

Purpose of personal data processing

Legal Human collects and manages personal data for the purpose of facilitating, streamlining, and fulfilling the commitments undertaken between the Website and the User, as well as to maintain the relationship arising from any forms the User completes or to address any requests or inquiries made.

In addition, the data may be used for commercial, personalization, operational, and statistical purposes, as well as for activities related to the corporate purpose of Legal Human. They may also be used for information extraction and storage, and for conducting marketing studies to tailor the content offered to the User and improve the quality, functionality, and browsing experience on the Website.

At the time of data collection, the User will be informed of the specific purpose or purposes for which the data will be processed; that is, the use that will be made of the information provided.

Legal Human does not make automated decisions or carry out profiling.

Personal Data Record

In compliance with the provisions of the GDPR and the LOPD-GDD, the User is informed that the personal data collected by Legal Human through the forms available on the Website will be incorporated into and processed in our files for the purpose of facilitating, streamlining, and fulfilling the commitments established between Legal Human and the User, as well as to maintain the relationship arising from any forms the User completes or to address any requests or inquiries they may make.

Furthermore, in accordance with the GDPR and the LOPD-GDD, unless the exception provided in Article 30.5 of the GDPR applies, Legal Human maintains a record of processing activities detailing, according to their purpose, the processing operations carried out and all other circumstances required by current regulations.

Personal data of minors

In accordance with Articles 8 of the GDPR and 7 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights, only individuals over the age of 14 may lawfully give their consent for the processing of their personal data. In the case of a minor under 14, the consent of the parents or legal guardians is required for the processing, and such processing will only be considered lawful to the extent that it has been authorized by them.

Retention period of personal data

The data will be retained for the legally established periods, provided that the data subject does not request their deletion.

Legal basis for data processing

The legal basis for data processing is the explicit consent of the data subject, given by accepting this Privacy Policy and completing the contact form.

Recipients of personal data

The data will be shared with the following recipients:

• Tax Authorities, for the purpose of complying with legal obligations (legal requirement).
• Financial institutions, for the purpose of processing the corresponding payments (contractual requirement).

Disclosure of data to third parties

Personal data will not be disclosed to third parties, except where there is a legal obligation or the data subject has given explicit consent.

Transfers of data to third countries

No transfers of data to third countries are planned.

Rights arising from the processing of personal data

The User has, with respect to Legal Human, the rights recognized in the General Data Protection Regulation (GDPR) and in Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights. These rights can be exercised before the Data Controller and include:

• Right of access: The User’s right to obtain confirmation of whether Legal Human is processing their personal data. If so, the User may access information about such data, the processing carried out, its origin, and the recipients of any communications made or planned.
• Right to rectification: The User’s right to request the correction of personal data that is inaccurate or incomplete, considering the purposes of the processing.
• Right to erasure (“right to be forgotten”): The User’s right to request the deletion of their personal data when it is no longer necessary for the purposes for which it was collected, when consent is withdrawn and there is no other legal basis for the processing, when the User objects to the processing and there are no legitimate grounds to continue it, when the data have been processed unlawfully, when deletion is required by law, or when data have been collected in the context of offering information society services to minors under 14 years of age.
• Right to restriction of processing: The User’s right to request that the processing of their data be limited when they contest its accuracy, when the processing is unlawful, when the Controller no longer needs the data but the User requires them for the formulation of claims, or when the User objects to the processing.
• Right to data portability: Where processing is carried out by automated means, the User has the right to receive their personal data in a structured, commonly used, and machine-readable format, as well as to transmit it to another Data Controller. Where technically feasible, Legal Human may send the data directly to the new Controller.
• Right to object: The User’s right to object to the processing of their personal data or to request that such processing be ceased by Legal Human.
• Right not to be subject to automated decisions, including profiling: The User’s right not to be subject to decisions based solely on automated processing of their personal data, including profiling, except in cases permitted by applicable law.

To exercise these rights, the User must send a written communication to the Data Controller referencing:

• Full name of the User and a copy of their ID. In the case of representation, the identification of the representative and the document proving such representation will also be required. The copy of the ID may be replaced by any legally valid means that allows verification of identity.
• Detailed request explaining the purpose of the application or the information required.
• Address for notification purposes.
• Date and signature of the applicant.
• Documentation supporting the request, if necessary.

The request and any attached documentation may be sent to:

Postal address: Calle Almacil, 5, Door 10, 5th Floor, 46920, Mislata (Valencia), Spain

Email: asesorialegalhuman@gmail.com

Complaints to the supervisory authority

If the User believes that there is a problem or a violation of current regulations regarding the processing of their personal data, they have the right to effective judicial protection and to lodge a complaint with a supervisory authority, in particular in the country where they have their habitual residence, place of work, or where the alleged infringement occurred. In Spain, the supervisory authority is the Spanish Data Protection Agency (http://www.agpd.es).

Data security

Legal Human implements appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction.