Privacy policies

1. Data Controller

• Identity: VICTORIA Y ASOCIADOS BOUTIQUE LEGAL SLP («INMIGRITY»)
• CIF: B25994351
• Address: Calle Mayor 4, 6-6, 28013, Madrid
• Email de contacte: [jose.jara@inmigrity.com]
• Data Protection Officer: Mr José Jara Terrés

2. What personal data do we process and for what purpose?

At INMIGRITY, we process the data you provide us with for the following purposes:

a) Provision of the contracted legal services:

• Data processed: Identification details (name, surname, DNI/NIE/Passport), contact details (email, telephone, address), personal characteristics (date and place of birth, nationality, marital status, parentage), family, academic and professional details, and any other data contained in the documentation necessary for processing (birth/marriage certificates, residence registration, full passport, criminal records, etc.).
• Purpose Manage, process, and track your immigration or nationality file with the relevant Public Administrations.
• Legal basis The processing of the pre-contractual and contractual relationship requested by you (Article 6.1.b of the GDPR).

b) Payment Management

• Data processed: Required identification and payment details.
• Purpose Manage the collection of our fees through our payment gateway.
• Legal basis The performance of the contract (Article 6.1.b GDPR).

c) Commercial communications and remarketing:

• Data processed: Email address and name.
• Purpose To send you information about other INMIGRITY services, legislative updates or promotions that may be of interest to you.
• Legal basis Your express consent (Article 6.1.a of the GDPR), which you may withdraw at any time.

3. Data Communication to Third Parties

Your data will only be communicated to third parties when strictly necessary for the provision of the service or by legal obligation:

• Competent Public Administrations (Foreigners' Offices, Ministry of Justice, etc.) for the submission and processing of your file.
• Banking entities and payment gateways (e.g. Banco Santander) for payment management.
• Technology service providers (hosting, management software, etc.) who act as data processors and with whom we have signed the corresponding confidentiality and security agreements.
• Courts and Tribunals, in case of a court order.

4. International Data Transfers

As a general rule, your data will not be transferred internationally to countries outside the European Economic Area. If in the future this becomes necessary for the provision of the service (for example, through a technology provider), INMIGRITY will ensure that such a transfer is carried out with the appropriate safeguards required by the GDPR (Standard Contractual Clauses, adequacy decisions, etc.).

5. Processing of Special Categories of Data

INMIGRITY does not directly request data considered to be special categories under the GDPR (health, trade union membership, political opinions, etc.). However, we are aware that documentation provided for immigration procedures (e.g., criminal record certificates) may contain sensitive information. Therefore, we apply enhanced technical and organisational security measures to guarantee the utmost confidentiality and protection of all your information.

6. Data Retention Periods

Your personal data will be retained for the time strictly necessary to fulfil the purposes for which it was collected:

• During the term of the contractual relationship: For the correct provision of the service.
• Once the service is completed: We will keep your data duly blocked for the legal prescription periods for the consideration of possible liabilities. At a minimum, the following periods will apply:

• 6 yearsFor the purposes of commercial documentation (Commercial Code).
• 5 yearsFor possible civil actions (Civil Code).
• The deadlines established by tax and anti-money laundering regulations.
• The deadlines arising from the regulations on legal professional liability.

Once these periods have expired, your data will be securely deleted. Data used for marketing purposes will be retained until you withdraw your consent.

7. Your Data Protection Rights

You can exercise your rights of access, rectification, erasure, restriction of processing, data portability, and objection at any time, as well as withdraw your consent, by sending a written request to [jose.jara@inmigrity.com, attaching a copy of your identity document.

Additionally, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.esif you believe your rights have been violated.

8. Safety Measures

INMIGRITY has adopted the necessary technical and organisational measures to guarantee the security and integrity of its personal data, and to prevent their alteration, loss, unauthorised processing or access.