Privacy Policy
Introduction
This Privacy Disclosure provides detailed information on how our law firm collects, processes, and protects personal data in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD).
Data Controller
ELLIPSE IP SL, located in Spain, is the entity responsible for processing personal data. For any inquiries regarding data protection, you may contact us at info@ellipseip.com
Categories of Personal Data Collected
We may collect the following categories of personal data:
Identification Data: Name, surname, contact details (email, phone number, address).
Professional Data: Job title, employer information, and legal matters of interest.
Legal Case Data: Any data necessary for the provision of legal services.
Financial Data: Billing information, bank details, and payment records.
Technical Data: IP address, device information, and browsing behavior collected through our website.
Sources of Personal Data
Personal data is obtained through:
Direct interactions (e.g., when you contact us for legal services or submit an inquiry).
Third-party sources such as regulatory bodies, legal databases, and public records.
Our website and electronic communications.
Purpose of Processing Personal Data
We process personal data for the following purposes:
To provide legal services and advice.
To comply with legal and regulatory obligations.
To manage client relationships and communications.
To process payments and invoices.
To ensure cybersecurity and prevent fraud.
To improve our website and services.
Legal Basis for Processing
We process personal data based on:
Performance of a Contract: When necessary to provide legal services.
Compliance with Legal Obligations: As required under Spanish and EU law.
Legitimate Interest: To improve and optimize our legal services.
Consent: When required for specific activities such as marketing.
Data Sharing and Third-Party Disclosures
We may share personal data with:
Regulatory and Public Authorities: When legally required.
Third-Party Service Providers: Including IT support, cloud storage, and payment processors.
Legal Professionals and Counterparties: When necessary for case handling.
International Data Transfers
If data is transferred outside the European Economic Area (EEA), we ensure compliance through:
Adequacy Decisions: Countries deemed adequate by the European Commission.
Standard Contractual Clauses (SCCs): Approved safeguards for international data transfers.
Binding Corporate Rules (BCRs): Where applicable.
Data Retention Policy
We retain personal data only as long as necessary for:
Legal and regulatory compliance.
Contractual obligations.
Legitimate business interests.
After the retention period expires, data is securely deleted or anonymized.
Rights of Data Subjects
Under GDPR and LOPDGDD, individuals have the right to:
Access: Request information on how we process data.
Rectification: Correct inaccurate or incomplete data.
Erasure (Right to be Forgotten): Request deletion of personal data under certain conditions.
Restriction of Processing: Limit how data is processed.
Data Portability: Obtain a structured copy of data.
Objection to Processing: Challenge processing based on legitimate interests.
Withdraw Consent: Withdraw previously granted consent.
Lodge a Complaint: With the Spanish Data Protection Agency (AEPD).
Any person with whom the firm or any of its members had any interaction or has shared information with us has the right to access, rectify, delete, or limit the use of such personal data. This right can be exercised by contacting us at info@ellipseip.com.
Security Measures
We implement technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.
Updates to this Privacy Disclosure
