Controller
Eduard Pinedo, lawyer, who practises on his own account under the brand LegalBytes, Carrer de Rocafort, 202, entresuelo 4ª, Barcelona. You can contact him about privacy through the contact form at https://legalbytes.eu/en/contact.
What data we process
- Contact enquiries: your name, email, company (if you give it), the practice area you choose and the message you send us.
- Account data, if you open a client account: name, email and password (stored only as a hash).
- Matter data: the information and documents you give us for the engagement, and correspondence with you and, where applicable, with other parties or authorities.
- Engagement letter signature evidence: typed name, timestamp, IP address, browser user agent and a fingerprint of the signed text.
- Billing data needed to invoice our fees.
Purposes and legal bases
- Answering your enquiry and arranging a first call — your consent and the steps you ask us to take before entering into a contract (Art. 6(1)(a) and (b) GDPR).
- Managing the engagement and your client account — performance of a contract (Art. 6(1)(b) GDPR).
- Billing and collecting fees — performance of a contract and legal obligation (Art. 6(1)(b) and (c) GDPR).
- Complying with our legal obligations, including accounting, tax and anti-money-laundering rules that apply to lawyers — legal obligation (Art. 6(1)(c) GDPR).
- Keeping records of the engagement in order to defend against possible claims — legitimate interest (Art. 6(1)(f) GDPR).
Visit statistics
To know how the website is used (which pages are visited, in which language and from which website or campaign visitors arrive), we keep anonymous, aggregated visit statistics on our own server, without cookies and without storing or reading anything on your device.
For each page view we record only: the page (without parameters or identifiers), the website language, the domain of the site you came from (not the full address), any campaign tags in the link (utm_source, utm_medium, utm_campaign), the device type (mobile, tablet or computer, deduced from your browser and then discarded) and the date. We do not store your IP address, your browser's user agent, any identifier or anything you type in forms, so the statistics cannot be linked to you or combined into a profile. Your IP address is only used momentarily, in memory, to protect the service against abuse.
Legal basis: our legitimate interest in measuring and improving the website (Art. 6(1)(f) GDPR). The statistics stay on our own server (Arsys, servers in Spain), are not shared with anyone and are deleted after 400 days. If your browser sends a Do Not Track or Global Privacy Control signal, nothing is recorded. You may object at any time through the contact form at https://legalbytes.eu/en/contact.
Recipients
Where the engagement requires it, we disclose to other parties, authorities or registries only the data the matter requires, on your instructions.
Processors acting on our instructions: Arsys Internet S.L.U. (hosting, servers in Spain) and our email service provider. We do not sell your data or use it for advertising.
International transfers
As a rule, your data stay in the European Economic Area. If a transfer outside it were needed for your matter, we would tell you beforehand and apply the safeguards the GDPR requires.
Retention
Contact enquiries that do not lead to an engagement are deleted once answered, within a reasonable period. Active matters are kept while the engagement lasts. Closed matters, the engagement letter, signature evidence and documents are kept for 36 months after closing to handle possible claims, and then deleted. Data subject to a legal retention period (accounting, tax or anti-money-laundering records) are kept for as long as the law requires. Anonymous visit statistics are deleted after 400 days.
Professional secrecy
Everything you share with us about your matter is also covered by the lawyer's duty of professional secrecy, which continues after the engagement ends.
Security
Access to the platform is restricted by role and authenticated, and every access by our team to a matter and its files is logged.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, through the contact form at https://legalbytes.eu/en/contact. Some data cannot be erased while a legal retention period applies. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the supervisory authority of your country of residence.