Legal information
Privacy policy
Full information on the processing of your personal data under the General Data Protection Regulation and Spanish data protection law (LOPDGDD).
Last updated: 14 September 2026
1. Data controller
- Controller
- de Boet & Asociados · Tax ID 46136040H
- Address
- Avenida Diagonal 468, 6ª planta · 08006 Barcelona
- Contact
- info@herencias.eu · 935 839 553
- Data protection contact
- info@herencias.eu (please put "Data protection" in the subject line)
This policy has been drawn up in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD) and Law 34/2002 (LSSI-CE).
2. What data we process and where it comes from
We process only the data you voluntarily provide through the contact form, by email or by telephone: full name, telephone number, email address, subject of the enquiry, preferred means of contact and the description of the matter you wish to raise with us.
In the initial description of your case, please do not include third-party data or special categories of data (health, beliefs, etc.) beyond what is strictly necessary. That information will be collected, where appropriate, once the professional engagement is formalised and with adequate safeguards.
Browsing the Website does not require registration and we do not use tracking cookies or third-party analytics tools (see the Cookie policy). The web server technically and temporarily records the IP address and request data in its access logs for security purposes.
3. Purposes and legal basis
| Purpose | Legal basis (art. 6 GDPR) |
|---|---|
| To handle your request for information or an initial consultation and to contact you by the means you indicate. | Pre-contractual steps at the data subject's request (art. 6.1.b) and consent (art. 6.1.a). |
| To provide the legal services engaged, manage the file and invoicing. | Performance of the service contract (art. 6.1.b) and compliance with legal obligations (art. 6.1.c): tax, Bar and anti-money-laundering rules (Law 10/2010) where applicable. |
| To verify identity and prevent fraud or abuse of the form. | Legitimate interest (art. 6.1.f) in the security of the Website. |
| To send you, if you expressly authorise it, information on legal developments from the firm. | Consent (art. 6.1.a), which may be withdrawn at any time. |
We do not profile you or take automated decisions with legal effects on you.
4. Retention periods
Data from enquiries that do not lead to a professional engagement are kept for a maximum of 12 months from the last communication, and are then deleted.
Where there is a professional relationship, data is kept for the duration of the engagement and, once concluded, for the limitation periods of any liabilities arising from it (as a general rule, 5 years under art. 1964 of the Civil Code and 10 years for anti-money-laundering purposes), as well as the periods required by tax and Bar regulations. During that time the data is blocked and processed only to deal with possible claims.
5. Recipients and processors
We do not disclose your data to third parties except where legally required or where necessary to provide the service engaged (courts, notaries, registries, tax authorities, court agents, experts or collaborating lawyers), always with your knowledge.
To operate the Website and the firm we use providers acting as processors with the safeguards of article 28 GDPR:
- Web hosting and email: servers located in the European Union (Hetzner Online GmbH, Germany) and the email service associated with the herencias.eu domain.
- Practice management tools (office software, document management and invoicing), with data centres in the European Union or with adequate safeguards for international transfers.
Web fonts and other Website resources are served from our own server: simply browsing does not involve sending data to Google or other third parties.
6. International transfers
As a general rule we do not transfer data outside the European Economic Area. If any provider were to process data outside the EEA, we will ensure there is a European Commission adequacy decision or standard contractual clauses in place, and will state so in this policy.
7. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw any consent given, by writing to info@herencias.eu or by post to the firm's address, enclosing a document proving your identity. We will reply within one month at most.
If you consider that the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid · www.aepd.es) or with the Catalan Data Protection Authority (Autoritat Catalana de Protecció de Dades) (apdcat.gencat.cat).
8. Security and professional secrecy
We apply technical and organisational measures appropriate to the risk: encrypted communications (HTTPS/TLS), access control to systems, backups and staff training. All information you entrust to us is also protected by the lawyer's professional secrecy (art. 542.3 LOPJ and professional conduct rules), which continues even after the professional relationship has ended.
9. Minors
The Website is not aimed at children under 14. If you are a minor, please ask your parents or guardians to contact us on your behalf.
10. Changes to this policy
We may update this policy to adapt it to regulatory changes or new Website features. The current version will always be the one published on this page, showing the date of the last update.
Any questions about how we process your data?
Write to us at info@herencias.eu and we will reply within 24 working hours.