Data controller
- Controller: Esteban Cañaz Varela, lawyer (Cañaz Advocats / Advocat Garraf).
- Address: C/ Amàlia Soler, 146, 08720 Vilafranca del Penedès, Spain.
- Email: e.canaz@icab.cat. Telephone: +34 618 799 647.
We are not required to appoint a data protection officer. For any question about your data, write to the address above.
Data we process and where it comes from
- Contact forms: name, telephone, email (if provided), type of matter, urgency and your message. You provide them yourself.
- Calls, WhatsApp and email: the information you give us when contacting us, including documents (summonses, claims, complaints) that may contain special categories of data (for example, data relating to criminal offences). Such data is processed only in the context of legal advice.
- Browsing: technical data (IP address, pages visited, device) through cookies, only with your consent for analytics cookies. See the cookie policy.
Purposes, legal bases and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Dealing with your enquiry and contacting you (form, call, WhatsApp) | Consent (Art. 6.1.a GDPR) and pre-contractual steps at your request (Art. 6.1.b) | Up to 12 months after the enquiry if no engagement follows |
| Providing the legal service engaged | Performance of the contract (Art. 6.1.b) and legal obligations of the profession (Art. 6.1.c), including the processing of criminal data necessary for the defence (Art. 10 GDPR and Art. 9 LOPDGDD) | For the duration of the relationship and the limitation periods for liability (at least 5 years; 10 years for anti-money-laundering obligations where applicable) |
| Sending information | Consent, which can be withdrawn at any time | Until consent is withdrawn |
| Website usage statistics | Consent (cookies) | As set out in the cookie policy |
| Handling rights requests and complaints | Legal obligation | Statutory periods |
Recipients
Your data is not shared with third parties unless required by law or necessary to provide the service: courts, the public prosecutor, procuradores, experts, notaries, public authorities, insurers, or the other party and their lawyer where the procedure requires it.
We use providers acting as processors under contracts compliant with Article 28 GDPR: website hosting (Hostinger, servers in the European Union), the firm’s case management software, email and office tools. If you accept analytics cookies, Google Ireland Ltd. processes browsing data (Google Analytics), with possible transfers to the United States under the EU-US Data Privacy Framework and standard contractual clauses.
If you message us on WhatsApp, the communication goes through WhatsApp (Meta Platforms Ireland Ltd.), which applies its own terms and privacy policy. If you prefer not to use that channel, email or call us.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent at any time, by writing to e.canaz@icab.cat or by post to the office address, enclosing a copy of an identity document. We reply within one month.
You may also lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (www.aepd.es), with the Autoritat Catalana de Protecció de Dades, or with the authority of your country of residence (for example the ICO in the United Kingdom or the DPC in Ireland).
Professional secrecy
All information you give us as a client or enquirer is covered by the lawyer’s professional secrecy (Article 542.3 of the Spanish Organic Law on the Judiciary and the rules of professional ethics), in addition to data protection law.
Security
We apply technical and organisational measures appropriate to the risk: encrypted connection (HTTPS), access control, backups and providers offering guarantees. No system is infallible; in the event of a data breach affecting you, we will inform you as required by law.
Minors
This site’s services are intended for adults. If you are under 14, do not send us data without your parents’ or guardians’ consent.
Changes
This policy may be updated to reflect changes in the law or the service. The current version is the one published on this page. Last updated: November 2026.