Privacy policy

Data Protection Policy

Data Controller

Identity: ILLAY LEGAL SCCLP

CIF: F02956027

DPD Contact: info@illaylegal.com

Intended use

Professional services provision. Storage for the period of 3 years or legally required, whichever  is longer.

Legitmate reason for data processing

User consent

Legitimate interest 

Fulfillment of contractual obligations

Destination

Client’s personal data shall not be ceded, sold to the third parties under no circumstances. ILLAY legal may allow access to said data to the the co-counsels, notaries, corporate and property registrars, court liason officers (procuradores), sworn experts, sworn translators and other similar officials and professionals, bound by contract obligations with the Client and/or member Attorneys of ILLAY legal SCCL, and only when strictly necessary to render services the Client ordered; also, the personal details shall be shared with bodies of the Spanish government involved in the processing of the cases or , or when it is required by law. 

Data processors

ILLAY legal uses for personal data processing the IT systems operated by the following companies, who may act as Data subprocessors: Google Ireland LTD, 4 Barrow Street, Dublin Ireland, Clio Ireland Ltd, Arthur Cox Building, Earlsfort Terrace, Dublin 2, Ireland, QSOFT LLC, Columbus Ave, Suite 407, San Francisco, USA, Holded Techonologies S.L., Paseo don Joan Borbo Comte Barcelona, 101, Barcelona, 08039, Barcelona., Celonis Inc. One World Trade Center 87th floor, New York, USA; AMAZON WEB SERVICES EMEA SARL, SUCURSAL EN ESPAÑA, CALLE RAMIREZ DE PRADO, 5, 28045 MADRID, SPAIN; Twilio Ireland LTD 3 Dublin Landings North Wall Quay Dublin 1, D01 C4E0 Ireland; Sendinblue SARL 106 Boulevard Housmann, 75008, Paris France; Voice Cloud S.L. av/Cortes Valencianas, 58-1003, Valencia, Spain – 46015. Calendly, LLC, Calendly, Inc. 115 E Main St., Ste A1B, Buford, GA 30518, United States, Sumo Group Inc. (d/b/a “TidyCal”), 1305 E. 6th St #3, Austin, TX 78702. 

Each of these data processors has a data protection policy in place, compliant, to the best of ILLAY LEGAL’s knowledge, to the highest standards of data protection. Notwithstanding that, ILLAY legal renounce all and any responsibility the eventual data breaches in these companies and/or failures of these companies to uphold their data protection policies to the extent permitted by the applicable law.  Should the data processor list change, ILLAY legal shall notify the Client of the fact. The actual list of the data subprocessors shall be published on ILLAY legal’s website. 

Cross-border data transmission

Some of the data processors that ILLAY legal uses for personal data processing, are located in the United States of America. Apart from that, no cross-border data transmission from the EU shall occur.

Client’s rights

Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability by sending a request to info@illaylegal.com, in accordance with the General Data Protection Regulation and applicable Spanish data protection laws.