Privacy policy
In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) on the protection of personal data and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we inform you of how we process the personal data you provide to us through this website: forms, online appointment booking, WhatsApp, email and telephone.
The website owned by SÁNCHEZ BOCANEGRA Y ASOCIADOS, S.L. contains links to third-party websites whose privacy policies are independent of those of SÁNCHEZ BOCANEGRA Y ASOCIADOS, S.L.
When you access such websites, you may decide whether to accept their privacy and cookie policies. In general, when browsing the internet you can accept or reject third-party cookies in your browser settings.
Who is the controller of your data?
Data controller: Sánchez Bocanegra y Asociados, S.L.
Tax ID (CIF): B29534567
Address: Avda. Ricardo Soriano, 65 – 2º-5 – 29601 Marbella – Málaga (Spain)
Telephone: +34 952 775 812
Email: info@bocanegra.com
Source and categories of the data we process
Source: the data we process come directly from the data subjects themselves and are obtained by email, telephone, WhatsApp, web forms and online appointment booking.
The categories of data we process are:
- Identification data: first name and surname, nationality (where you provide it) and image.
- Contact data: email address and telephone number.
- Other data: the content of your enquiry and, if you book an appointment, the service, day and time chosen.
Purpose and legal basis for processing your personal data
Data collected through the web contact forms Personal data received through our web forms are processed in order to respond to the enquiries, requests for information and quotations submitted by the data subjects. |
Art. 6.1(b) GDPR. Processing is necessary in order to take steps at the request of the data subject prior to entering into a contract. |
Online appointment booking and WhatsApp enquiries The data you provide when booking an appointment or messaging us on WhatsApp are processed in order to manage and confirm your appointment and respond to your enquiry. | Art. 6.1(b) GDPR. Processing is necessary in order to take steps at the request of the data subject prior to entering into a contract. |
Photographs published on the Website Processing of images of data subjects who have consented to the publication of their image on the Controller’s website. |
Art. 6.1(a) GDPR. The data subject has given consent for this specific purpose.
|
Consents obtained
The documents/records of the consents we obtain will be kept in order to comply with a legal obligation. |
Art. 7 GDPR. Conditions for consent.
Art. 6.1(c) GDPR. Processing is necessary for compliance with a legal obligation to which the Controller is subject. |
Retention of your personal data.
Your data will be kept for the periods established by law according to the purposes for which they were obtained, as detailed below:
Pre-contractual steps: where the processing of your data is based on taking pre-contractual steps to respond to your request for information and/or a quotation, your data will be kept for a maximum of one year from the date on which they were obtained. After this period, your data will be completely deleted from our information systems.
Professional relationship: if you engage our services, your data will be processed in accordance with the corresponding letter of engagement or contract and will be kept for the period required by the applicable legislation.
Consent given: where we ask for your consent to process your personal data, we will keep your data for the time strictly necessary to fulfil the purposes for which we obtained your consent, until they are no longer needed for those purposes or, failing that, until you decide to withdraw your consent.
Compliance with a legal obligation/Conditions for consent: if you withdraw your consent, we will keep the record/document of the consent you gave for the statutory limitation period provided for in data protection legislation.
Disclosure of your data to third parties
We do not disclose your personal data to third parties unless required by a legal obligation applicable to our organisation. For example, if requested, your data could be disclosed to the Spanish Data Protection Agency (AEPD) in order to comply with a legal obligation.
We also inform you that, on an ancillary basis and only where necessary, your data may be processed by external professionals who provide us with auxiliary services necessary for our professional activity, such as the provider of the domain for our corporate email or the hosting of our website (data hosted on external servers), database management applications or IT technical support.
To run the website we use third-party services that may process technical data and, where applicable, the data you enter: Google (reCAPTCHA, which protects the forms against abuse, and Google Maps), Trustindex (which displays Google reviews), WhatsApp (Meta) together with the chat service that links to it, and the appointment booking system with, where applicable, its payment gateway (Stripe). The cookies they install are detailed in the Cookie Policy.
International data transfers
Some of the providers mentioned (such as Google, Meta or Stripe) may process data outside the European Economic Area. In that case they do so with the safeguards provided for in the GDPR, such as an adequacy decision or standard contractual clauses. Other than in those cases, we do not transfer your personal data to countries outside the European Economic Area or to international organisations.
YOUR DATA PROTECTION RIGHTS
- Right to request access to your personal data.
- Right to request their rectification or erasure.
- Right to request restriction of processing.
- Right to object to processing.
- Right to data portability.
- Right to withdraw consent given.
Everyone has the right to obtain confirmation as to whether or not SÁNCHEZ BOCANEGRA Y ASOCIADOS, S.L. is processing personal data concerning them. You have the right to access your personal data and to request the rectification of inaccurate data or, where appropriate, their erasure where, among other reasons, the data are no longer necessary for the purposes for which they were collected.
In certain circumstances, you may request the restriction of processing of your data, in which case we will keep them only for the exercise or defence of legal claims. Likewise, in the cases provided for by law, you will have the right to the portability of your personal data.
In certain circumstances and on grounds relating to your particular situation, you may object to the processing of your data. In this case, SÁNCHEZ BOCANEGRA Y ASOCIADOS, S.L. will stop processing your data, unless there are compelling legitimate grounds, or for the establishment, exercise or defence of possible legal claims.
You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
You may object to the processing of your data for commercial and advertising purposes by sending an email to info@bocanegra.com.
You may exercise your rights by sending an email to info@bocanegra.com or a letter to Avda. Ricardo Soriano, 65, 2º-5, 29601 Marbella – Málaga (Spain)
If you feel that your rights regarding the protection of your personal data have been infringed, especially where you have not obtained satisfaction in exercising your rights, you may lodge a complaint with the Spanish Data Protection Agency through its website: www.aepd.es
Last reviewed: 9 October 2026