Privacy Policy

1. What Is This Policy and Who Does It Apply To?

In compliance with the General Data Protection Regulation (GDPR – EU 2016/679) and Organic Law 3/2018, this policy explains how we process the personal data of those who use our website www.buenaley.es (hereinafter, the “Website”) and our services.

The provision of Personal Data requires a minimum age of 18 years or, where applicable, sufficient legal capacity to enter into contracts.

This policy applies to:

• Users browsing the Website 🧭
• Clients who purchase our services 💼

By using the Website, you accept this policy and consent to the processing of your personal data as described herein.

2. Who Is the Data Controller?

• Name: Buenaley Tech SL
• Tax ID: B22981757
• Address: Plaza de la Solidaridad, 12, 5th floor, 29006 Málaga
• Email: hola@buenaley.es

3. What Data Do We Collect?

We collect the personal data you provide when you:

• Fill in forms or purchase services
• Contact us by email, WhatsApp, or chat
• Use the Website and accept cookies

Data may include: first name, surname, email, telephone, identity document, postal address, and other information necessary to provide our legal services.

4. How Do We Use Your Data?

We use your personal data only where the law permits. The main purposes and legal bases for processing are as follows:

• To provide our legal services: because this is necessary for the performance of the contract with you.
• To send you service-related notifications: because we have a legitimate interest in keeping you informed of the status of your procedure or matter.
• To respond to your enquiries or requests: because this is necessary to manage the contractual or pre-contractual relationship with you.
• To send you commercial communications (such as newsletters or updates): only if you have given your prior and explicit consent.
• To analyse the use of the website through cookies: only if you have accepted their use via the relevant banner or settings.

5. Who Do We Share Your Data With?

We only share your data with:

• Members of the Buenaley team in connection with your case
• Technology providers (hosting, email, CRM)
• Public authorities where required by law

6. International Transfers

If any of our providers is located outside the European Economic Area, we ensure that it complies with adequate safeguards (such as the European Commission's Standard Contractual Clauses).

7. Links and Third-Party Services

Our Website may contain links to external websites, services, or platforms, as well as functionalities that allow you to log in or integrate via third-party accounts.

Please note that when interacting with these services, certain personal data may be shared with us — such as your name or email address — depending on the settings you have on those services.

We do not control the privacy policies of these third parties or how they manage your data. We therefore recommend reviewing their policies before interacting with them or providing them with personal information.

8. Security

We apply technical and organisational measures to protect your data. Only authorised personnel have access to it, always subject to confidentiality obligations.

9. How Long Do We Retain Your Data?

We retain your data only for as long as necessary to:

• Provide the service
• Comply with legal obligations
• Handle any potential claims

In some cases, such as commercial communications, you may unsubscribe at any time.

10. Your Rights

You may exercise the following rights at any time:

• Access to your data
• Rectification of errors
• Erasure (“right to be forgotten”)
• Objection or restriction of processing
• Data portability
• Withdrawal of consent

Write to us at hola@buenaley.es stating which right you wish to exercise.

If you are not satisfied, you may lodge a complaint with the Spanish Data Protection Agency: www.aepd.es