VAMOS Privacy Policy
This policy explains what personal data VAMOS Spain Legal Services collects, why we collect it, how long we keep it, and what rights you have over it under the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Spain’s Ley Organica 3/2018 de Proteccion de Datos Personales y garantia de los derechos digitales (“LOPDGDD”).
Who is responsible for your data
The data controller responsible for the personal data described in this policy is VAMOS Academy, operating this site at Calle Reding 6, 29016 Malaga, Spain. Our legal services are provided by Raquel Cobos, abogada colegiada, working within VAMOS Academy.
You can contact us about any data protection matter at alejandro@vamospanish.com or, for matters relating specifically to a legal enquiry, at extranjeria@vamospanish.com. You can also write to us at the postal address above.
What personal data we collect
We collect personal data mainly through the contact form on this site and through direct email or WhatsApp correspondence you choose to send us. Depending on what you submit, this can include:
- Your name
- Your email address
- Your phone number or WhatsApp number
- The service or enquiry type you select or describe
- Any documents you choose to upload or attach, for example identity documents, contracts, or official paperwork relevant to your enquiry
- Any other information you choose to include in a free-text message
We also process limited technical data generated automatically by your browser when you visit the site, such as IP address and browser type, collected by our hosting provider for security and site-operation purposes. Separate from this policy, our Cookie Policy explains what cookies are set on this site and how you can control them.
Legal basis for processing
We rely on one or more of the following legal bases, depending on the situation:
- Consent. When you submit the contact form or write to us, you consent to us processing the data you provide in order to respond to your enquiry.
- Performance of a contract. Once you engage Raquel Cobos to provide a legal service, we process your data as necessary to perform that engagement.
- Legitimate interest. We have a legitimate interest in maintaining the security of this website, preventing abuse of our forms, and keeping basic business records of enquiries received.
- Legal obligation. Spanish law requires lawyers to keep certain client-file and anti-money-laundering records for defined periods, which can require us to retain some data regardless of a later request for erasure.
Why we process your data
We use the personal data described above to: respond to enquiries submitted through the contact form or by email or WhatsApp; assess whether and how we can assist with your situation; provide the legal or administrative service you engage us for; keep the professional and accounting records that Spanish law requires; and maintain the security and normal operation of this website.
We do not use your data for automated decision-making or profiling, and we do not sell or rent your personal data to third parties.
Document uploads
Where our contact form allows you to attach a document, the file is streamed directly to our email inbox at the time of submission. It is not stored in a database or file system on the web server itself. Once received, the document is handled as part of your enquiry and is subject to the same retention and security practices described below as any other email correspondence.
Please avoid uploading more sensitive documents than are actually needed for us to understand your enquiry, and let us know if you would prefer to send a document through another channel.
How long we keep your data
We keep enquiry data, for example a contact-form submission that does not turn into an engagement, for as long as is reasonably necessary to respond and to keep a basic record of the contact, and we delete or anonymise it after a reasonable period of inactivity.
Where you become a client, we keep client-file data for the periods required by Spanish professional and tax law, which can extend several years beyond the end of an engagement (for example, statute-of-limitations periods for professional liability, and accounting and tax record-keeping obligations). Where a specific shorter or longer period applies to your matter, we will tell you at the start of the engagement.
Who we share your data with
We do not sell your data. We share it only where necessary, with:
- Our hosting provider, which stores and serves this website and its infrastructure.
- Our email provider, used to send and receive correspondence, including the contact form and any attached documents.
- Google Workspace, where we use it for email, calendar, or document tools connected to running the practice.
- Google reCAPTCHA, where it is active on a form on this site, to help distinguish genuine enquiries from automated spam.
- Public authorities and other professionals (for example notaries, the Oficina de Extranjeros, the Agencia Tributaria, courts, or opposing counsel) strictly where necessary to carry out the legal service you have engaged us for.
Each of these providers acts as a processor or, where applicable, an independent controller under its own privacy terms, and we only share the data that is necessary for the purpose in question.
International data transfers
Some of the providers listed above, including Google, may process data outside the European Economic Area. Where that happens, the provider is required to rely on an approved transfer mechanism, such as the European Commission’s Standard Contractual Clauses or an adequacy decision, to keep your data protected to a standard equivalent to the GDPR.
Your rights
Under the GDPR and the LOPDGDD, you have the right to:
- Access the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure of your data, where it is no longer needed or you withdraw consent, subject to any legal retention obligations described above.
- Restriction of processing in certain circumstances.
- Portability of the data you provided to us, in a structured, commonly used format.
- Objection to processing based on our legitimate interest.
To exercise any of these rights, contact us at alejandro@vamospanish.com with your request and enough information for us to identify you. We will respond within the timeframes set out in the GDPR.
If you believe we have not handled your data correctly, you also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Espanola de Proteccion de Datos (AEPD), at www.aepd.es.
Security measures
We apply reasonable technical and organisational measures to protect the personal data we hold, including restricted access to our email and case files, use of a hosting provider with its own security controls, and encrypted connections (HTTPS) on this website. No system is completely secure, and we cannot guarantee absolute security, but we take proportionate steps appropriate to the nature of the data involved.
Confidentiality of legal enquiries
Information you share with us in connection with a legal matter is additionally protected by the professional secrecy obligations that apply to Raquel Cobos as an abogada colegiada under Spanish law and the rules of her colegio de abogados. This professional duty of confidentiality applies alongside, and independently of, the data protection rights described in this policy.
Children and minors
This site and our services are directed at adults. We do not knowingly collect personal data from minors without the involvement of a parent or legal guardian. If a matter concerns a minor, for example a family reunification or a child born in Spain, the data is provided and controlled by the accompanying parent or legal guardian.
Changes to this policy
We may update this policy from time to time, for example to reflect a change in the law or in how we process data. The date below shows when it was last revised. If changes are significant, we will take reasonable steps to make that clear on this page.
Last updated: July 2026.
Related information
See also our Legal Notice and our Cookie Policy. If you have questions about this policy or want to exercise your rights, contact us.