Privacy Policy

1. Data controller

The data controller for personal data collected through this website is RCM Legal, based in Murcia, Spain. Contact: info@rcm.legal.

2. Data we collect

When you submit an enquiry through our contact form, we collect:

• Your name and email address
• Your telephone number (if provided)
• Your message and any details you share about your legal matter
• The legal area you have indicated

2 bis. Cookies and similar technologies

We use strictly necessary first-party cookies for the operation and security of the website, which do not require consent. With your permission, we may also use preferences, statistics and marketing cookies to improve our services and measure our advertising campaigns.

On entering the site you are shown a consent panel where you can accept, reject or configure cookies by category. Until you give consent, no statistics or marketing cookie is activated (prior consent under EU ePrivacy rules and the GDPR). We use Google Consent Mode so that measurement tools respect your choice. You can change or withdraw your consent at any time via the “Cookie settings” link in the footer. The legal basis for non-necessary cookies is your consent (Art. 6(1)(a) GDPR).

3. Purpose and legal basis for processing

We process your personal data to handle and respond to your enquiry and, where appropriate, to manage the professional relationship that may follow. The legal basis is your consent (Article 6(1)(a) GDPR), given when you submit the contact form, as well as pre-contractual measures taken at your request (Article 6(1)(b) GDPR).

4. Recipients and processors

Your data is stored in an internal management system (CRM) hosted on Supabase infrastructure, with servers located in the European Union (Frankfurt, Germany). Access is restricted to authorised personnel through reinforced authentication.

Email delivery is provided by Resend, Inc. (United States); those transfers are governed by Standard Contractual Clauses in accordance with GDPR Chapter V. We do not sell, rent or otherwise share your data with third parties for commercial purposes.

5. Retention

We retain your data for as long as necessary to handle your enquiry and manage any resulting professional relationship. Absent a contractual relationship, enquiry data is kept for a maximum of 12 months from submission, unless a longer period is required by law or you request earlier deletion.

6. Your rights

Under GDPR and Spanish data protection law (LOPDGDD), you have the right to access, rectify, erase and port your personal data, and to restrict or object to its processing. To exercise any of these rights, contact us at info@rcm.legal.

You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, aepd.es).

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. This website is served over HTTPS and data is transmitted in encrypted form.

8. Changes to this policy

We may update this Privacy Policy from time to time. Any material changes will be communicated by updating the “last updated” date above. Continued use of this website following any update constitutes acceptance of the revised policy.