Legal information

Privacy policy

How we process your personal data, in accordance with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Last updated: 1 November 2026

01Data controller

Controller
Marcel Abram Gatell
Tax ID (NIF)
26295614J
Address
C/ Mallorca, 214, 5.º 1.ª, 08008 Barcelona
Data protection officer
None appointed (not mandatory for this firm)

02What data we process

  • Contact form: name, email, phone (optional), profile, area of the enquiry and the message you send us.
  • Communications: the data you provide by email, phone or WhatsApp.
  • Clients: the data needed to provide the legal service instructed, including the documents relating to the matter.

03Why we process it and on what legal basis

  • To answer your enquiry and, if you ask, send you a quote. Legal basis: your consent (art. 6.1.a GDPR) and steps taken at your request prior to entering into a contract (art. 6.1.b GDPR).
  • To provide the legal services engaged. Legal basis: performance of the contract (art. 6.1.b GDPR).
  • To comply with the firm's legal obligations. Legal basis: legal obligation (art. 6.1.c GDPR), such as tax and accounting obligations, anti-money laundering rules and the ethical duties of the legal profession.
  • To send you the guide or other resources you request. Legal basis: your consent (art. 6.1.a GDPR).
  • To send you commercial communications about our services by email, only if you have authorised it by ticking the corresponding box. Legal basis: your consent (art. 6.1.a GDPR and art. 21 of the LSSI, the Spanish Information Society Services Act). Accepting these communications is required to download our free guide. You can withdraw your consent at any time using the unsubscribe link in each email or by writing to contacto@zeltis.es.

04How long we keep the data

Enquiry data is kept for as long as needed to deal with the enquiry and, if it does not lead to an engagement, for no more than one year. Client data is kept for the duration of the professional relationship and thereafter for the limitation periods of any resulting liability (generally five years) and those required by tax and anti-money laundering legislation (up to ten years).

Data used to send commercial communications is kept until you withdraw your consent.

05Recipients

We do not share your data with third parties unless required by law.

To provide our services we use providers that process data on the firm's behalf:

  • Web hosting: Hostinger International Ltd.
  • Email: Hostinger International Ltd.
  • If you write to us via WhatsApp, that communication is provided through WhatsApp Ireland Limited (Meta group), under its own terms.

06International transfers

Our hosting and email providers process data within the European Economic Area. If you write to us via WhatsApp, Meta may process data outside it, including in the United States; those transfers are covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. If you prefer, you can contact us by email or phone.

07Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to contacto@zeltis.es and stating which right you wish to exercise.

If you consider that we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

08Professional secrecy and security

The information you entrust to us about your matter is protected by legal professional privilege. We apply technical and organisational measures to protect your data: only those who need it to handle your matter have access to it, and our providers are bound by confidentiality and security obligations.

09Changes to this policy

We may update this policy to reflect legal or service changes. The date of the last update is shown at the top of the page.