Privacy policy

Last updated: October 2026

1. Data controller

Miriam Acerete (Acerete Abogados), ICAV member no. 20213, is the controller of the personal data you provide to us. You can get in touch at miriam@acereteabogados.es or on +34 674 328 073.

2. Purpose of processing

We process your data to respond to your enquiries and contact requests, to manage the professional relationship and, where applicable, to provide the legal services engaged. No automated decisions are taken and no profiling is carried out.

3. Legal basis

The legal basis is your consent when you send us an enquiry, the performance of a services contract where one exists, and compliance with the legal obligations applicable to the legal profession.

4. Retention

We will keep your data for the duration of the relationship and, thereafter, for the periods required by law to address liabilities arising from the service.

5. Recipients

Data will not be disclosed to third parties except where required by law or where it is essential to provide the service (for example, courts, public authorities or technology providers acting as data processors).

6. Web analytics

This site measures its own use through PostHog, a provider acting as a data processor whose data for this site is held on European Union servers, with no international transfers. The purpose is to see in aggregate how the site is navigated so we can improve it, and the data processed is browsing data, not data you provide to us. The legal basis is your consent, which you give or refuse in the cookie notice and can withdraw at any time. With the same consent we also use Google Analytics, from Google Ireland Limited, which may process data in the United States under the EU-US Data Privacy Framework. See the Cookie policy for details of what is recorded and how you can prevent it.

7. “Does the EU AI Act apply to you?” test

The answers you give in the EU AI Act test are processed only in your browser to calculate the result: they are not stored or sent anywhere.

If you fill in the form to receive the PDF report, I process your name, email, company (if given), result and answers to send you the report and reply to your enquiry. Only if you tick the relevant box, also to send you updates on AI and the law. The legal basis is your consent, which you can withdraw at any time by writing to miriam@acereteabogados.es; you can unsubscribe from updates in every email.

The form is handled by Netlify, Inc., the company that hosts this website, as data processor. Netlify stores submissions in the United States, so there is an international data transfer, covered by the standard contractual clauses approved by the European Commission that are included in its data processing agreement.

I keep this data for one year from submission if we do not start a professional relationship, and update subscriptions until you unsubscribe. If you instruct me, the periods in section 4 apply. If you have accepted analytics cookies, PostHog records in aggregate that the test was started or completed and the result category, never your name or email.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to miriam@acereteabogados.es, providing proof of identity. If you believe the processing does not comply with the rules, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

See also our Legal notice, Cookie policy and Accessibility statement.