Privacy Policy

Last updated: May 2025

1. Who is responsible for your data

Cristina Cirillo, immigration and labour lawyer registered with the Ilustre Colegio de la Abogacía de Barcelona (ICAB No. 47,311), operating under the brand Cristina Cirillo, based in Barcelona, Spain.

Contact: cristina@cirillolegal.com

2. What data we collect

When you contact us via the website, WhatsApp, or email, we may collect:

• Name and surname
• Email address and phone number
• Information you voluntarily share about your legal situation
• Technical data (IP address, browser, device) via analytics tools

3. Why we collect your data (legal basis)

• To respond to your enquiry — legitimate interest and pre-contractual relationship (Art. 6.1.b GDPR)
• To provide legal services — performance of a contract (Art. 6.1.b GDPR)
• To comply with legal obligations — applicable law (Art. 6.1.c GDPR)

4. How long we keep your data

We keep your data for the duration of our professional relationship and for the legally required retention periods thereafter (generally 5 years for legal matters under Spanish law).

5. Who we share your data with

We do not sell or share your personal data with third parties for commercial purposes. We may share data with:

• Service providers (Calendly for booking, Stripe for payments) — only what is necessary
• Public authorities when legally required

6. Your rights

Under the GDPR, you have the right to: access, rectify, erase, restrict processing, and object to processing of your personal data. To exercise your rights, contact us at cristina@cirillolegal.com.

You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD): www.aepd.es.

7. International transfers

Some tools we use (Calendly, Stripe) may transfer data outside the EEA. These transfers are covered by Standard Contractual Clauses or equivalent safeguards as required by GDPR.