Updated: 24 October 2026
Privacy policy
This policy explains how GONZÁLEZ Y TODA ABOGADOS, C.B. processes personal data supplied through the firm’s website and appointment calendar.
1. Controller
GONZÁLEZ Y TODA ABOGADOS, C.B. · NIF E26530964 · Avda. Gran Vía Juan Carlos I, 65, Entreplanta Centro, 26005 Logroño, La Rioja, Spain. Contact and data rights: info@gytabogados.com. Telephone: 941 047 082.
2. Data, purposes and legal bases
Enquiries and information requests
We process your name, email address, optional telephone number and message to respond and communicate with you. Sending an enquiry does not book an appointment or constitute acceptance of an engagement. Where you enquire about our services, the legal basis is taking pre-contractual steps at your request (GDPR Article 6(1)(b)). For other general communications, our legitimate interest in responding to requests applies (Article 6(1)(f)).
Booking, changing and cancelling appointments
We process the identification and contact details you enter, the consultation type, assigned professional, date, time and comments to manage appointments, check availability and send related messages. We use Microsoft Bookings and Microsoft 365 professional calendars. Automatic confirmation is based on available time slots. The basis is pre-contractual steps you request or performance of a contract, as appropriate (Article 6(1)(b)). The booking system does not decide the merits of your legal matter or acceptance of an engagement.
Website operation and security
Technical data such as IP address, access date and time, browser and error logs may be processed to provide the service and prevent unauthorised access or abuse, based on our legitimate interest in security and operation (Article 6(1)(f)).
3. Required data and recommendations
Fields marked with an asterisk are necessary to handle the request. The contact form’s telephone field is optional. Without necessary data, we may be unable to respond or process a booking. Describe your enquiry briefly. Do not send identity documents, medical or criminal information or other people’s data through the form. If documents are needed, we will explain the appropriate channel and applicable data protection information.
The policy-reading checkbox records that the information has been provided. It is not consent for advertising. Enquiries and bookings do not subscribe you to marketing.
4. Retention
Enquiry data are kept for the time necessary to respond and maintain related communications. Appointment data are kept as necessary to organise assistance and manage incidents. Data needed for legal obligations or establishing, exercising or defending claims are retained for applicable periods, with restricted access and, where appropriate, blocking, then deleted. Cancellation releases the time slot, but a cancellation and communication record may remain. If a professional engagement is agreed, case processing and retention will be explained in the engagement documentation.
5. Access and recipients
Authorised staff may access data where necessary to handle your request. Hosting, maintenance, email and booking providers may act as processors under applicable agreements and conditions. Services used include Raiola Networks hosting and Microsoft 365, including Bookings. Data may be disclosed to authorities or bodies when legally required. We do not sell form data.
6. External services and international transfers
The external Microsoft calendar stays blocked until you allow it in cookie settings. Using it may disclose technical and usage data to Microsoft. Design fonts are served from our hosting. Technology services may involve processing outside the European Economic Area, requiring an adequacy decision or the safeguards provided by GDPR Chapter V, as appropriate.
Microsoft’s business-service processing terms are set out in its Data Protection Addendum. You may ask the firm about providers and applicable safeguards.
7. Your rights
You may request access, rectification, erasure and, where legal conditions apply, restriction, portability or objection. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing. Contact info@gytabogados.com or the postal address, identifying the right you wish to exercise. Further identity information will only be requested when necessary and proportionate. You may complain to the Spanish Data Protection Agency.
8. Cookies and changes
Read the cookie policy and change your choice using “Cookies”. This policy does not replace further information supplied when engaging services or using the private area. Non-essential resources requiring consent must be managed through the preference system. This policy may be updated to reflect service or processing changes. The applicable version is available through the website’s privacy links.