Privacy policy
Last updated: 13 September 2026
Diaz Cameselle is committed to processing personal data lawfully, fairly and transparently. This Privacy Policy explains how personal data collected through this website or in connection with enquiries made to the practice are processed in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation or GDPR) and Spanish Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
1. Data Controller
The data controller is:
Lucia Diaz-Cameselle, practising under the name Diaz Cameselle
Independent legal practice
Email: contact@diazcameselle.com
2. Personal data and purposes of processing
Personal data may be processed where a person contacts Diaz Cameselle through the website, by email or through another professional communication channel.
Such data may include identification and contact details and any information voluntarily provided in connection with an enquiry.
Personal data are processed for the following purposes:
- to receive, assess and respond to enquiries;
- to take steps requested before entering into a professional engagement;
- where an engagement is accepted, to provide legal services and manage the professional relationship;
- to comply with applicable legal, regulatory and professional obligations; and
- to maintain the security and proper operation of the website and communications systems.
Only personal data reasonably necessary for the relevant purpose will be processed. Users should avoid submitting confidential, special-category or otherwise sensitive information through the website unless it is necessary for the enquiry.
3. Legal basis
Depending on the circumstances, processing is based on one or more of the following grounds:
Pre-contractual measures and performance of a contract. Personal data may be processed where this is necessary to respond to a request concerning a possible professional engagement or, once accepted, to perform that engagement, pursuant to Article 6(1)(b) GDPR.
Legal obligations. Data may be processed where necessary to comply with legal or professional obligations applicable to the practice, pursuant to Article 6(1)(c) GDPR.
Legitimate interests. Certain processing may be necessary for the legitimate interests of Díaz Cameselle in managing professional communications, maintaining appropriate records and protecting the security and integrity of its website and systems, provided that those interests are not overridden by the rights and freedoms of the data subject, pursuant to Article 6(1)(f) GDPR.
Where consent is required for a particular processing activity, it will be requested separately and may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.
4. Recipients and service providers
Personal data are not sold.
Data may be accessed by service providers that support the operation of the website, email, hosting, information technology or other professional systems, solely where necessary for the provision of those services and subject to the applicable data-protection requirements.
Personal data may also be disclosed where required by law, by a competent authority or where necessary for the establishment, exercise or defence of legal claims.
This website is hosted using WordPress.com. Its provider, Automattic, may process certain data in connection with the provision and operation of the website. Where personal data are transferred outside the European Economic Area, such transfers must be subject to an adequacy decision or other safeguards recognised under the GDPR, including, where applicable, the European Commission’s Standard Contractual Clauses.
5. Retention
Personal data are retained only for as long as necessary for the purpose for which they were collected.
Information relating to an enquiry that does not result in a professional engagement will be retained only for the period reasonably necessary to deal with the enquiry and, where appropriate, to establish, exercise or defend legal claims.
Where a professional engagement is established, personal data may be retained for the duration of the engagement and thereafter for the periods required by applicable legal, professional, tax, accounting or other regulatory obligations and limitation periods.
6. Data protection rights
Subject to the conditions established by applicable law, data subjects may request:
- access to their personal data;
- rectification of inaccurate or incomplete data;
- erasure of their personal data;
- restriction of processing;
- objection to processing; and
- data portability, where applicable.
Where processing is based on consent, consent may also be withdrawn at any time.
Requests may be addressed to privacy@diazcameselle.com. Diaz Cameselle may request information reasonably necessary to verify the identity of the person making the request.
Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) if they consider that their personal data have been processed in breach of applicable data-protection law.
7. Automated decision-making
Diaz Cameselle does not use personal data collected through enquiries to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
8. Security and confidentiality
Appropriate technical and organisational measures are applied to protect personal data against unauthorised access, alteration, disclosure, loss or destruction, taking into account the nature of the data and the risks associated with the processing.
Information provided in connection with legal advice is also handled in accordance with the confidentiality and professional secrecy obligations applicable to the legal profession.
9. Changes to this Privacy Policy
This Privacy Policy may be updated where necessary to reflect changes in applicable law, the operation of the website or the processing activities of Diaz Cameselle. The date of the latest revision will be indicated at the beginning of this page.