Last updated: 08/11/2025 At KSROLAW, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with applicable data protection regulations, including the General Data Protection Regulation (GDPR) and Spanish data protection legislation (Ley Orgánica de Protección de Datos, LOPD). 1. Data Controller The data controller responsible for your personal information is: KSROLAW [Dirección completa] [Código postal, ciudad] Email: oscar@ksrolaw.com Phone: +447515318996 2. Information We Collect We may collect and process the following personal information: – Contact information OSCAR CASERO MIGUEL, 16.577.116G, HERCULES STREET 11, N 6AT, LONDON UK – Professional information DIRECTOR – Information provided in consultation requests or contact forms – Communication records and correspondence – Website usage data (IP address, browser type, pages visited) – Any other information you voluntarily provide 3. Legal Basis and Purpose of Processing We process your personal data based on the following legal grounds: Consent: When you provide your information through our contact forms or request our services Contractual necessity: To provide legal services you have requested Legitimate interest: To respond to inquiries and improve our services Legal obligation: To comply with legal and regulatory requirements We use your information for the following purposes: – Providing legal services and consultation – Responding to inquiries and requests – Managing client relationships – Sending information about our services (with your consent) – Complying with legal and regulatory obligations – Improving our website and services – Maintaining security and preventing fraud 4. Data Retention We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Specifically: – Client data: Retained for the duration of the legal relationship and as required by applicable legal retention periods – Contact form data: Retained for a maximum of 2 years unless consent is withdrawn earlier – Website analytics data: Retained for a maximum of 24 months 5. Data Sharing and Disclosure We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances: – With service providers who assist us in operating our business (under strict confidentiality agreements) – When required by law or legal process – With your explicit consent – With professional partners necessary for providing legal services (under attorney-client privilege) 6. International Data Transfers If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as EU-approved standard contractual clauses or adequacy decisions. 7. Your Rights Under data protection legislation, you have the following rights: – Right of access: Request a copy of your personal data – Right to rectification: Correct inaccurate or incomplete data – Right to erasure («right to be forgotten»): Request deletion of your data under certain circumstances – Right to restriction: Limit how we use your data – Right to data portability: Receive your data in a structured, commonly used format – Right to object: Object to processing based on legitimate interests – Right to withdraw consent: Withdraw consent at any time (without affecting prior processing) – Right to lodge a complaint: File a complaint with the Spanish Data Protection Agency (AEPD) To exercise any of these rights, please contact us at [email de contacto]. 8. Cookies Our website uses cookies to enhance user experience and analyze website traffic. You can manage cookie preferences through your browser settings. For detailed information, please see our Cookie Policy. 9. Security Measures We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include: – Secure data encryption – Access controls and authentication – Regular security assessments – Staff training on data protection 10. Third-Party Links Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies. 11. Children’s Privacy Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. 12. Changes to This Privacy Policy We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. 13. Contact Us If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us: KSROLAW Email: OSCAR@KSROLAW.COM Phone: +447515318996 Address: HERCULES STREET 11, N7 6AT, LONDON UK Spanish Data Protection Authority (AEPD) Website: www.aepd.es