Privacy policy

ROCA & ASOCIADOS ABOGADOS Y ECONOMISTAS SLP, hereinafter the CONTROLLER, is responsible for processing Users’ personal data and hereby informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5 (LOPDGDD) and, as per said regulations, the following information is provided:

Purpose of processing: to maintain a commercial relationship with the User.
Said processing shall be carried out for the following operations:

Sending commercial advertising communications by email, fax, SMS, MMS, social communities or any other electronic or physical means of commercial communications existing now or in the future. These communications shall be carried out by the CONTROLLER and be related to its products and services, or collaborators or suppliers it has reached a promotion agreement with. In this case, third parties will never have access to personal data.
Carrying out statistical studies.
Processing commissions, orders or any type of requests made by users through any of the contact forms made available to them.
Sending out the website newsletter.
Legal basis of processing: consent from the data subject.

Data storage criteria: data shall be kept no longer than necessary for the purpose of the processing and, when no longer needed for this purpose, it will be duly removed using appropriate security measures to guarantee the pseudonymisation of the data or its total destruction.

Data disclosure: The data will not be disclosed to third parties, except under legal obligation.

Users’ rights:

Right to withdraw consent at any time.
Right to access, rectification, portability and erasure of data and to the limitation or opposition to its processing.
Right to lodge a claim with the competent supervisory authority (www.aepd.es) if the data subject considers processing does not comply with current regulations.

Contact information to exercise rights:

Caravel·la la Niña, 12, 08017 Barcelona
Email: rocassoc@rocassoc.com



Users, by ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) on the contact form or download forms, expressly, freely and unequivocally accept that said data is necessary for the provider to fulfil their request and that the data requested in the remaining fields is voluntary. Users guarantee that the personal data provided to the CONTROLLER is truthful and accurate, being solely responsible for communicating any modifications thereto.

The CONTROLLER expressly informs and guarantees users that their personal data will not be transferred to third parties under any circumstances, and that whenever they make any kind of transfer of personal data, Users will be asked for their express, informed and unequivocal consent in advance. All the data requested through the website is mandatory, as it is required to provide optimal service to the Users. If all the data is not provided, there is no guarantee that the information and services provided will be completely suited to the User’s needs. 



As per current regulations on the protection of personal data, the CONTROLLER complies with all the provisions of the GDPR regarding the processing of the personal data under its responsibility, and manifestly with the principles described in article 5 of the GDPR, by which it is processed in a lawful, loyal and transparent manner with regard to the data subject and appropriately, pertinently and limited to what is necessary with regard to the purposes for which it is processed.

The CONTROLLER guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established in the GDPR in order to protect the rights and freedoms of Users and has provided information so that they can exercise them. 


let's be in touch, write us a message.