Privacy Policy
Data Controller
In compliance with the General Data Protection Regulation, Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, and all other applicable regulations, users are informed that the personal data provided through the website https://rld.es/ will be processed by:
Controller: R L D ASOCIADOS SA
Tax ID No.: A79139374
Professional address: Zurbano, 65 – 3rd Floor Left, 28010 Madrid, Spain
Telephone: +34 91 308 65 93
Email: rld@rld.es
Website: https://rld.es/
RLD also has a professional presence in Dubai:
Address: Jumeirah Lakes Towers, Cluster F, HDS Tower, 14th Floor, PO Box 487.863, Dubai, United Arab Emirates
Telephone: +971 44 205 963
Email: rld.uae@rld.es
The Spanish Data Protection Agency recommends that data protection information be clear and include, among other aspects, the identity of the controller, purposes, legal basis, retention, recipients and users’ rights.
Personal data we may process
Through the website, RLD may process the personal data that the user voluntarily provides through contact forms, email, telephone or other enabled channels.
The data processed may include:
Name and surname.
Email address.
Telephone number.
Company, position or professional details, where provided.
Information included in the message or enquiry submitted.
Technical data derived from the use of the website, such as IP address, online identifiers, browser information or cookie-related data, where applicable.
The user guarantees that the data provided is truthful, accurate, complete and up to date.
Purposes of processing
RLD may process the user’s personal data for the following purposes:
a) Responding to enquiries and information requests
We process the data sent through contact forms, email or telephone in order to respond to enquiries, analyse requests and assess whether our professional services are suitable for the situation presented.
b) Managing professional communications
We may use the data provided to maintain communications related to an enquiry, request, potential professional engagement or previous relationship with RLD.
c) Analysing the feasibility of a professional relationship
When the user contacts RLD to request advice or submit a transaction, we may process the information provided to carry out a preliminary review, check for conflicts of interest, assess the nature of the matter and determine whether it is possible to accept the engagement.
d) Managing a contractual or pre-contractual relationship
If a professional relationship is formalised, the data will be processed for the provision of legal services, administrative management, billing, compliance with legal obligations and maintenance of the relationship with the client.
e) Compliance with legal obligations
RLD may process personal data when necessary to comply with legal, tax, accounting, professional, anti-money laundering, bar association or competent authority requirements.
f) Security and maintenance of the website
We may process technical data to ensure the security, operation, maintenance and improvement of the website, as well as to prevent unauthorised access, misuse or security incidents.
g) Sending informative communications
Only where there is a sufficient legal basis, user consent or a prior relationship that allows it, RLD may send informative, professional or corporate communications related to its services, publications, insights or activities.
Legal basis for processing
The legal basis for processing the data will depend on each purpose:
User consent: when the user voluntarily submits a form, accepts an information checkbox or authorises the processing of their data for a specific purpose.
Application of pre-contractual measures: when the user requests information, submits an enquiry or asks for a preliminary assessment of professional services.
Performance of a contract: when there is a professional or contractual relationship with RLD.
Compliance with legal obligations: when processing is necessary to comply with regulations applicable to RLD.
Legitimate interest: to ensure website security, prevent misuse, manage professional communications or maintain relationships with clients, always respecting users’ rights and freedoms.
The GDPR requires transparent information to be provided about the legal basis applicable to each processing activity, especially when personal data is collected directly from the data subject.
Data retention
Personal data will be retained for the time necessary to fulfil the purpose for which it was collected.
In particular:
Data submitted through contact forms will be retained for the time necessary to respond to the enquiry and, where applicable, carry out the corresponding follow-up.
Data related to a potential professional relationship will be retained for the time necessary to assess the engagement, carry out internal checks and comply with possible legal obligations.
Client data will be retained for the duration of the professional relationship and, thereafter, for the legally required periods to address tax, accounting, legal, professional or contractual liabilities.
Data processed on the basis of consent will be retained until the user withdraws such consent, unless there is another legal basis that allows its retention.
Technical and security data may be retained for the time necessary to ensure website security and address possible liabilities.
Once these periods have expired, the data will be deleted or blocked in accordance with applicable regulations.
Data recipients
As a general rule, RLD will not disclose the user’s personal data to third parties, unless there is a legal obligation, user consent or it is necessary for the provision of the requested service.
The data may be disclosed or made accessible to:
Technology providers, hosting providers, website maintenance providers, email providers, CRM providers or other digital services necessary for the operation of the website.
Advisers, professional collaborators or correspondents, when necessary to analyse or provide the requested service.
Public administrations, courts, tribunals, professional associations, regulatory authorities or competent entities, when there is a legal obligation.
Banks, administrative service providers or management agencies, when necessary for contractual, accounting or tax management.
Providers that access personal data will do so as processors and must comply with the obligations required by data protection regulations.
International data transfers
RLD has a professional presence in Spain and the United Arab Emirates. Therefore, in certain cases, the management of enquiries, transactions or services may involve communications or processing of information linked to both jurisdictions.
When it is necessary to carry out international data transfers outside the European Economic Area, RLD will adopt appropriate safeguards in accordance with the GDPR, such as adequacy decisions, standard contractual clauses, explicit consent of the data subject or other legally established mechanisms.
Likewise, some technology providers used for the operation of the website or the management of communications may be located outside the European Economic Area or process data from third countries. In such cases, efforts will be made to ensure that such providers offer appropriate safeguards in accordance with applicable regulations.
Contact forms
The website provides contact forms so that users may submit enquiries or requests to RLD.
When submitting a form, the user should provide only the data necessary to deal with their request. It is recommended not to include especially sensitive data, excessive confidential information or reserved documentation until RLD expressly confirms acceptance of the professional engagement.
Submitting a form does not in itself create a lawyer-client relationship or imply automatic acceptance of a matter by RLD.
Confidentiality and professional secrecy
RLD will process the information received with confidentiality and professional diligence.
However, until there is express acceptance of the professional engagement, the submission of information through the website or by email should not be understood as the automatic formalisation of a lawyer-client relationship.
If such relationship is formalised, the information will be processed in accordance with the applicable legal, professional and ethical obligations.
Users’ rights
The user may exercise, under the terms established by current regulations, the following rights:
Right of access.
Right to rectification.
Right to erasure.
Right to object.
Right to restriction of processing.
Right to data portability.
Right to withdraw consent at any time, where processing is based on consent.
Right not to be subject to automated individual decision-making, where applicable.
To exercise these rights, the user may send a request to:
Email: rld@rld.es
Postal address: Zurbano, 65 – 3rd Floor Left, 28010 Madrid, Spain
The request must indicate the right the user wishes to exercise and be accompanied, where necessary, by sufficient information to verify the applicant’s identity.
The user also has the right to lodge a complaint with the Spanish Data Protection Agency if they consider that the processing of their data does not comply with applicable regulations. The Spanish Data Protection Agency includes these rights within the information duty that must be provided to data subjects.
Data security
RLD will apply appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, disclosure or destruction.
However, no computer system, website or internet data transmission can guarantee absolute security. Therefore, the user must act prudently when submitting confidential or sensitive information through electronic means.
Third-party data
If the user provides personal data of third parties through the website, they declare that they have sufficient authorisation to do so and undertake to inform such third parties about the content of this Privacy Policy.
RLD may reject or delete information that is unnecessary, excessive or not relevant to the purpose of the enquiry.
Minors
The website and RLD’s professional services are not aimed at minors.
Minors must not provide personal data through the website without the authorisation of their parents, guardians or legal representatives.
Commercial or informative communications
RLD may send professional, informative or corporate communications when the user has expressly authorised it or when there is a prior relationship that allows it under applicable regulations.
The user may object to receiving this type of communication at any time by writing to rld@rld.es or by using the unsubscribe mechanism that may be included in such communications.
Social media and external links
The website may include links to social media, professional platforms or third-party websites.
RLD is not responsible for the data processing carried out by such external platforms. The user must consult the privacy policies corresponding to each service or third-party website.
Changes to the Privacy Policy
RLD may modify this Privacy Policy when necessary to adapt it to regulatory, technical, organisational or website operational changes.
The current version will be the one published on the website at any given time.
Last update
Last updated: May 2026.