13. Updates to This Policy
This Privacy Policy may be updated whenever there are changes to internal procedures, the services offered, the tools used, or applicable legislation.
Last updated: 08/06/2026
12. Data Security
EspanhaJur adopts appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or improper destruction.
Access to data is limited to personnel who need such information to perform their duties.
11. Automated Decision-Making and Profiling
EspanhaJur does not make decisions based solely on automated processing that produce legal effects or significantly affect the data subject.
Responses provided in forms may be used to organize, classify, and prioritize contacts according to the service of interest, place of residence, and the expected timeframe to begin the process.
This classification does not automatically determine engagement, approval of any immigration process, or the provision of services. Every relevant decision will be reviewed by a member of the EspanhaJur team.
10. Complaints to the Supervisory Authority
If a person believes their personal data is not being processed in accordance with the law, they may file a complaint with the Agencia Española de Protección de Datos (AEPD).
AEPD website: https://www.aepd.es
9. Withdrawal of Consent
Where processing is based on consent, the person may withdraw it at any time via email:
Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal.
The person may also request that future commercial communications be discontinued.
8. Rights of Data Subjects
Data subjects may exercise, where applicable, the following rights:
-
access to their data;
-
rectification of incorrect or outdated data;
-
erasure of data;
-
objection to processing;
-
restriction of processing;
-
data portability;
-
withdrawal of consent.
To exercise these rights, a request should be sent to:
Data protection email: espanhajur@espanhajur.com.br
The request must indicate which right is being exercised and contain sufficient information to confirm the identity of the requester.
When necessary to prevent improper access by third parties, an identification document may be requested.
7. International Data Transfers
Some technology vendors used by EspanhaJur, including companies within the Meta group, may process or store data outside the European Economic Area.
Where applicable, such transfers will be carried out based on mechanisms recognized under the GDPR, such as adequacy decisions, standard contractual clauses approved by the European Commission, or other legally established safeguards.
6. Data Sharing
Personal data may be processed or shared with vendors necessary for the provision of services and the company's operations, such as:
-
Meta Platforms, through Facebook and Instagram instant forms;
-
website hosting and maintenance providers;
-
email platforms;
-
scheduling tools;
-
CRM or contact management systems;
-
file storage services;
-
communication and support tools;
-
technology providers;
-
authorized EspanhaJur staff and professionals;
-
public authorities, when legally required.
Personal data will not be sold or shared with third parties for their own commercial purposes without an adequate legal basis.
Tools and vendors actually used by EspanhaJur: META, WHATSAPP, CRM, CALENDAR, AND OTHER PLATFORMS.
5. Data Retention Period
Data will be retained for as long as necessary to handle the request, maintain contact, and assess a possible engagement.
If no engagement occurs, data may be retained for up to 12 months after the last contact, unless the person requests deletion earlier.
If engagement occurs, data will be retained for the duration of the contractual relationship and, subsequently, for the legal periods required to comply with tax, administrative, contractual, or legal obligations.
4. Legal Basis for Processing
The processing of personal data may be based on:
-
the consent of the interested person, when they voluntarily complete and submit a form;
-
the adoption of pre-contractual measures, when processing is necessary to review a service request;
-
the performance of a contract, when the person engages EspanhaJur's services;
-
compliance with legal obligations applicable to the company.
Where processing is based on consent, the person may withdraw it at any time.
3. Purposes of Data Use
Personal data may be used to:
-
receive and manage information requests;
-
initially understand the profile and needs of the interested person;
-
make contact to respond to the request;
-
present the services offered by EspanhaJur;
-
assess the feasibility of providing the requested services;
-
schedule a sales call, meeting, or consultation;
-
follow up on communications initiated by the person themselves;
-
send information related to the requested service;
-
comply with legal, administrative, and contractual obligations.
2. What Personal Data We Collect
EspanhaJur may collect the following personal data:
-
full name;
-
email address;
-
phone number;
-
country or place of residence;
-
service of interest;
-
immigration objective;
-
expected timeframe to begin the process;
-
information voluntarily provided in forms;
-
data sent during communications with the EspanhaJur team;
-
information necessary to respond to service or contracting requests.
In initial contact forms, we do not request personal documents, health data, criminal records, or other information considered sensitive, except when strictly necessary at a later stage and with proper notice to the data subject.
1. Data Controller
The party responsible for the processing of personal data is:
-
Full legal name: ESPANHA JUR GESTORÍA ADMINISTRATIVA S.L.P.
-
Trade name: EspanhaJur
-
NIF/CIF: B75792499
-
Registered address: C/ los Cuadros 19, 28860 Madrid
-
Email for data protection matters: espanhaju@espanhajur.com.br
-
Contact phone: +34 674 85 22 87
Privacy Policy
EspanhaJur values the privacy and protection of the personal data of its clients, prospective clients, and users of its service channels.
This Privacy Policy explains how personal data is collected, used, stored, and protected, in compliance with the General Data Protection Regulation (GDPR) and applicable Spanish legislation.