Privacy Policy
Last updated: October 2026
1. Data controller
The controller of your personal data is Mr Juan Rojano Trujillo, a self-employed practising lawyer trading as "Juan Rojano Trujillo Abogados" (the "Firm"), Tax ID (NIF) 24843039A, with address at C/ Decano Félix Navarrete 2, Entreplanta, 29002 Málaga (Spain). Telephone: +34 952 611 196. Email: info@juanrojanotrujilloabogados.com. This policy is governed by Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 of 5 December (LOPDGDD).
2. Data we process
Through the contact form we process your name, your email address and the content of your enquiry. If you choose to include information about your health or other special categories of data in your message, we will only process it with your explicit consent and solely to assess your enquiry. For clients, we also process the data needed to provide the legal services entrusted to us.
3. Purposes of processing
We process your data to: (a) handle and reply to enquiries received through the form, by email or by telephone; (b) provide the legal services entrusted to us, including defending your interests before courts, tribunals and public authorities; (c) carry out the administrative, accounting and tax management arising from those services; and (d) send you informative communications, only if you have consented to this.
4. Legal basis
Handling enquiries is based on your consent (Art. 6(1)(a) GDPR), given by ticking the box on the form; if you include health data, on your explicit consent (Art. 9(2)(a) GDPR). Providing services to clients is based on the performance of the legal services contract (Art. 6(1)(b) GDPR) and, for health data needed for the defence, on Art. 9(2)(f) GDPR (establishment, exercise or defence of legal claims). Accounting and tax management is based on compliance with legal obligations (Art. 6(1)(c) GDPR).
5. Retention period
Data from enquiries that do not lead to an engagement will be kept for as long as needed to reply and, at most, two years. Client data will be kept for the duration of the professional relationship and, afterwards, for the limitation periods of any liabilities that may arise and the periods required by tax and accounting law. After those periods, it will be securely deleted.
6. Recipients
We do not disclose your data to third parties except where required by law or where necessary to defend your interests (for example, to courts and tribunals, the Spanish National Social Security Institute, mutual insurance companies or other public authorities). To provide our services we use providers that access data as processors, with whom we have signed the agreements required by Art. 28 GDPR: IONOS Cloud S.L.U. (email, with servers in the European Union), Vercel Inc. (website hosting) and Web3Forms (delivery of contact form messages).
7. International transfers
Some of these providers are located in the United States. Transfers are made under a European Commission adequacy decision (EU-U.S. Data Privacy Framework) where the provider is certified or, failing that, under the standard contractual clauses approved by the European Commission (Art. 46 GDPR). In addition, the map on the contact page is loaded from Google Maps (Google LLC), which may collect browsing data under its own privacy policy.
8. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, without affecting the lawfulness of prior processing. To do so, write to info@juanrojanotrujilloabogados.com or to the postal address above, stating the right you wish to exercise and proving your identity.
9. Complaint to the supervisory authority
If you believe that the processing of your data does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).
10. Professional secrecy and security
All information you provide to us is protected by the lawyer's duty of professional secrecy (Art. 542.3 of the Spanish Organic Law on the Judiciary). We apply appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of your data.
11. Minors
This website is not intended for children under 14. If you are under that age, the enquiry must be made by your parent or legal guardian.