PRIVACY POLICY

• 1. To whom does this Privacy Policy apply?
• 2. Who is the data controller?
• 3. What is the legal basis for processing the data?
• 4. What information do we process?
• 5. For what purposes do we process the data?
• 6. For how long will we keep the data?
• 7. To which recipients are the data disclosed?
• 8. May international transfers of the data take place?
• 9. What rights does the user have over the data provided?
• 10. How do we protect our users’ data?
• 11. Amendments
• 12. Applicable law

1. To whom does this Privacy Policy apply?

By visiting or consulting the website www.lawants.com (hereinafter, the “Website”) and using the services we offer, the user (clients, prospective clients and business partners, among others) accepts the processing of their personal data, agreeing to the terms set out in this document (hereinafter, the “Privacy Policy”).

This Privacy Policy and the manner in which your data are processed shall be governed by the General Data Protection Regulation, Regulation (EU) 2016/679 (“GDPR”).

2. Who is the data controller?

The following are the relevant details of the Data Controller in respect of the personal data processed and provided by users:

3. What is the legal basis for processing the data?

The legal basis for the processing of personal data is:

The completion of the forms on the Website; these forms (section 4.a) are filled in by the data subject, who shares certain information and thereby gives their full consent to the processing of their personal data.

4. What information do we process?

The information we receive from users, or which they share with us, and which will be treated with the utmost confidentiality, is processed and managed as set out below.

Information that users provide to us directly:

LAWANTS collects and stores certain information that the user enters on the Website through the following sections/forms.

Information that users provide to us indirectly:

Data quality: the user must guarantee, both vis-à-vis LAWANTS and vis-à-vis third parties, the quality of the information and personal data provided through the Website. This means that all personal data and information provided must be real, truthful, up to date and belong to the user and not to third parties. Where they belong to third parties, we understand that this is with their consent and we ask that such third parties be invited to read our legal texts as soon as possible.

Changes to data: the user must notify LAWANTS of any change to the personal data provided, and shall in any event be responsible for the truthfulness and accuracy of the data supplied at all times.

5. For what purposes do we process the data?

6. For how long will we keep the data?

LAWANTS will retain the user’s personal data for as long as is reasonably necessary to: fulfil any of the purposes mentioned in this Privacy Policy and comply with applicable legislation, regulatory requirements and relevant orders of competent courts.

Your personal data will be anonymised or deleted once they are no longer relevant for the purposes for which they were collected.

7. To which recipients are the data disclosed?

The personal data collected by LAWANTS will be used exclusively for the achievement of the purpose defined on the Website. In order to achieve that purpose and to properly provide the service, LAWANTS may share certain personal data of users:

• Law enforcement: Upon prior legal request, LAWANTS may share information with law enforcement bodies and/or third parties in respect of requests for information relating to criminal investigations and alleged unlawful activities.
• External service providers: In order to fulfil the purposes of this Privacy Policy, it is necessary for us to give access to your personal data to third parties that support us in the services we offer you, namely: financial institutions, technology and analytics service providers which in some cases may act as joint controllers, always under the exclusive control of LAWANTS, where necessary to provide our services.
• Instant messaging application: WhatsApp Ireland Limited or WhatsApp LLC, depending on the geographical area in which you are located, is the platform that enables us to send text messages, images, videos and documents and to make voice and video calls with users who so request. Your data may be used to operate and provide its services, to verify accounts, combat harmful conduct and protect users from spam or negative experiences, and for communications about its services, among other purposes. You may consult its Privacy Policy here.
• With the user’s consent: Apart from the above, the user will be informed in the event that any information concerning them is disclosed to the Website’s business partners, or to third parties, for purposes other than those set out on the Website (e.g. for commercial purposes), so that they have the opportunity to decide that their information should not be shared.

None of the above disclosures of data shall include selling, renting, sharing or otherwise revealing customers’ personal information for commercial purposes in a manner contrary to the commitments undertaken in this Privacy Policy.

8. May international transfers of the data take place?

In the event that we transfer your personal data to a third country, that is, a country outside the European Economic Area (the countries of the European Union plus Liechtenstein, Iceland and Norway) or one that does not have a recognised adequate level of data protection, we will comply with all laws applicable to such transfer, including ensuring that your personal data are kept secure and that safeguards are in place to ensure adequate protection.

To this end, LAWANTS will use the Standard Contractual Clauses on data protection adopted by the European Commission or, where applicable, will rely on the EU-US Data Privacy Framework (in the case of data transfers to the United States).

9. What rights does the user have over the data provided?

The user may exercise the following rights vis-à-vis LAWANTS:

• Right to be informed: The user has the right to receive clear, transparent and easily understandable information about the way in which we use their information and about their rights. For this reason, we provide such information in this Privacy Policy.
• Right of access: The user has the right to obtain access to their information (where we are processing it), as well as to other types of information (similar to that provided in this Privacy Policy), so that they are informed and can verify that we use their information in accordance with data protection legislation.
• Right to rectification: The user has the right to have their information (inaccurate data) corrected where it is incorrect or incomplete.
• Right to erasure: Also known as the “right to be forgotten”, this allows the user to request the deletion or erasure of their information where the data are no longer necessary for the purposes for which they were collected. This is not a general right of erasure; exceptions exist.
• Right to restriction of processing: The user has rights enabling them to “block” or prevent further use of their information. Where processing is restricted, we will retain their information solely for the exercise or defence of legal claims. We also keep lists of users who have requested that further use of their information be “blocked” in order to ensure that the restriction is respected in the future.
• Right to data portability: The user has rights enabling them to obtain and reuse their personal data for their own purposes across different services.
• Right to object: The user has the right to object to certain types of processing, including processing for direct marketing purposes, except on compelling legitimate grounds or for the exercise or defence of potential legal claims.

The exercise of the above rights is strictly personal, and the user will therefore be required to prove their identity. In order to exercise the aforementioned rights provided for by law, the user may contact LAWANTS by email at barcelona@lawants.com or in writing to the address set out in section 2 of this Privacy Policy.

The communication must contain the following details and documents:
* First name and surname of the data subject, enclosing a photocopy of their national identity document or other valid identification document and, where applicable, that of the person representing them; the use of an electronic signature shall exempt the data subject from submitting these documents.
* Indication of the data subject’s address and the specific request being made (the right being exercised).

We also remind you that you may exercise some of these rights yourself:
You may withdraw your consent to the installation of cookies, in relation to the processing of personal data for the purposes determined by the function of such cookies, via the cookie installation management tool available on our Website.

The user shall also have the right to lodge a complaint with the relevant Supervisory Authority or with the Spanish Data Protection Agency (www.aepd.es) whenever they deem it appropriate.

10. How do we protect our users’ data?

LAWANTS informs the user that it has adopted the technical and organisational measures required by the legislation in force on data protection in order to guarantee the security of their data and to prevent their unauthorised alteration, loss, access or processing.

As mentioned above, the personal data provided by users through the Website will not be transferred to other entities or companies for use for their own purposes. However, certain companies subcontracted by LAWANTS may have access to personal data and information, always under the exclusive control of LAWANTS, for the sole purpose of providing a service necessary for the proper operation of the Website and of our services.

11. Amendments

LAWANTS reserves the right to amend this Privacy Policy in accordance with the legislation applicable at any given time.

It is therefore advisable for the user to review this Privacy Policy periodically in order to remain informed about the processing and protection of personal data and about the rights to which they are entitled.

12. Applicable law

This Privacy Policy shall be governed by and construed in accordance with Spanish law, as shall the resolution of any dispute or disagreement relating to this Website.

Use of the services of this Website implies express acceptance of Spanish jurisdiction.

Date of last update: June 2026.