Legal information

Privacy Policy

Last updated: August 2026

1. Data controller

Controller: Jorge Lacasa Alesón

Tax ID (NIF): 21770476X

Bar registration: Madrid Bar Association (ICAM), nº 135311

Address: Paseo del General Martínez Campos, 21, Madrid, Spain

Email: info@lawcappital.com

This Privacy Policy applies to the processing of personal data of people who visit the Website, submit a contact form, or otherwise get in touch by email or phone with Jorge Lacasa Alesón, trading as Law Cappital.

2. Purposes and legal basis for processing

PurposeLegal basis
Responding to enquiries submitted through the Website's contact formsSteps prior to entering into a contract, or consent of the data subject (Art. 6(1)(b) and 6(1)(a) GDPR)
Managing the professional relationship once a service has been engagedPerformance of the contract for professional services (Art. 6(1)(b) GDPR)
Producing usage statistics for the Website (analytics)Consent of the data subject, obtained through the cookie consent banner
Preventing automated or abusive form submissions (reCAPTCHA)Legitimate interest in protecting the Website from misuse (Art. 6(1)(f) GDPR)
Complying with legal, accounting and professional-conduct obligations arising from the practice of lawCompliance with a legal obligation (Art. 6(1)(c) GDPR)

3. Data processed

Depending on the form or channel used, the following data may be processed: name, surname, email address, and the content of the message or enquiry submitted, which may include information about the data subject's tax, employment, immigration or financial situation, to the extent that they choose to share it voluntarily when describing their case.

No special categories of data (Art. 9 GDPR) are requested. Please avoid including sensitive information in the forms beyond what is strictly necessary to assess your enquiry.

4. Retention period

Data submitted through the contact forms is kept for as long as there is a mutual interest in maintaining contact, and in any event for the periods legally required to address any liability that may arise from the processing. Data belonging to clients with an active engagement is kept for the duration of the professional relationship and, afterwards, for the limitation periods applicable under the legal, tax and professional-conduct rules governing the practice of law.

5. Recipients and data processors

Personal data is not shared with third parties except where required by law. The following providers act as data processors in connection with the Website:

  • Web hosting and WordPress: the hosting provider that hosts the Website.
  • Google Ireland Limited (Google Analytics 4, Google Tag Manager and reCAPTCHA): analysis of Website usage and protection of forms against automated submissions.
  • Trustindex: display of public Google reviews on the Website.

Some of these providers may be located outside the European Economic Area, in particular in the United States. In those cases, the international transfer of data relies on the appropriate safeguards provided for under the GDPR, such as the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses, as applicable to each provider.

6. Data subject rights

Anyone has the right to confirm whether Law Cappital is processing personal data concerning them, and, where applicable, to exercise the following rights:

  • Right of access to their personal data.
  • Right to request rectification of inaccurate data.
  • Right to request erasure where, among other reasons, the data is no longer necessary for the purposes for which it was collected.
  • Right to request restriction of processing in certain circumstances.
  • Right to object to processing.
  • Right to data portability, where technically feasible.

These rights can be exercised by writing to info@lawcappital.com, stating the right you wish to exercise and providing a copy of a document proving your identity.

If you believe your rights have not been properly addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency, the AEPD (www.aepd.es).

7. Security

Reasonable technical and organisational measures have been implemented to protect the security of the personal data processed and to prevent its alteration, loss, or unauthorised processing or access, taking into account the state of the art, the nature of the data, and the risks involved.

8. Minors

The Website is not directed at minors. The contact forms should not be used by anyone under the age of 18 without the authorisation of a parent or legal guardian.

9. Changes to this policy

This Privacy Policy may be updated to reflect legislative developments or changes in how data is processed. We recommend reviewing this page periodically. The date of the last update appears at the top of this document.