Privacy policy

This English version is provided for information purposes only. In the event of any discrepancy, the Spanish version shall prevail.

At Migragest we process your data confidentially and in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). In addition, the information you entrust to us is protected by lawyer-client professional secrecy.

1. Data controller

• Controller: Migragest (lawyer Yanet Ramos Ramos)
• Office: General Martitegui 24, Valdemoro – Madrid
• Privacy contact email: yramos@migragest.es

2. What data we process and why

Purpose	Data	Legal basis
Answering the enquiries you send us through the form, email, phone or WhatsApp.	Name, email, phone, country and whatever you tell us in your message.	Your consent (art. 6.1.a GDPR) and steps taken at your request prior to entering into a contract (art. 6.1.b).
Managing consultation bookings through Calendly.	Name, email, phone and the information you provide when booking.	Steps taken at your request prior to entering into a contract (art. 6.1.b).
Providing the legal service engaged and managing your file with the authorities.	Identification and contact details, documents in your file and, where the procedure requires it, other data necessary for it.	Performance of the contract (art. 6.1.b) and compliance with legal obligations (art. 6.1.c).
Invoicing and accounting and tax obligations.	Identification and billing data.	Legal obligation (art. 6.1.c).

Some procedures may require special categories of data. We only process them when they are necessary for your file, with your explicit consent or because they are necessary for the establishment, exercise or defence of legal claims (art. 9.2 GDPR). That is why we ask you not to include them in the web form.

We do not make automated decisions or create profiles. We do not send advertising without your consent.

3. How long we keep your data

• Enquiries that do not lead to an engagement: for as long as necessary to reply to you and, at most, one year.
• Clients: for the duration of the professional relationship and, afterwards, for the legal limitation periods for liability (generally up to 5 years) and tax obligations (up to 6 years for accounting records).

4. Recipients

We do not pass your data on to third parties unless required by law or when it is essential for your procedure (for example, the Immigration Office, the Ministry, consulates, registries or courts). We use providers that process data on our behalf (data processors), under a contract that complies with art. 28 GDPR:

• Web hosting and email: IONOS Cloud S.L.U. (Spain).
• Appointment booking: Calendly LLC (USA).
• Messaging: WhatsApp Ireland Ltd. (Meta), if you choose to contact us via WhatsApp.
• Video calls: Google Ireland Ltd. (Google Meet), if you choose a video call consultation.

5. International transfers

Calendly, Meta and Google may process data in the United States. These transfers are covered by the EU-U.S. Data Privacy Framework or, failing that, by standard contractual clauses approved by the European Commission.

6. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to yramos@migragest.es and stating which right you wish to exercise. If we consider it necessary to verify your identity, we may ask you for a document proving it.

If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS) across the whole website, restricted access to files and a duty of confidentiality for the whole team.

8. Cookies

See the cookie policy to find out which technologies we use and how to manage them.