Privacy policy
This translation is provided for information purposes. In case of discrepancy, the Galician version prevails.
- Owner
- Xosé W. Alonso González
- Tax ID (NIF)
- 77***070G
- Bar membership
- ICA Vigo, n.º 4254
- Contact email
- [email protected]
- Phone
- 601 555 366
- Domain
- www.savig.gal
This policy explains how we process the personal data of people who visit this website or contact us, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
Data controller
The controller is the owner of this website, whose identifying and contact details are set out at the top of this page. For any data protection matter, you can write to the email address shown.
Contact form, email and phone
Data: name, email address and/or phone number, and the content of your message.
Purpose: to answer your enquiry and, where appropriate, to assess and prepare a possible engagement.
Legal basis: your consent (art. 6.1.a GDPR), given when you submit the form, and steps taken at your request before entering into a contract (art. 6.1.b GDPR).
Messages sent through the form are not stored on the website: they are sent directly by email to the firm's mailbox.
Retention: as long as needed to handle your enquiry and, if no engagement follows, no more than 12 months after the last contact. If an engagement follows, the data will be kept for the duration of the professional relationship and afterwards for the statutory limitation periods for any resulting liabilities.
Please do not include more information in your message than necessary and, in particular, avoid especially sensitive data (health, criminal records, etc.) until we have spoken in person. All information received is subject to professional secrecy.
Visit statistics (Umami)
Only if you accept them in the privacy notice, we use Umami, an open-source web analytics tool that we host on our own servers. It uses no cookies and shares no data with third parties.
Data: pages visited, referring page, date and time, browser type, operating system and device, screen size, language and approximate location (country and city) derived from your IP address, and use of the contact buttons (call, WhatsApp and sending the form), without the content of the message. Your IP address is not stored: it is used only at the time of the visit and replaced with an anonymous identifier.
Purpose: to understand, in aggregate, how the website is used so we can improve it.
Legal basis: your consent (art. 6.1.a GDPR).
Retention: no more than 24 months.
Session recording (Umami)
Only if you expressly accept it, a random sample of 15% of visits is recorded in anonymised form to detect usability problems. The recording captures the page structure, mouse movements, clicks and scrolling, for a maximum of 5 minutes. All page text and everything you type into forms is replaced with asterisks, so neither what you read nor what you type is recorded.
Legal basis: your consent (art. 6.1.a GDPR).
Retention: no more than 90 days.
Recipients and processors
We do not disclose your data to third parties unless required by law. The website, statistics and recordings run on our own servers, managed directly by the owner. To provide the service we rely on the following processors, under contracts complying with art. 28 GDPR:
OVH SAS (France, EU), provider of the virtual private server through which connections to the website pass from the Internet and where HTTPS encryption is handled. Data does not leave the European Union.
Proton AG (Switzerland), provider of the email service. Switzerland is covered by a European Commission adequacy decision, which governs these transfers.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to the email address shown at the top of this page, providing proof of identity where necessary.
You can withdraw your consent to statistics and session recording at any time using the "Privacy preferences" link at the bottom of every page, without affecting the lawfulness of any processing carried out beforehand.
If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid; www.aepd.es).
Other information
This website is not aimed at children under 14. No automated decisions are made and no profiles with legal effects are created about users. We apply appropriate technical and organisational measures to protect your data, such as encrypted connections (HTTPS).