Last updated: [27/05/2026]

DURAN-SINDREU LEGAL AND TAX ADVISORS, S.L.P. (hereinafter, “Durán-Sindreu”) with NIF B-62340716 and address for these purposes at C/ Císter 2 bajos, 08022 – Barcelona (Spain), states that it is the owner of the website duransindreu.es (hereinafter, the “Web”) in accordance with the obligations set out in Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (hereinafter, the “LSSICE”).

Completing all the data requested as mandatory through the Web is necessary to achieve optimal provision of the services made available to the User. Failure to provide all the data required by Durán-Sindreu does not guarantee that the information and services provided can be provided, provided correctly, or that they will meet the User’s needs.

The term User/s is used here to refer to all adults who access the Web.

BASIC INFORMATION REGARDING DATA PROCESSING

DETAILED INFORMATION ON DATA PROCESSING

1. Identity and contact details of the Data Controller

In accordance with applicable data protection regulations and, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the “GDPR”), and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter, the “LOPDGDD”), the Data Controller is:

2. Compliance with applicable regulations

Durán-Sindreu has adapted the Website to the GDPR and the LOPDGDD. To this end, it has implemented those policies, means, and technical and organizational procedures to guarantee and protect the confidentiality, integrity, and availability of your personal data.

The transmission of data by the user of Durán-Sindreu’s services (hereinafter, the “User”) through the Website, is done voluntarily and with prior information provided to the user regarding the processing, use, and purposes thereof. 

3. Principles we apply to your personal information

The data provided to Durán-Sindreu by different means, online or offline contact forms, or any other procedure used to collect your data, will be processed in accordance with current data protection regulations, and solely for the purpose of providing the service about which you have been informed.

In processing your personal data, we apply the following principles that comply with the requirements of the GDPR:

• Principle of lawfulness, fairness and transparency: We will always have a legal basis for processing your personal data for one or more specific purposes, which we will inform you of beforehand with absolute transparency. Durán-Sindreu informs you that only the information necessary to achieve the purpose of the processing is collected, and only the data you have provided for the purpose(s) for which you were informed will be processed.
• Data minimization principle: We will only request the data that is strictly necessary in relation to the stated purposes.
• Principle of storage limitation:  Personal data will be kept for the time strictly necessary until the purpose for which it was collected has ended, and as long as the reason that legitimized the processing of this personal data remains. Once the reason that legitimized the processing has ended, the personal data will be duly blocked and retained for the limitation period of the actions that may arise from the relationship between the parties and/or for the legally established retention periods.
• Principle of integrity: Your data will be processed in such a way as to ensure adequate security of personal data and to guarantee confidentiality. You should know that we take all necessary precautions to prevent unauthorized access to or misuse of data by third parties. 
• Principle of confidentiality: Durán-Sindreu, in his capacity as Data Controller, guarantees confidentiality in the processing of all personal data of the User to which he has access. The Data Controller, like any other person involved in any stage of the processing, is subject to the strictest duty of confidentiality, with a special commitment to adopt the necessary levels of protection and measures, both technical and organizational, to guarantee the security of personal data and to prevent its alteration, misuse, loss, theft, unauthorized processing, or access.
• Principle of data accuracy: All information provided by the User to Durán-Sindreu must be truthful, and the User will be solely responsible for any false or inaccurate statements made and for any damages caused to Durán-Sindreu or third parties. 

Durán-Sindreu reserves the right to exclude from the services any User who has provided false information, without prejudice to any other legal actions that may be taken.

4. Processing of personal data

4.1. Collection and processing of personal data

The data provided to Durán-Sindreu by different means, contact forms or any other procedure used to collect your data, will be processed in accordance with current data protection regulations, and solely for the purpose of providing the service about which you have been informed.

The transmission of data by the User of Durán-Sindreu’s services through the Web is done voluntarily, and the User is informed, prior to processing, of the uses and purposes of the processing.

Durán-Sindreu informs the User that it collects only the information necessary to achieve the purpose of the processing, and only processes the data that has been provided for the purpose(s) for which the User was informed and subsequently authorized.

Durán-Sindreu, in its capacity as Data Controller, guarantees the confidentiality in the processing of all personal data of the User to which it has access. The Data Controller, like any other person involved in any stage of the processing, is subject to confidentiality obligations, with a special commitment to adopt the necessary levels of protection and measures, both technical and organizational, to guarantee the security of personal data and to prevent its alteration, misuse, loss, theft, unauthorized processing or access.

All information provided by the User to Durán-Sindreu must be truthful, and the User will be solely responsible for any false or inaccurate statements made and for any damages caused to Durán-Sindreu or third parties.

Durán-Sindreu reserves the right to exclude from the services any User who has provided false information, without prejudice to any other legal actions that may be taken.

4.2. Purpose of processing

The purposes of the processing carried out by Durán-Sindreu of the User’s personal data are:

4.3. Category of data and data subjects

For the aforementioned purposes, Durán-Sindreu collects and processes the following categories of User data:

1. Identification data: name, surname, telephone number, and email address.
2. Academic and professional details: CV, company, position, professional email address, and professional experience.
3. Images of event attendees
4. Collection data:  Areas of interest available on the Web for Users.
5. Collection data:  In the case of surveys or questionnaires, data will be collected from the responses provided.
6. We also collect certain information related to the User’s browsing through cookies. Its processing and purposes are detailed in our Cookies Policy.

The personal data collected belongs to the following categories of data subjects: Web users; Customers; Potential clients; Job applicants; and event attendees.

In relation to inquiries or requests made through the data collection forms available on the Web, the User is allowed to briefly explain the reason for the inquiry or contact. Please note that Durán-Sindreu will not respond to any personal inquiries, except those strictly established by current legislation. Under no circumstances will the User communicate special category data (for example: health data, religion, etc.) through the forms enabled on the Website. If the User does so, they release Durán-Sindreu from all liability. In the event that inappropriate queries or content are submitted, Durán-Sindreu will proceed to delete them.

4.4. Automated individual decisions, including profiling 

Automated individual decision-making, including profiling, is not foreseen.

5. Processing of data by third parties and data transfers

Depending on the purposes for which personal data is collected, your personal data may be processed by:

• Authorized personnel of Durán-Sindreu or its representatives acting on its behalf, subject to the applicable data protection regulations.
• Public Administrations, Authorities and Bodies, including Courts and Tribunals, when required by applicable regulations or for the purpose of providing a service.
• Third-party external service providers contracted by Durán-Sindreu and who have the status of data processor [IT service providers that process information, hosting servers, database support maintenance, mailing, software and applications]. All of this only after taking the necessary measures to ensure that we can share such information and having signed a data processing agreement with our data processors, in compliance with data protection regulations. 

If there is a sale, merger, consolidation, change in corporate control, substantial transfer of assets, reorganization or liquidation of Durán-Sindreu, then, at our discretion, we may transfer, sell or assign the information collected on the Web to one or more relevant parties.

6. Security measures

Durán-Sindreu adopts the security levels required by the GDPR appropriate to the nature of the data that is processed at any given time by its activity. In this sense, it uses encryption techniques that do not allow a third party to trace the identity of the User interacting with our services. It may also carry out secure anonymization techniques for the personal data it processes to carry out its activity. However, technical security in a medium like the Internet is not impregnable and malicious actions by third parties may occur, although Durán-Sindreu provides the means to prevent such actions.

7. International data transfer

We do not transfer the User’s personal data to third parties outside the European Union. In the event of international data transfers, all appropriate technical and organizational measures will be taken to ensure the security of the data.

8. Rights of data subjects and their exercise

In accordance with the GDPR and the LOPDGDD, Users may exercise the following rights:

• Right to access: The User may ask Durán-Sindreu if it is processing their data and, if so, access it.
• Right to rectification: The User may request the rectification of the data if it is inaccurate or incomplete.
• Right to request the erasure of your data, when possible. In any case, when the User exercises this right, all personal data linked to their account, as well as the information and content integrated into their profile, will be deleted and will remain blocked until the legally established period expires. 
• Right to restriction of processing: In this case, we will only retain them for the exercise or defense of claims.
• The right to oppose to data processing: Durán-Sindreu will cease processing personal data, except when it must continue to be processed for reasons of compelling legitimate interest or for the exercise or defense of possible claims.
• Right to data portability: If the User wishes to have their data processed by another data controller, Durán-Sindreu will facilitate the transfer of their data to the new controller if both have the necessary technical means to do so.
• Right not to be subject to a decision based solely on the automated processing of your personal data.
• Right to withdraw consent: If the User has given consent for a specific purpose, they may withdraw it at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
• Right to lodge a complaint with the Spanish Data Protection Agency: If you believe that there has been a breach of data protection legislation regarding the processing of your personal data (www.aepd.es).

To exercise your rights, you can use the templates and forms available on the official website of the Spanish Data Protection Agency (https://www.aepd.es/es/derechos-y-deberes/conoce-tus-derechos), and write to Durán-Sindreu’s address or email address ds@duransindreu.com, REF: “Data Protection”. 

9. User Consent

The User declares to have read and expressly accepted this Privacy Policy, when the legal basis for the processing is their consent. You can withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing prior to its withdrawal.

The User agrees to indemnify Durán-Sindreu against any possible claim, fine or penalty that it may be obliged to bear as a consequence of the User’s breach of the duty described in this paragraph.

10. Links to other websites

This website contains links to other websites not managed by Durán-Sindreu, therefore Durán-Sindreu does not exercise any control over them, nor is it responsible for the information to which they have access. Please visit these websites directly for information about their privacy policy, which provides information on the protection of your data, security, data collection and provisions relating to data transmission. 

If you follow us on our social media, please review their privacy policies to learn how they process and share your personal data, as Durán-Sindreu has no control over them and no responsibility for the information these websites access.

11. Changes to the privacy policy

We will only use personal data as set out in the Privacy Policy in force at the time such data is collected.

Durán-Sindreu reserves the right to modify this Privacy Policy at any time, with effect from the date of publication of such modifications on the Website. Therefore, it is recommended to visit it each time you access the Website. In any case, if at any time we decide to process personal data differently from what was stated at the time of its collection, the User will be informed in order to obtain the corresponding legal basis that legitimizes the processing. 

In the event that any clause of this Privacy Policy is annulled or considered null, the remaining conditions will not be affected, retaining their full validity and force, in accordance with the regulations applicable at any given time.

For interpretation purposes, the Spanish version of this Privacy Policy shall be deemed the original and shall prevail over any translated versions. In the event of any discrepancy or inconsistency between versions, the Spanish version shall prevail.

12. Applicable legislation

The privacy of all information provided, both by the User through the different forms for requesting personal data and that accessible through the Website, is regulated by current data protection regulations, in particular by the GDPR and the LOPDGDD.

13. Cookies

Accessing the Website may involve the use of cookies. Cookies are small pieces of information stored on each user’s browser so that the server can remember certain information for subsequent use. This information allows us to identify you as a specific user and to save your personal preferences, as well as technical information about the use and operation of the Website.

Users who do not wish to activate cookies or who wish to be informed before they are stored on their devices can configure their own device accordingly. For more information, you can consult our Cookies Policy.