Version of 19 October 2026.
1. Who processes your data
| Controller (Responsable del tratamiento) | LEX DIXIT TAX AND LEGAL, S.L. |
| NIF (tax ID) | B54821780 |
| Address | Rambla Méndez Núñez 23, 7ºA, 03002 Alicante, Spain |
| office@lexdixit.com | |
| Phone | +34 614 369 494 |
The company is registered in the Registro Mercantil de Alicante: tomo 3814, folio 42, hoja n.º A-142354.
2. What data we collect
When you submit a request or write to us. Your name, phone number, email, preferred language and whatever you choose to tell us about your situation. If you have accepted advertising cookies, technical details of where you came from are attached to the request: ad campaign, ad group, keyword and Google click ID.
When you simply browse the site. IP address, device and browser type, language, the pages you opened and the website or ad you came from. This data is collected by the services listed in section 6, and only after you consent to cookies.
What we do not ask for on the site. Please do not send us scans of documents, health information, criminal records or other special categories of data through the website. Do not send case documents before a contract is signed: the website is not a secure channel.
3. Why we process data and on what legal basis
| Purpose | Legal basis under the GDPR |
|---|---|
| Replying to your enquiry, assessing your situation, arranging a consultation | Art. 6.1.b — steps taken at your request before entering into a contract |
| Providing the service and handling your matter under the contract | Art. 6.1.b — performance of a contract |
| Meeting legal obligations: accounting, tax, professional rules, anti-money-laundering | Art. 6.1.c — legal obligation |
| Visitor analytics and ad measurement | Art. 6.1.a — your consent |
| Defending our rights in a dispute or claim | Art. 6.1.f — legitimate interest |
You can withdraw your consent to analytics and advertising at any time; this does not affect processing carried out before the withdrawal.
4. How long we keep data
Enquiries that do not lead to a contract — up to 1 year, then deleted.
Client data under a contract — for the duration of the service and then for the periods required by law: 6 years under commercial law (art. 30 Código de Comercio), 4 years under tax law (art. 66 LGT), 10 years under anti-money-laundering rules (Ley 10/2010), and the professional case file for the periods set by the rules of the Bar.
Analytics data — for the periods stated in the Cookie policy.
5. Who we share data with
We do not sell data or share it for other companies' advertising. Access is given only to those without whom we cannot work:
- our web hosting and email provider;
- the company's accounting and tax advisers;
- banks and payment providers — for payments;
- Google Ireland Limited and Meta Platforms Ireland Limited — analytics and advertising, only with your consent;
- Microsoft Ireland Operations Limited — Microsoft Clarity, only with your consent;
- Make.com (Celonis group) — passes your request from the website to our working spreadsheet; the data is processed in the service's European data centre;
- public authorities and courts — where required by law.
We have data processing agreements (art. 28 GDPR) with the providers that process data on our behalf.
6. Analytics, advertising and transfers outside the EU
The website uses Google Tag Manager (GTM-NC5BHKQ7), Google Analytics 4 (G-E3NW07YW86), Google Ads (AW-10810472312), Meta Pixel (141973476472517) and Microsoft Clarity (wrepvs8lh5). What they store and for how long is set out in the Cookie policy.
Google, Meta and Microsoft are companies with infrastructure in the United States. These transfers are possible because they have joined the EU–U.S. Data Privacy Framework, which the European Commission has recognised as adequate; EU standard contractual clauses also apply.
7. Your rights
You can request access to your data, rectification, erasure, restriction of processing and data portability, and you can object to processing and withdraw your consent.
How: email office@lexdixit.com with the subject “Datos personales”. We reply within one month. If we need more time, we will tell you and explain why. We may ask you to confirm your identity so that we do not disclose your data to someone else.
If you believe we have breached your rights, you can complain to the Spanish supervisory authority: Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es. You are welcome to write to us first — it is often quicker.
8. Security
Access to data is limited to staff who need it for their work. The connection to the website is protected by TLS. The company's lawyers are bound by professional secrecy (secreto profesional), which has no time limit and is broader than the GDPR requirements.
9. Children
The website is not intended for people under 18, and we do not knowingly collect their data. If such data has reached us, write to office@lexdixit.com and we will delete it.
10. Changes to this policy
We may update this document. The version date is shown at the top. If there are material changes affecting data already collected, we will let you know separately.