Privacy Policy - Lawyers For Projects

WHO ARE WE?	We are Lawyers for Projects, S.L. (“LAWYERS FOR PROJECTS”), and we process your personal data as data controllers. This means that we are responsible for collecting your data, using it for the purposes outlined below, and protecting it.
WHAT PURPOSES DO WE USE YOUR DATA FOR?	We will primarily use the data you provide to respond to your inquiries, initiate a recruitment process, manage a potential professional collaboration, comply with our legal obligations, and, if you wish and have consented, to send you commercial information about our services that may be of interest to you.
WHY DO WE USE YOUR DATA?	The legal basis that allows us to process your data depends on the purpose of each processing activity. For example, when you submit an inquiry, we process your data based on legitimate interest; when we manage a professional collaboration with you, we do so for the execution of a contract; and if we send you commercial communications about our services, the legal basis will be your consent, which you can withdraw at any time.
HOW LONG WILL WE KEEP YOUR DATA?	As a general rule, we will only retain your data for the minimum time necessary, meaning as long as it remains relevant to the purposes for which it was collected. For instance, the data you provide through the contact form will be kept until we resolve your inquiry, and the data you provide when formalizing a collaboration agreement with us will be kept for the duration of that collaboration. However, these retention periods may be extended as necessary to comply with our legal obligations. Once these periods have ended, we will either return, delete, or anonymize your personal data.
WHO DO WE SHARE YOUR DATA WITH?	We share your data with service providers who help or support us as needed to provide you with our services. If you are a collaborator, we may also share some of your professional data with clients, primarily to assign you matters. If you have consented to receive commercial information, we may share your contact information with our provider responsible for promotional campaigns.
WHAT ARE YOUR RIGHTS?	You have the right to obtain confirmation as to whether LAWYERS FOR PROJECTS is processing personal data concerning you. If so, you have the right to access your personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, you may object to the processing of your data or request its restriction. You also have the right to data portability, the right not to be subject to decisions based solely on automated processing, the right to withdraw your consent, and the right to file a complaint with the relevant supervisory authority. We have forms available to help you exercise all of the above rights.

CONTROLLER

Who is responsible for processing your data?

Name / Corporate Name: LAWYERS FOR PROJECTS, S.L. / NIF B67096958

Postal Address: Plaça Gal·la Placídia 1-3, 08006 Barcelona (Spain)

Email Address: privacy@lawyersforprojects.com

Website: www.lawyersforprojects.com

DATA

How and when do we collect your data?

Your privacy is our priority. At LAWYERS FOR PROJECTS, we process and protect your personal data in strict compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, dated April 27, 2016 (the “General Data Protection Regulation” or “GDPR”), Organic Law 3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights (“LOPDGDD”), and Law 34/2002 of July 11, on Services of the Information Society and Electronic Commerce (“LSSI”).

We aim to be transparent in how we use your personal data. Therefore, not only do we make this Privacy Policy permanently available on our website, but we also inform you each time we collect your data of the specific purposes for which we will use it, your rights, and other relevant information.

You should know that we collect and process your personal information, always with your knowledge, whenever you use our services, particularly in the following situations: (i) when you make inquiries, request information, or contact us for any reason through our contact forms; (ii) when you complete and return the questionnaire to collaborate with us or the questionnaire for lawyers; (iii) when you browse our website; (iv) when you interact with us through our social media profiles; and (v) when you write to us via email or postal mail, or respond to our messages through any other channel.

In the forms available on our website where we collect your data, certain fields may be marked as mandatory (indicated with an asterisk or similar), as these are pieces of information we need to provide the requested service or give you access to the relevant functionality. You are free to provide us with this data, but if you choose not to, please note that we may not be able to provide those services or ensure full access to those functionalities.

What type of personal data do we collect?

We primarily collect two types of personal data, depending on whether the data is provided directly by you or generated automatically — for example, through cookies — based on your use of our platform.

Depending on the form or medium used, the personal data we collect that you have provided may include the following:

Form or Data Collection Method	Personal Data Processed
Contact Form	Identification data (Name, surname, email address, phone number).
“Join” Form	Identification data (Name, surname, email address, phone number, province, social media profile). Professional data (CV).
“Discover How We Can Help You” Form	Identification data (Name, surname, email address, phone number, province).
Questionnaire Form for Flex Counsels	Identification data (Name, surname, email address, phone number, place of residence, etc.). Professional data (Work experience, current occupation, legal specialty, LinkedIn profile, bar association details, availability, professional interests, etc.).

We also collect the following information automatically:

Usage Information

We collect information about how you use our website or our social media profiles, such as the content you view, the pages you visit, etc.

When you visit our website, we automatically collect certain information through both first-party and third-party cookies. We use session cookies, which are designed to collect and store data while the user is accessing the website and disappear at the end of the session. We also use analytical cookies, which allow us to track and analyze the behavior of users on the website. The information obtained from these cookies helps us measure the activity on our website and make improvements to the platform. For more information, you can refer to our Cookie Policy.

All personal data you provide to us must be true, accurate, complete, and up-to-date, and you will be responsible for any direct or indirect damage or harm that may arise as a result of failing to comply with this obligation. If the data you provide pertains to a third party, you must inform them in advance about the content of this clause and obtain their consent.

If you are a supplier, please note that we use and store your personal data or the data of individuals in your organization to manage the receipt of the services you provide as a supplier. Additionally, we retain your financial data to make the necessary payments for the services rendered. We consider these activities necessary within the framework of our legitimate interests as a beneficiary of your services.

IF YOU ARE UNDER 14 YEARS OF AGE, YOU CANNOT REGISTER ON THIS WEBSITE OR SEND US YOUR PERSONAL DATA. ASK YOUR PARENTS TO HELP YOU READ THIS DOCUMENT AND CLARIFY ANY QUESTIONS YOU MAY HAVE.

If you are between 14 and 18 years old, you must obtain prior consent from your parents, guardian, or legal representative before providing us with your personal information so that your data can be subject to automated processing.

PURPOSE AND RETENTION

For what purpose do we process your personal data?

At LAWYERS FOR PROJECTS, we process the personal information you provide for different purposes depending on the functionalities you use. In any case, if you provide your data through one of the forms available on our website, the purpose of the data processing will be indicated on the specific form.

Additionally, in compliance with the LSSI (Law on Information Society Services), we will not send you commercial communications without identifying them as such and without obtaining your prior consent. For these purposes, any information we send you aimed at maintaining a prior contractual relationship, responding to your requests or inquiries, or providing information directly related to such relationships will not be considered commercial communication. In every commercial communication we send, we will provide you with the option to unsubscribe from receiving such communications in the future.

Beyond this, the purposes for which we may process your personal data, depending on the situation, include the following:

Data	Purpose(s)
Data obtained through the contact form	We will process your personal data to respond to, manage, and resolve your inquiries.
Data obtained through the “Join” form (“Join Us”)	We will process your data to manage your collaboration request with LAWYERS FOR PROJECTS and, where applicable, to formalize the corresponding collaboration agreement. If such collaboration does not materialize now, we will use your data to contact you for future selection processes that match your professional profile.
Data obtained through the “Discover how we can help you” form	We will process your data to respond to, manage, and resolve your inquiries, as well as to manage any proposed professional collaboration.
Data obtained through the questionnaire form for Flex Counsels	We will process your data to manage the selection process for collaborating lawyers and, where applicable, to formalize and manage our professional collaboration with you (project assignments, client contact, etc.). If such collaboration does not materialize, we will use your data to contact you for future selection processes that match your professional profile.
Data obtained through postal or electronic communications	If you provide us with personal data through postal or electronic communications (emails, SMS, mobile messaging), we will process them to manage and respond to your requests or inquiries, as well as to maintain our professional relationship with you.
Data obtained through forms where you have checked the box authorizing us to send you commercial communications	Some of our web forms include a secondary box you can voluntarily check. If you do not check it, we will only use your data for the purposes specified in the respective form. If you do check it, we will also use your data to send you commercial information about our services that may interest you (e.g., potential professional collaborations, presentations, legal trends, virtual or in-person events, etc.). We may send such information through various means, mainly by email or LinkedIn, and occasionally by postal mail. We will never send you spam (unsolicited advertising) or third-party advertising, and you can withdraw your consent at any time by writing to our email address privacy@lawyersforprojects.com (a link to unsubscribe is included in each commercial communication) or through other customer service channels available on our website.
Usage data obtained through cookies	We will process the information obtained through cookies to enable navigation on our website, measure visits, analyze the use of the portal and all its functionalities, improve our content and user experience, generate anonymous statistical reports, and analyze access habits and user activity on our website. For more information about how we use the data collected through cookies, you can consult our Cookies Policy.
Data obtained through communications and interactions on social media	We will process the personal data you provide through communications or interactions with us via our social media profiles (LinkedIn, Twitter, Instagram) to manage and respond to your requests, comments, or inquiries. If you have chosen to follow us or interact with us on these social media platforms, content or information related to our services may appear on your feed or profile due to the algorithms used by the social networks themselves.

How long will we keep your data?

The retention periods of your data may vary depending on the type of data and the purposes for which the processing is carried out. Disaggregated or anonymized data will be kept indefinitely, as they are not considered personal data. As a general rule, we will retain personal data for the strictly necessary time to fulfill the corresponding purpose, i.e., as long as they remain relevant for the purposes for which they were collected, as outlined below:

Data / Treatment	Retention Period
Data provided in the framework of contracting our services or formalizing a collaboration agreement	For the duration of the contracted services, including billing, or, if applicable, for the entire duration of our professional collaboration.
Data provided through contact forms on our website or other customer service channels (postal mail, email, mobile messaging, social media) to make an inquiry	For the time necessary to attend to and resolve your inquiry or request.
Data provided in the framework of a collaboration selection process or voluntarily provided to apply as a collaborator, including CV data	If a collaboration agreement is formalized, the retention period indicated above applies (duration of the collaboration); if the collaboration does not materialize, data will be kept for 2 years.
Data provided through any of our forms, with the box checked to authorize us to send you commercial communications about our services	As long as your consent remains valid and you have not unsubscribed from receiving such communications.

Once the above purposes have been fulfilled, we will retain the data, duly blocked, for as long as necessary to comply with our legal obligations, especially during the applicable statutory limitation periods, such as the following:

Legal Provision	Retention Period
Ley sobre Infracciones y Sanciones en el Orden Social, art. 4.2 (e.g., obligations regarding affiliation, registrations, deregistrations, contributions, salary payments, etc.)	4 years
Ley General Tributaria, arts. 66 et seq. (e.g., accounting books)	4 years
Código Civil, art. 1964.2 (personal actions without special period)	5 years
Código de Comercio, art. 30 (e.g., documentation, accounting books, invoices, receipts, etc.)	6 years
Ley de Prevención del Blanqueo de Capitales y Financiación del Terrorismo, art. 25	10 years

In the aforementioned cases, the data will be processed solely for the purpose of proving compliance with our legal obligations. Therefore, LAWYERS FOR PROJECTS will not process the data unless it is necessary for the formulation, exercise, or defense of claims, or when required to provide it to the Public Administration, Judges, and Courts during the statute of limitations period for legal rights or obligations. After these limitation periods have expired, the data will be deleted or, alternatively, anonymized.

LEGAL BASIS

What is the legal basis for processing your data?

In each form through which we collect your personal data, we will indicate the legal basis that allows us to process it. We will inform you whether providing your data to LAWYERS FOR PROJECTS is a legal or contractual requirement, and whether it is mandatory or optional to provide such data in order to fulfill the corresponding purposes.

Below, we outline the legal basis that allows us to process your data for each type of processing:

Processing and Purposes	Legal Basis
Respond to inquiries, messages, or requests for information sent through our contact channels and forms, whether electronic (website, mobile apps, social media, etc.) or analog.	Consent
Manage a request for professional collaboration, either within an open selection process by LAWYERS FOR PROJECTS or initiated by the candidate.	Consent, Execution of pre-contractual measures
Manage the hiring of our services and the formalization and execution of a professional collaboration agreement, including invoicing for services provided.	Execution of a contract
Maintain our accounting and comply with legal and administrative obligations.	Legal obligation
Adopt anti-fraud measures during the hiring of our services and manage outstanding invoices once our services are hired.	Legal obligation, Legitimate interest
Send commercial communications about our services, through analog and/or digital means (email, LinkedIn, postal mail, etc.).	Consent
Manage personal data collected through cookies for analysis purposes (website usage, creation of anonymous statistical reports, visits received, access habits, etc.) to improve the security, content, and functionality of the website.	Consent, Legitimate interest
Manage personal data collected through cookies to enable access and navigation on our website.	Legitimate interest

Are you required to provide the data we request?

When the legal basis that legitimizes us to process your data is your own consent, as a general rule, you are not obligated to provide us with your personal data. However, you should note that we will only be able to provide the services you request or grant access to certain features if you provide us with some data that we consider necessary for those purposes, which you can clearly identify in our forms. If you do not provide us with these required data, we may not be able to provide the requested services or may have to provide them incompletely.

We will always request your consent with the utmost transparency, and therefore, in the relevant forms, you will see a summary with basic information about the specific processing, a link to this Privacy Policy, and a checkbox that you must explicitly mark to consent to such processing. We recommend that you read all this information before giving your consent for each type of processing. We will keep a record of all the consents you have provided in this regard.

Can you revoke your consent?

Of course. In cases where you have authorized us to process your personal information, you can revoke your consent at any time by contacting us and specifying which processing or purposes you wish to revoke consent for. You can do so by writing to us at our postal address, through the contact form on our website, or by email at privacy@lawyersforprojects.com. We will ask for a copy of your ID or equivalent document to verify your identity. Please note that the revocation of your consent does not affect the legality of the data processing we carried out based on your consent before the revocation, nor the data processing we may carry out based on other legal bases, such as legitimate interest, contract execution, or legal obligation.

RECIPIENTS

To which recipients will your data be communicated?

All the data you provide to us will be processed by LAWYERS FOR PROJECTS with the utmost confidentiality. Your data will never be sold, transferred, or exchanged with unauthorized third parties. Sometimes, to provide you with our services, it is necessary for other providers to access your data. These are trusted third parties, most of whom are located within the European Economic Area (EEA), who offer certain services strictly necessary for the development of our services and who have been selected with respect to the rights we protect on this website.

These third parties will have access to your data and may use it only under our instructions, which are well-documented contractually, and may not use it for other purposes.

When applicable, and always in accordance with current legislation, the following categories of recipients may access your personal data (only the strictly necessary data):

Service providers performing specific functions for LAWYERS FOR PROJECTS. This category includes, for example:
- Accounting or administrative managers (handling accounting and managing tax obligations, etc.)
- Companies or professionals who help us provide technological, IT, or digital strategy services, such as web developers or platform providers, hosting services, database maintenance, and support for our software. We currently work with:
  - Raiola Networks
  - AWS
  - Airtable
- Email marketing service providers. We currently work with:
  - Mailchimp
- Survey and form service providers. We currently work with:
  - Typeform
  - Microsoft Forms

LAWYERS FOR PROJECTS has signed the corresponding data processing agreements with these external providers so that they are only authorized to process the data in accordance with our instructions and for the strictly necessary purposes.

Public administrations or other public or private entities, such as judicial bodies, tax authorities, police forces, fraud prevention and debt collection agencies, etc., in case we are legally required or have legitimate interests to share certain information with them (for example, in case of litigation or in response to a request from a tax authority);

Will your data be transferred to third countries?

We will only transfer your data to recipients established outside the European Economic Area (EEA) if it is strictly necessary to provide the requested or contracted services, for example, when some of our providers mentioned above are located in third countries.

In such cases, all international data transfers will be carried out in strict compliance with all guarantees required by European legislation, especially with all safeguards provided in Articles 44 and onwards of the GDPR for international transfers (transfers based on adequacy decisions or appropriate safeguards, including the use of standard contractual clauses adopted or approved by the European Commission).

RIGHTS

What are your rights when you provide us with your data?

First, you have the right to obtain confirmation on whether LAWYERS FOR PROJECTS is processing personal data that concerns you or not. If we are processing your personal data, you have the following rights:

Right of access: You have the right to access your personal data. If we are processing your data, you can request the following information: what data we hold; for what purposes we are processing them; possible communications, transfers, or disclosures of your data to third parties; the intended retention period; your right to request the rectification or deletion of your personal data, or the restriction of processing, or to object to such processing; the right to lodge a complaint with the supervisory authority; if the data was not obtained directly from you, any available information about its source; the existence of automated decisions, including profiling, and significant information about the logic applied, as well as the importance and expected consequences of such processing for you.
Right of rectification: You have the right to rectify inaccurate or incomplete personal data concerning you, such as in the case of errors, typos, changes in the collected data, etc. If we have shared your personal data with third parties, we will ask them to rectify it as you have indicated, unless it is impossible or involves disproportionate effort. If applicable, we will also inform you of the third parties to whom we have disclosed inaccurate or incomplete data.
Right of erasure (“right to be forgotten”): In certain circumstances, you have the right to request the deletion of your personal data when, for example, the data is no longer relevant or necessary for the purposes for which it was collected, when you withdraw consent on which the processing is based (unless there is another legal basis for processing), or when you object to the processing and there are no overriding legitimate grounds for processing.
Right to object: You can object at any time, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interests. In these cases, we will address your objection and stop processing your personal data, unless there are compelling legitimate grounds for the processing that override your rights, interests, and freedoms, or for the establishment, exercise, or defense of legal claims.
Right not to be subject to automated individual decisions: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. This right does not apply if you have given explicit consent or if the decision is necessary for the execution or performance of a contract with you.
Right to data portability: This is an advanced form of the right of access, and it means you can ask us to send you a copy of your data in a structured, commonly used, and machine-readable format (e.g., a data CD). You can exercise this right in three situations: (i) When processing is done by automated means, i.e., without human intervention; (ii) When processing is based on your prior consent or a contract; (iii) When you request it regarding the data we have collected about you, including data derived from your activity. The right to portability also means you can ask us to send your data to another data controller on your behalf, without us having to send it to you first, provided that it is technically feasible.
Right to restrict processing: You can ask us not to carry out certain processing operations on your personal data. In other words, we can only store it, but no further processing can be done until certain conditions are met. For example, you can ask us to restrict processing when you have exercised the rights of rectification or objection (while we are verifying the accuracy of your data or our legitimate reasons for processing), or when deletion is warranted but you prefer restriction instead of full deletion. Once the processing of your personal data has been restricted, we can only process it (except for storage) with your prior consent or for the establishment, exercise, or defense of claims.
Right to withdraw consent: If you have given consent for a specific purpose, such as to authorize us to send you commercial communications about our services, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to complain to the Supervisory Authority: If you believe your rights have been violated and that the processing of your personal data is contrary to the General Data Protection Regulation, you have the right to file a complaint with the supervisory authority in your country, without prejudice to any other administrative or judicial action you may take. In Spain, you can exercise this right by contacting the following supervisory authority:

Name: Spanish Data Protection Agency

Postal Address: C/ Jorge Juan, 6. 28001, Madrid (Spain)

Phone(s): +34 901 100 099 / +34 912 663 517

Website: www.agpd.es

If you reside outside Spain, you can also contact the competent data protection authority in your country.

How can you exercise your rights?

We have forms available to exercise all the rights mentioned above quickly, for free, and easily. You just need to request the form and return it completed through one of the following methods:

By email: writing to us at privacy@lawyersforprojects.com.
By mail: sending a signed copy of the form to our postal address, along with a copy of your ID card or equivalent document, to verify your identity.

Please note that we may need to ask for further information to verify your identity if the request seems unclear or if we have doubts about your identity. We will respond to your request without undue delay and always within one month from the date we receive the request.

SECURITY MEASURES

How do we protect your personal data?

At LAWYERS FOR PROJECTS, we take the security and confidentiality of your personal data very seriously. We have implemented all necessary security measures to ensure the integrity of the personal information you provide, allow its recovery in case of incidents, and prevent misuse, loss, or unauthorized access.

The security measures may vary depending on the characteristics of the processing, the type of data processed, or the technology available at any given time. We apply appropriate technical and organizational measures to ensure an adequate level of security relative to the risk, taking into account the potential risks associated with data processing, such as the possible destruction, loss, or accidental or unlawful alteration of personal data transmitted, stored, or otherwise processed, or unauthorized communication or access to such data.

Our website is hosted on secure servers protected against common types of attacks. However, security on the Internet is not impregnable, and malicious actions by third parties may still occur. LAWYERS FOR PROJECTS makes every effort to prevent such actions.

If you suspect that there is any misuse of your personal data or unauthorized access to it, please let us know immediately so we can take action. You can contact us by email at privacy@lawyersforprojects.com or by sending a letter to our postal address at Plaça Gal·la Placídia 1-3, 08006 Barcelona (Spain).

MISCELLANEOUS

Links to Third-Party Websites

The LAWYERS FOR PROJECTS website may contain links to other websites owned and operated by third parties. These websites have their own privacy policies, cookie policies, and terms of use, so LAWYERS FOR PROJECTS takes no responsibility for the content of these policies, how third parties comply with their obligations regarding data protection, or the content and information provided on such websites. Therefore, we recommend that you read and review the privacy and cookie policies and the terms of use of each website you visit.

Social Media Profiles

LAWYERS FOR PROJECTS maintains corporate profiles on social media platforms such as LinkedIn, Twitter, and Instagram, making us the data controller for any personal data provided by people who follow us on these profiles. Therefore, if you decide to join our corporate profiles or interact with us through the various communication and messaging channels on LinkedIn or Instagram, it is likely that an exchange of data will occur between LAWYERS FOR PROJECTS and the respective social network. On our corporate profiles, we include a link to this website, which contains this Privacy Policy, where we explain your rights and how we process your data. Therefore, if you interact with us through these profiles, we understand that you are aware of and accept the content of this document.

As the data controller of your personal data on the social media platforms where we have a corporate profile, we ensure confidentiality in the processing and respect for your rights. Additionally, we inform you that we will use these social media platforms as an alternative channel to publish content or relevant information related to our services and other topics that may interest you. By using the features of these platforms, you may receive such updates on your feed or profile. However, we also want to emphasize that there is no direct link between LAWYERS FOR PROJECTS and these platforms or social networks. Therefore, the use of these platforms is subject to the acceptance of their own terms and conditions, which are independent of those of LAWYERS FOR PROJECTS. We disclaim any responsibility for the data processing carried out by the companies managing these social media platforms.

Modifications to this Privacy Policy

LAWYERS FOR PROJECTS reserves the right to modify, at any time and at its sole discretion, the terms of this Privacy Policy. If this occurs, we will notify you of any substantial changes so that you can review them and, if applicable, maintain or withdraw your consent as you see fit. In any case, we recommend that you review the contents of our Privacy Policy from time to time in case there are minor changes.

Last updated: January 21, 2025