1. Data Controller
Controller: Pelayo de Salvador Morell
Tax ID: 43151785J
Address: C/ Pere Dezcallar i Net, 8A, entresuelo – 07003 Palma de Mallorca, Spain
Phone: +34 871 18 14 37
Email: info@desalvador.es
2. Purposes of Processing
Personal data collected through this website will be processed for the following purposes:
-
Responding to contact requests, enquiries or quote submissions received via form, email or phone.
-
Providing legal services and managing any related administrative or follow-up procedures.
-
Sending information or updates related to the services provided by the firm, where there is a legitimate basis to do so.
-
Fulfilling the legal, fiscal or professional obligations of the data controller.
Under no circumstances will data be processed for purposes incompatible with those described above.
3. Legal Grounds for Processing
The legal basis for processing personal data includes:
-
The data subject’s consent, given freely, specifically, informed and unambiguously (Art. 6.1.a GDPR).
-
The performance of a contract or pre-contractual steps at the data subject’s request (Art. 6.1.b GDPR).
-
Compliance with legal obligations applicable to the controller (Art. 6.1.c GDPR).
-
The legitimate interests pursued by the controller, particularly to maintain client relations and ensure proper service delivery (Art. 6.1.f GDPR), provided such interests do not override the rights and freedoms of the data subject.
4. Categories of Data Processed
The personal data processed is limited to what is strictly necessary to achieve the purposes outlined above, and may include:
-
Full name
-
Email address
-
Phone number
-
Country of residence
-
Any additional information voluntarily provided through contact forms or during the course of the professional relationship
No special categories of data (Art. 9 GDPR) are processed, and no automated decision-making is carried out.
5. Data Retention
Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, and subsequently for the periods required by applicable legal, fiscal or professional obligations. Once these periods have elapsed, the data will be securely deleted or anonymised.
6. Data Processors and Third-Party Tools
desalvador. uses digital tools and third-party technology services to manage communications, document processing, workflow automation, and service delivery. These providers may have limited access to personal data when necessary for the performance of their services and always under a contractual relationship as data processors, in accordance with Article 28 GDPR.
Where these providers are located outside the European Economic Area (EEA), any international data transfers are subject to appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission or other lawful mechanisms under Articles 44–49 of the GDPR.
All providers are contractually bound to process data in accordance with applicable data protection laws and to maintain confidentiality, security and integrity throughout the data lifecycle.
7. International Data Transfers
Whenever personal data is transferred outside the European Economic Area (EEA), as in the case of services provided by Zapier Inc., such transfers are carried out in accordance with the safeguards required under the GDPR, including:
-
Execution of Standard Contractual Clauses (SCCs) approved by the European Commission
-
Assessment of the data protection level in the country of destination
-
Implementation of supplementary security measures where necessary
8. Rights of the Data Subject
Data subjects have the right to:
-
Obtain confirmation as to whether or not their personal data is being processed
-
Access their personal data
-
Request the rectification of inaccurate data or erasure when appropriate
-
Request the restriction of processing
-
Object to processing when based on legitimate interests
-
Request data portability where processing is based on consent or a contract
These rights may be exercised by submitting a request to the contact details listed in section 1, along with a copy of a valid identity document. If no satisfactory response is received, the data subject may file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
9. Data Security
The controller applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR. These measures ensure the confidentiality, integrity and availability of the data.
10. External Links
This website may include links to external websites. desalvador. is not responsible for the content or privacy practices of such sites, which should be reviewed independently by the user.
11. Updates to this Policy
This policy may be updated to reflect legislative or technical changes. Where appropriate, any material changes will be communicated to users via this website or by email.
Last updated: 26 May 2025