Data protection
Lex·on processes the following categories of personal data:
When you complete the contact form on our Website or communicate with us by email, we process the data you voluntarily provide: name, surname, email address, telephone number (if supplied) and the content of your enquiry.
If you accept analytical cookies, we process anonymised browsing data through Google Analytics 4 (GA4): pages visited, time spent, country of access, device type and traffic source. This data does not allow individual users to be identified. For further information, please consult our Cookie Policy.
If the firm grants you access to the Client Area, we process your name and surname, your email address, the identification data needed to authenticate you and a record of your access (date, time and the document consulted, downloaded or edited). We also process the documents you upload to the Area and those the firm makes available to you, as part of the provision of professional services.
| Purpose | Legal basis |
|---|---|
| Handling your enquiry or request for information and managing the pre-contractual or contractual relationship | Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) |
| Sending communications about firm services that may be of interest, where you have given your consent | Data subject's consent (Art. 6(1)(a) GDPR) |
| Compliance with legal obligations applicable to the provision of professional (tax and legal) services | Compliance with a legal obligation (Art. 6(1)(c) GDPR) |
| Statistical analysis of Website usage through analytical cookies | Data subject's consent (Art. 6(1)(a) GDPR) |
| Granting and maintaining your access to the Client Area and making the documents on your file available to you | Performance of a contract (Art. 6(1)(b) GDPR) |
| Logging access to the Client Area, as a security and traceability measure | Legitimate interest in ensuring the security of information (Art. 6(1)(f) GDPR), in compliance with Article 32 GDPR |
Lex·on does not transfer your personal data to third parties, except in the following circumstances:
No international transfers of data outside the European Economic Area take place, except those inherent in the use of Google Analytics, which provides appropriate safeguards under the EU–US Data Privacy Framework (DPF).
As a data subject, you may exercise the following rights with Lex·on at any time:
To exercise your rights, please contact info@lexon.es enclosing a copy of your identity document. We will respond within a maximum of one month.
If you believe that the processing of your data does not comply with the GDPR, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Lex·on applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk in the processing of personal data, in accordance with Article 32 of the GDPR.
In the Client Area these measures include encryption of information in transit and at rest, named access with multi-factor authentication, access logging and immediate revocation of permissions once authorisation lapses. Public sharing links to documents are not used.
Lex·on reserves the right to update this Privacy Policy to reflect legislative changes or amendments to internal practice. The current version will always be available on this page.