Privacy Policy
Last updated: October 2026
This Privacy Policy explains how personal data collected through ozdoganlegalconsulting.com is processed, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and Spanish Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Controller: Aslı Ceren Özdoğan, trading as Ozdogan Legal Consulting
- Address: Calle de Núñez de Balboa, 28006 Madrid, Spain
- E-mail for data-protection matters: info@ozdoganlegalconsulting.com
2. What data we collect and why
| Data | Purpose | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Contact-form data: name, e-mail, telephone (optional), the service you are interested in, where you are now (abroad, or in Spain with or without a residence permit, or hiring for a company), when you need help, and the content of your message, plus how you reached the form (the page you sent it from and the source that referred you, such as an ad campaign, a search engine or Instagram, read from the page address and your browser's referrer when you click “Send”; nothing is stored on your device for this) | To respond to your enquiry, assess your case and, where applicable, prepare a quote | Your consent (Art. 6.1(a)) and steps prior to entering into a contract at your request (Art. 6.1(b)) |
| Lead-form data from our Facebook or Instagram ads: name, e-mail, telephone (if you give it) and your answers to the form questions | To respond to your enquiry, assess your case and, where applicable, prepare a quote | Your consent (Art. 6.1(a)) and steps prior to entering into a contract at your request (Art. 6.1(b)) |
| Data provided when you engage our services (identity, immigration and other documents) | To provide the legal services agreed, comply with legal and professional obligations and manage billing | Performance of a contract (Art. 6.1(b)) and legal obligations (Art. 6.1(c)) |
| Technical data generated when you browse (IP address, browser, pages visited) | To deliver the website securely and prevent abuse | Legitimate interest in the security and operation of the website (Art. 6.1(f)) |
Immigration files may include special categories of data (for example, health or criminal-record certificates required by the authorities). Such data is processed only when necessary to provide the service you have requested and with your explicit consent (Art. 9.2(a) GDPR), or as required by law.
3. How long we keep your data
Enquiry data is kept for as long as necessary to respond to you and, if no engagement follows, for a maximum of 12 months. Client-file data is kept for the duration of the engagement and thereafter for the periods required by law to meet legal, tax and professional-liability obligations (generally between 5 and 10 years), after which it is securely deleted.
4. Who receives your data
Your data is not sold or shared for marketing. It may be disclosed to public authorities (immigration offices, consulates, tax and Social Security administrations, courts) when necessary to provide the service, and to service providers that act as processors on our behalf under GDPR-compliant agreements, such as our website hosting and content-delivery provider (Cloudflare, Inc.), our contact-form delivery service (Web3Forms), our appointment-booking service (Calendly LLC, which receives the details you enter when you book a consultation), our payment provider (Stripe Payments Europe, Limited, Ireland, which processes the card payment for consultation bookings), our e-mail and office-software provider (Google Cloud EMEA Limited, Ireland, through Google Workspace) and, if you send us your details through a lead form on Facebook or Instagram, Meta Platforms Ireland Limited, which collects that form on our behalf. Where a provider processes data outside the European Economic Area, transfers are protected by an adequacy decision or the Standard Contractual Clauses approved by the European Commission.
5. Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise these rights, write to info@ozdoganlegalconsulting.com indicating the right you wish to exercise, and attach a copy of an identity document if we cannot otherwise verify your identity. You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
6. Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration, including encrypted connections (HTTPS), access controls and confidentiality obligations for anyone who handles client information.
7. Cookies
We use two kinds of cookies and similar technologies on this website:
- Strictly necessary (no consent required): technical storage needed for the site to work and to remember your cookie choice (stored in your browser's local storage under
olc_consent). - Advertising measurement (only with your consent): the Google Ads tag (Google Ireland Limited) and the Meta Pixel (Meta Platforms Ireland Limited). They tell us whether visits and contact-form submissions come from our ads, so we can measure and improve our advertising. They are loaded only after you click “Accept” in the cookie banner.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _gcl_au, _gcl_aw | Measure conversions from Google Ads | 90 days | |
| _fbp, _fbc | Meta | Measure visits and conversions from Facebook/Instagram ads | 90 days |
The legal basis is your consent (Article 22.2 of Spanish Law 34/2002 (LSSI) and Article 6.1(a) GDPR). For the collection and transmission of data through the Meta Pixel we act as joint controller with Meta Platforms Ireland Limited; Meta's subsequent processing is governed by its own privacy policy (facebook.com/privacy/policy). Google's processing is described at policies.google.com/privacy. Both providers may transfer data to the United States under the EU–US Data Privacy Framework adequacy decision or Standard Contractual Clauses.
You can accept or reject these cookies, and withdraw your consent at any time, by clicking “Cookie settings” at the bottom of any page. Rejecting them does not affect your use of the website. You can also delete cookies from your browser settings.
Our booking pages (/book/, /tr/randevu/ and /es/reservar/) show an embedded calendar provided by Calendly LLC so that you can choose an appointment time. Calendly may set its own cookies inside the calendar and shows its own cookie notice; see calendly.com/privacy.
8. Changes to this policy
We may update this Privacy Policy to reflect legal or operational changes. The current version, with its date, is always published on this page.