Privacy Policy
Last updated: September 2026
This Privacy Policy explains how personal data collected through ozdoganlegalconsulting.com is processed, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and Spanish Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Controller: Aslı Ceren Özdoğan, trading as Ozdogan Legal Consulting
- Address: Calle de Núñez de Balboa, 28006 Madrid, Spain
- E-mail for data-protection matters: atty.cerenozdogan@gmail.com
2. What data we collect and why
| Data | Purpose | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Contact-form data: name, e-mail, telephone (optional), the service you are interested in and the content of your message | To respond to your enquiry, assess your case and, where applicable, prepare a quote | Your consent (Art. 6.1(a)) and steps prior to entering into a contract at your request (Art. 6.1(b)) |
| Data provided when you engage our services (identity, immigration and other documents) | To provide the legal services agreed, comply with legal and professional obligations and manage billing | Performance of a contract (Art. 6.1(b)) and legal obligations (Art. 6.1(c)) |
| Technical data generated when you browse (IP address, browser, pages visited) | To deliver the website securely and prevent abuse | Legitimate interest in the security and operation of the website (Art. 6.1(f)) |
Immigration files may include special categories of data (for example, health or criminal-record certificates required by the authorities). Such data is processed only when necessary to provide the service you have requested and with your explicit consent (Art. 9.2(a) GDPR), or as required by law.
3. How long we keep your data
Enquiry data is kept for as long as necessary to respond to you and, if no engagement follows, for a maximum of 12 months. Client-file data is kept for the duration of the engagement and thereafter for the periods required by law to meet legal, tax and professional-liability obligations (generally between 5 and 10 years), after which it is securely deleted.
4. Who receives your data
Your data is not sold or shared for marketing. It may be disclosed to public authorities (immigration offices, consulates, tax and Social Security administrations, courts) when necessary to provide the service, and to service providers that act as processors on our behalf under GDPR-compliant agreements, such as our website hosting and content-delivery provider (Cloudflare, Inc.), our contact-form delivery service (Web3Forms) and our e-mail provider (Google LLC, Gmail). Where a provider processes data outside the European Economic Area, transfers are protected by an adequacy decision or the Standard Contractual Clauses approved by the European Commission.
5. Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise these rights, write to atty.cerenozdogan@gmail.com indicating the right you wish to exercise, and attach a copy of an identity document if we cannot otherwise verify your identity. You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
6. Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration, including encrypted connections (HTTPS), access controls and confidentiality obligations for anyone who handles client information.
7. Cookies
This website uses only strictly necessary technical cookies and similar technologies (for security and to remember your language choice, where applicable). These do not require consent. We do not use advertising or analytics cookies that track you. Should we introduce any, we will ask for your consent first through a cookie banner, in line with the guidance of the Spanish Data Protection Agency.
8. Changes to this policy
We may update this Privacy Policy to reflect legal or operational changes. The current version, with its date, is always published on this page.