Legal Stones Legal Stones Preventive legal consulting

Legal information

Privacy policy

Information on personal data processing under Regulation (EU) 2016/679 (GDPR) and Spanish data protection law (LOPDGDD).

1. Data controller

  • Identity: Lucía Piedras Aldao — Legal Stones
  • Tax ID (NIF): 52497770V
  • Mode of activity: online professional practice
  • Contact: hello@legalstones.com
  • WhatsApp: +34 676 47 33 16

2. Data we process and sources

We may process data you voluntarily provide when contacting us or requesting information:

  • Contact data: name, email, phone, company and message content (email, WhatsApp or forms).
  • Browsing data: technical identifiers and usage statistics if you accept analytics cookies (e.g. Google Analytics 4).
  • Professional data you send for a potential engagement (documents, context), only as needed.

We do not request special categories of data via the site. If they appear in a message by accident, they will be handled confidentially and minimisation will be requested.

3. Purposes and legal bases

  • Handling enquiries (email, WhatsApp, forms): pre-contractual steps at your request and/or legitimate interest in responding (GDPR art. 6(1)(b) and 6(1)(f)).
  • Providing professional services once engaged: performance of a contract (art. 6(1)(b)).
  • Legal obligations (e.g. tax or professional rules, where applicable): art. 6(1)(c).
  • Web analytics (if non-essential cookies are accepted): consent (art. 6(1)(a)).

4. Recipients and processors

Data are not shared with third parties except where required by law or needed to provide the service. Processors may include:

  • Web hosting / server provider.
  • Google Analytics (Google Ireland Ltd. / Google LLC), only with analytics cookie consent.
  • Formsubmit.co, when a site form forwards a message to hello@legalstones.com.
  • WhatsApp (Meta), if you start a chat via the contact button.
  • Email provider used for hello@legalstones.com.

Some providers may be outside the EEA. Appropriate safeguards (e.g. EU Standard Contractual Clauses) will apply where available.

5. Retention

  • Enquiries without engagement: as long as needed to handle them and up to a maximum of 12 months from the last contact, unless you object or a professional relationship begins.
  • Clients / engagements: during the relationship and any legal retention periods afterwards.
  • Analytics cookies: as described in the Cookie policy and the provider’s settings.

6. Your rights

You may exercise rights of access, rectification, erasure, objection, restriction and portability, where applicable, by emailing hello@legalstones.com, stating the right requested and providing ID if needed.

You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security and Artificial Intelligence

Reasonable technical and organisational measures are applied to protect data. No system is 100% secure; contact us immediately if you detect an incident affecting you.

When Artificial Intelligence tools are used in professional work or to improve the site, the criteria in Responsible use of Artificial Intelligence apply.

8. Children

Services are aimed at professionals and businesses. We do not seek information from children under 14 via the site.

9. Updates

This policy may be updated to reflect legal or site changes. The current version will be published on this page with its update date.

Last updated: 31 July 2026