Privacy policy

Last updated: October 2026

1. Data controller

Blanco Abogados, a firm of associated lawyers admitted to the Bar in Spain and in the Dominican Republic. Controller: Blanco Abogados.

Professional addresses: Calle José Abascal, n.º 32, 28003 Madrid (Spain) · Av. Helios, n.º 103, sector Bella Vista, D. N. 10112, Santo Domingo (Dominican Republic).
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Telephone: +34 635 856 159 (Spain) · +1 (829) 652-2508 (Dominican Republic) · +33 6 63 73 36 03 (France, French-speaking desk).

2. Data we process

The data you provide through the contact form, by email or by WhatsApp: name, email address, telephone number, country and any information about your matter that you choose to share with us. We ask that you do not include particularly sensitive data (health, data concerning minors, criminal records or similar) or documents in your first enquiry, unless they are essential to assess your case. We also process browsing data, as set out in the Cookie policy, and the IP address recorded by the server for security purposes.

3. Purposes

a) To respond to your enquiry and study your case.
b) To prepare and, where applicable, carry out the professional engagement, including invoicing.
c) To comply with the firm’s legal and professional obligations, including the prevention of money laundering.
d) To protect the security of the website and the firm’s systems.
e) With your consent, to measure the use of the website and the effectiveness of our advertising.

We do not take decisions based solely on automated processing that produce legal effects concerning you.

4. Legal basis

a) Pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
b) Performance of the professional engagement (Art. 6(1)(b) GDPR).
c) Compliance with legal obligations (Art. 6(1)(c) GDPR).
d) The firm’s legitimate interest in the security of its systems and, for third-party data you provide, in studying the matter and establishing, exercising or defending legal claims (Art. 6(1)(f) GDPR).
e) Your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time without affecting the lawfulness of prior processing.

5. Retention

Enquiries that do not lead to an engagement: for the time needed to respond and, at most, one year.
Clients: for the duration of the engagement and thereafter for the statutory retention and limitation periods; documents required under anti-money-laundering rules, ten years in Spain.
Technical security logs: for a limited period, according to the server configuration.
Browsing data: as set out in the Cookie policy.

6. Confidentiality

The information you entrust to us is protected by lawyers’ professional secrecy in Spain and in the Dominican Republic. Access is limited to those members of the firm who need it to handle your matter.

7. Recipients

We do not disclose your data to third parties, except where required by law or where necessary to carry out the engagement: courts, court representatives (procuradores), notaries, registries, experts, sworn translators and other professionals involved in the matter, in Spain or in the Dominican Republic, and the authorities where the law so requires.

Processors: the website and email hosting provider, with servers in the European Union, and Google Ireland Limited, as provider of the measurement and advertising services described in the Cookie policy. If you write to us by WhatsApp, that service is also governed by its provider’s terms.

8. International transfers

The firm acts in Spain and in the Dominican Republic, a country not covered by a European Commission adequacy decision.

Regular transfers. Where the firm’s lawyers in the Dominican Republic regularly process data relating to enquiries or clients, those transfers are subject to the appropriate safeguards provided for in Article 46 GDPR, including, where applicable, the standard contractual clauses adopted by the European Commission.

Occasional transfers. Occasional disclosures that are strictly necessary for a specific matter, for the performance of the engagement or for the defence of your rights — for example, to a court, notary or registry in that country — are based, as appropriate, on Article 49(1)(b) GDPR (pre-contractual measures taken at your request or performance of the engagement) or on Article 49(1)(e) GDPR (establishment, exercise or defence of legal claims).

In the Dominican Republic, processing is also governed by Law No. 172-13 on the protection of personal data. Technology providers that, where applicable, process data outside the European Economic Area do so with the safeguards provided for in the GDPR.

9. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to This email address is being protected from spambots. You need JavaScript enabled to view it.. We may ask you to verify your identity. We will respond within the time limits laid down in the GDPR. Exercising these rights does not affect professional secrecy or statutory retention obligations.

If you consider that the processing does not comply with the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the supervisory authority of your place of residence.

10. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration.

11. Changes

This policy may be updated to reflect legal or technical changes. The version in force is always the one published on this page.