Legal

Privacy Policy

Discretion is the basis of our work. This page explains exactly what we do with the information you entrust to us, and what we do not.

Last updated: 7 October 2026

Who is responsible for your data

Controller: Alberto Postigo Rodríguez (Postigo Private Office)
Tax ID (NIF): 25697766G
Address: Urbanización Villa Parra Palomeras, 74, 29602 Marbella (Málaga), Spain
Email: info@posttigo.com
Telephone: +34 687 173 267

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights.

What we collect

When you submit the enquiry form: your name, the telephone or WhatsApp contact you provide and the objective you describe. Together with your message, our server records the date and time, your IP address and your browser's language setting.
When you call, write or message us: the contact details you use and whatever you choose to tell us.
When you visit the website: our server keeps a standard technical log (IP address, date and time, page requested and browser type) for security purposes.
When you become a client: the information needed to carry out your instructions, under the terms of the engagement you sign.

We do not use analytics, advertising or profiling tools on this website. We ask that you do not send identity documents, financial statements or other sensitive material through the form. If we need them, we will agree a suitable channel with you.

Why we use it and on what legal basis

To answer your enquiry and assess whether we can act for you. Legal basis: steps taken at your request before entering into a contract (Article 6.1.b GDPR).
To provide our professional services to clients. Legal basis: performance of the contract (Article 6.1.b GDPR).
To comply with the legal obligations of a law practice, including tax, accounting and anti-money-laundering rules. Legal basis: legal obligation (Article 6.1.c GDPR).
To keep the website and its form secure and free from abuse. Legal basis: our legitimate interest in the security of our systems (Article 6.1.f GDPR).

We do not send marketing communications and we do not take decisions about you by automated means.

Who has access to your data

Your data is never sold, rented or shared for commercial purposes. It is handled by the Counsel and, only to the extent necessary, by the providers that make our systems work, acting on our instructions:

OVH Groupe SAS (France): hosting of this website and of the enquiries received through it.
Google Ireland Limited: email services through which we receive notice of your enquiry. Google may process data outside the European Economic Area under the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
Other email and telecommunications providers we use to correspond with you.

If you contact us through WhatsApp, your messages are also processed by WhatsApp Ireland Limited under its own terms. The typefaces of this website are served by Google Fonts, which means your browser sends your IP address to Google when the page loads.

We will disclose data to courts, notaries, registries or public authorities only where the law requires it or where you instruct us to do so.

How long we keep it

Enquiries that do not lead to an engagement: up to 12 months from the last contact, and then deleted.
Client files: for the duration of the engagement and, afterwards, for the periods the law requires us to keep them. In matters subject to anti-money-laundering legislation that period is ten years.
Technical server logs: for a limited period, and only for security purposes.

Confidentiality and security

As a lawyer admitted in Spain, the Counsel is bound by a statutory duty of professional secrecy over everything clients confide in him. That duty has no expiry date.

Enquiries are transmitted over an encrypted connection and stored on a server under our own administration, with access restricted to the Counsel. No system is infallible, and we would notify you and the supervisory authority of any incident affecting your data where the law so requires.

Your rights

You may at any time ask us to give you access to your data, correct it, delete it, restrict or object to its processing, or hand it to you in a portable format. To do so, write to info@posttigo.com stating which right you wish to exercise. We may ask you to confirm your identity, and we will reply within one month.

If you believe your data has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es), or with the supervisory authority of your country of residence.

Minors

This website is addressed to adults. We do not knowingly collect data from anyone under the age of 18.

Changes to this policy

We will update this page whenever the way we handle data changes. The date of the latest version appears at the top.