1. Data Collected
Browsing data
Simply visiting and browsing this website (the “Website”) of Cornerstone Counsel, S.L. (“Cornerstone Counsel”) does not automatically result in the collection of data that directly identifies users (“Users”). However, certain information is collected and stored in Cornerstone Counsel’s systems (e.g. internet browser type, operating system, IP address used to access the Website) for the purpose of improving the User’s browsing experience and the management of the Website.
Access to content or services requiring data submission
Notwithstanding the above, access to certain information or the use of specific content or services on the Website may require the User to provide certain personal data – primarily including name, surname, email address, company, position, and professional contact details. In such cases, Cornerstone Counsel will provide the User with the necessary information before processing their data.
2. Data Controller
Cornerstone Counsel is the data controller for any data collected or generated as a result of Users accessing, using, or browsing the Website, as well as for the management of the Website.
3. Purposes of Processing
In addition to managing requests for information, content, or services expressly requested by Users or provided with their consent, Cornerstone Counsel has a legitimate interest in using the data collected or generated to:
- improve the Website, its management, and its security,
- conduct studies and analyses on the relevance and use of the Website, including through anonymised data, and
- where permitted under applicable law, inform Users about legal developments through publications, seminars, and other initiatives.
4. Data Sharing
Personal data may be disclosed to third parties where required or permitted by applicable law, including competent authorities in the exercise of their functions, as well as to relevant service providers.
Cornerstone Counsel operate as an international practice, and in some cases the development and execution of professional engagements may require the transfer of data to other countries, some of which may not provide a level of data protection equivalent to that of the European Union. Likewise, where any of our service providers or IT systems are located outside the EU, Cornerstone Counsel will implement all safeguards required under applicable regulations to ensure adequate data protection.
5. Legal Basis and Data Retention
The lawful bases for processing Users’ data include:
- the User’s voluntary access to and browsing of the Website,
- the User’s request for information or specific content or services,
- compliance with legal obligations applicable to Cornerstone Counsel,
- Cornerstone Counsel’s legitimate interest in improving the Website and its security, and in conducting studies and analyses on its operation and use, and
- where the User has given consent or where legitimate interest applies, sending legal updates and information.
Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected, including for the duration of any contractual relationship arising from requested services or content, and thereafter for the period required to comply with applicable legal, contractual, or professional obligations (for example, until the expiry of any relevant limitation periods under data protection or cybersecurity laws).
Where personal data is processed for the purpose of sending legal updates, it will be retained until the User objects to receiving such communications, using the simple and free means made available for that purpose.
6. Users’ Rights
Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability, where applicable, in relation to the processing carried out by Cornerstone Counsel, by submitting a written request to: contact@cornerstonecounsel.es.
Users also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) via its website: www.aepd.es.