Legal

Privacy policy

Updated on 6 October 2026. The Spanish version of these texts prevails. English and French are provided so they can be understood.

Controller

The controller is Rafael Villegas, adviser on procedures for foreigners in Spain. You can reach him by +34 637 81 62 63 or WhatsApp. Further identity details are in the legal notice.

Data I process

• Name, email and phone, if you provide it.
• Documents and images you upload. They may include a passport, NIE or other identity data.
• The text of your enquiry and the messages in the file.
• The private-area code, stored in protected form.
• Technical data of the submission: IP address, browser, language, date, and the acceptance of these texts.

Why

• To handle the brief or the enquiry you send.
• To create and keep your private area, tied to your email.
• To tell you the status and ask for what is missing.
• To keep proof that you accepted these terms when you sent the files.
• To protect the site against abuse.

Legal basis

By ticking the box and sending the form you consent to the processing needed to receive and keep that documentation (GDPR article 6.1.a). If the brief goes ahead, the basis is the pre-contractual steps and the engagement itself (article 6.1.b). If a law requires a datum to be kept or sent, article 6.1.c applies. Technical security logs rely on legitimate interest under article 6.1.f.

Recipients

I do not sell data. I may share it with the authority, notary, registry or body concerned only when you ask me to file or collect that procedure. The host processes data on my behalf, as a processor. If you write on WhatsApp, that conversation is also processed by WhatsApp (Meta) under its own terms.

How long

While the file is open and for up to five years after it closes, unless a law requires longer storage. You may ask for deletion when that duty no longer exists.

Your rights

You may request access, rectification, erasure, objection, restriction and portability. Write via +34 637 81 62 63 or WhatsApp and identify the email of the file. You may also complain to the Spanish Data Protection Agency (www.aepd.es).

The email and the code

The email is mandatory for uploads: each file stays linked to a person rather than to an anonymous pile. The private-area code is personal. Do not share it. If you request a new one, the previous code stops working and Rafael confirms the new one on a channel where he can identify you.

Children and automated decisions

This site is not directed at children. If a procedure concerns a minor, the person with parental responsibility or guardianship must send the information. There is no automated decision-making and no profiling.