Personal Data Processing Policy (GDPR)
This document describes how ARROWS International (the "Controller") processes personal data you submit via the contact form, e-mail or phone, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable national data protection law.
1. Controller
ARROWS International, an international legal network headquartered in Prague, Czech Republic. Contact: office@arws.eu. On the Spanish market we operate exclusively in cooperation with a partner Spanish law firm from the ARROWS International network, which may receive your inquiry for further handling.
2. Data we process
- Identification and contact data: name, e-mail, phone.
- Content of your message and any attachments.
- Technical data: submission date and time; the IP address is used transiently to generate an anti-abuse hash and is not retained in its original form.
3. Purpose and legal basis
- Answering your inquiry — Art. 6(1)(b) and (f) GDPR.
- Compliance with legal obligations — Art. 6(1)(c) GDPR.
- Protection of legal claims — Art. 6(1)(f) GDPR.
4. Recipients
The partner Spanish law firm within the ARROWS International network; processors (hosting, e-mail, IT — within the EU); public authorities where required by law. We do not transfer data outside the EU/EEA.
5. Retention
Inquiries without follow-up: max. 12 months. Engaged matters: according to the rules applicable to the legal profession.
6. Your rights
Access, rectification, erasure, restriction, portability, objection. You may lodge a complaint with the competent supervisory authority: [DOPLNIT: dozorový úřad pro ochranu osobních údajů ve Španělsku – název a kontakt].
7. Cookies
The public portal sets no analytics or advertising cookies. Your choice regarding anonymous, cookie-free statistics is stored locally in your browser. The administration area uses strictly necessary session storage.
8. Contact
Send requests to office@arws.eu. We respond within 30 days.
Updated: [DOPLNIT: datum aktualizace]