Privacy Policy

This Privacy Policy describes how Ramón y Cajal Abogados, S.L.P. ("Ramón y Cajal Abogados" or the "Firm") processes personal data collected through this website (the "Website").

Please note that the sections of the Website relating to recruitment and the whistleblowing channel are subject to specific privacy policies governing those processing activities.

1. Data Controller Identification

The data controller responsible for the processing of personal data collected through this Website is:

  • Name / Corporate name: Ramón y Cajal Abogados, S.L.P. ("Ramón y Cajal Abogados" or the "Firm")
  • Tax ID: B80340896
  • Registered office: Calle Almagro, 16–18, 28010 Madrid, Spain
  • Telephone: +34 91 576 19 00
  • General contact email: ramonycajalabogados@ramoncajal.com
  • Data Protection Officer (DPO): dpo@ramoncajal.com

2. Purposes of Processing and Legal Basis

  • Personal data provided by Website users will be processed in order to handle the request submitted by the user (newsletter subscription, blog subscription, enquiry, etc.), so that the Firm can contact the user and properly manage the request.

Legal basis: the user’s consent, granted when submitting the request, enquiry, or subscription. The user may withdraw this consent at any time using the means described in section 6 ("Rights").

  • Personal data provided through the job application forms, as well as any data subsequently requested during interviews or technical assessments, will be processed for the purpose of managing recruitment and selection processes carried out by Ramón y Cajal Abogados. In particular, personal data will be used to:
  • Manage applications received and recruitment processes to fill vacancies within Ramón y Cajal Abogados.
  • Contact candidates who meet the requirements for job offers. 

Contact candidates whenever a position becomes available that matches their profile during the applicable retention period.

Legal basis: the application of pre‑contractual measures and the intention to enter into an employment contract (Article 6.1(b) of the GDPR). In addition, by submitting a CV and/or completing the Firm’s website application form, the candidate consents to the processing of the data for these purposes (Article 6.1(a) of the GDPR).

This consent may be withdrawn at any time. In such case, the application will be removed from the Firm’s candidate database and will no longer be considered in any selection process.

  • Please note that the section of the website relating to the whistleblowing channel is governed by a specific privacy policy applicable to that processing.
     
  • Video surveillance systems are used for the purpose of managing security in the Firm’s buildings and facilities.

Legal basis: compliance with a task carried out in the public interest or the pursuit of the Firm’s legitimate interests (Articles 6.1(e) and 6.1(f) of the GDPR).

3. Categories of Personal Data

  • The Firm processes the following categories of personal data from Website users:
  • Identification data: first name and last name.
  • Contact data: email address.

No special categories of data (health, beliefs, etc.) are processed.

  • The Firm processes the following categories of personal data from job candidates:
  • First name and last name.
  • Email address and telephone number.
  • Academic qualifications and/or education.
  • Previous professional experience.
  • Languages.
  • Area of legal practice of interest.
  • Preferred office location.
  • Any other information included in the CV.
  • Results of tests assessing personal and technical skills (for example, specific tests required to fill a particular vacancy).

Any information that is unnecessary and/or not relevant for the recruitment process or for evaluating the candidate will be deleted.

Special categories of data may be processed where applicable, such as health data (for example, disability certificates).

  • Through video surveillance, the following category of data is collected: 
  • Images.

4. Data Recipients

Personal data may be disclosed to service providers acting as data processors for the Firm in order to carry out certain services. These providers may change over time; however, Ramón y Cajal Abogados ensures, among other measures, through appropriate contractual arrangements, that such providers implement adequate security measures and process personal data strictly in accordance with the Firm’s instructions.

No international data transfers are envisaged, unless they are necessary for the provision of services and appropriate safeguards are in place in accordance with applicable legislation.

In the case of video surveillance carried out at the Firm’s premises, data may be disclosed to law enforcement authorities, the Public Prosecutor’s Office, and courts and tribunals where legally required.

5. Data Retention Periods

  • Personal data of Website users will be retained for as long as necessary to fulfil the stated purpose and, once completed, will be blocked for the applicable statutory limitation periods in order to address potential liabilities.

Personal data of newsletter and blog subscribers will be processed until the user unsubscribes.

  • Personal data of job candidates will remain active for the duration of the specific recruitment process in which they participate. Once the process has concluded, Ramón y Cajal Abogados will retain candidate data for a maximum period of 24 months in order to consider them for potential future vacancies.
  • Data collected through video surveillance will be retained for one month, unless retention is required for security reasons or as part of an investigation.

6. Data Subject Rights

Data subjects whose personal data are processed by the Firm may exercise the following rights at any time, free of charge and easily:

  • To obtain confirmation as to whether Ramón y Cajal Abogados is processing personal data concerning them and to receive information about: the purposes of processing; the categories of personal data processed; the recipients or categories of recipients; and, where possible, the envisaged retention period.
  • The right of access to personal data and the right to request rectification of inaccurate data.
  • The right to request erasure of personal data when, among other reasons, the data are no longer necessary for the purposes for which they were collected; consent has been withdrawn and there is no other legal basis; the data subject objects to the processing and no overriding legitimate grounds exist; or the data have been unlawfully processed.
  • In certain circumstances, the right to request restriction of processing, in which case the data will only be retained for the establishment, exercise, or defence of legal claims.
  • In certain circumstances and for reasons relating to their particular situation, the right to object to the processing of personal data.
  • Data subjects have the right to data portability, allowing their personal data to be transferred directly from one controller to another, where technically feasible.
  • Data subjects have the right to withdraw their consent at any time.

To exercise these rights or withdraw consent, users and candidates may contact Ramón y Cajal Abogados:

  • By email to the Firm’s DPO: dpo@ramoncajal.com.
  • By postal mail at: Calle Almagro 16, 28010 Madrid, Spain, for the attention of the Data Protection Officer.

If dissatisfied, data subjects may lodge a complaint with the Spanish Data Protection Agency (AEPD) at C/ Jorge Juan, 6, 28001 Madrid, Spain, or via its website: https://www.aepd.es/.

7. Security Measures

The Firm will process personal data at all times in a confidential manner and will adopt the necessary technical and organisational measures to ensure data integrity and availability and to prevent unauthorised access, taking into account the state of the art and the nature of the data processed.