This is a courtesy translation. In case of discrepancy, the Spanish version prevails.
At Grupo SF-Euch (the “Group”) we treat your personal data with the same discretion we apply to our clients’ matters. This policy explains what data we collect through the websites sfabogados.com and eurochinabridge.com and our contact channels, what we use it for and what rights you have.
1. Who is the controller
Rukomet Participaciones e Inversiones, S.L., the Group’s parent company, tax ID (NIF) B66801457, with its address at Avinguda Diagonal, 437, principal, 08036 Barcelona, is the controller of the data you provide through the websites and contact channels (forms, email, telephone, WhatsApp, WeChat and virtual assistant).
When a Group company accepts an engagement, that company becomes the controller of the data needed to provide the service, as stated in the engagement letter. The list of Group companies is set out in the Legal notice.
Contact for any privacy matter: info@rukometparticipacioneseinversiones.com, or by post to the address above.
2. What data we process and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| You write to us via a form, email, telephone, WhatsApp or WeChat | Name, contact details, language and what you tell us about your query | To reply and, if you ask, prepare a proposal of services | Your request and pre-contractual steps (Art. 6.1.b GDPR) |
| You book an online consultation | Name, contact details, date and time, language and payment details | To manage the appointment, charge for it and issue the invoice | Contract (Art. 6.1.b) and legal tax obligation (Art. 6.1.c) |
| You use the virtual assistant | The text of your questions and the answers | To give you general guidance and improve the service | Your request (Art. 6.1.b) and our legitimate interest in improving our service (Art. 6.1.f) |
| You subscribe to the newsletter | Name, email address and language | To send you the newsletter “Negocio y Derecho en España” | Your consent (Art. 6.1.a), which you may withdraw at any time |
| You become a client | The data needed for the engagement and to comply with anti-money laundering rules | To provide and invoice the service and meet legal obligations | Contract (Art. 6.1.b) and legal obligation (Art. 6.1.c; Law 10/2010) |
| You use the whistleblowing channel | The data you provide in your report | To handle and investigate the report | Legal obligation or public interest (Law 2/2023) |
| You send us your CV | The data in your CV | To assess your application | Your consent (Art. 6.1.a) |
We do not ask for more data than we need. If, when raising your query, you give us data about third parties or special categories of data (for example, health data or data relating to criminal proceedings), we will process it only to the extent strictly necessary to deal with it and with the confidentiality required by professional secrecy.
We do not make automated decisions that produce legal effects concerning you. The virtual assistant only provides general guidance, and any assessment of your case is made by a person.
3. Within the Group
The Group companies share management, staff and systems. Your data may be accessible to other Group companies where necessary to deal with your query or engagement, or for internal administrative purposes, on the basis of our legitimate interest (Recital 48 GDPR). We will inform you before a company other than the one assisting you becomes involved in your matter.
4. Who we share your data with
We do not sell or transfer your data. We only share it:
-
With courts, tribunals, public authorities and notaries, when necessary for your matter or required by law.
-
With professional partners (court representatives, experts, translators or law firms in other countries), when your matter requires it and with your prior knowledge.
-
With the providers that supply us with technical services, who act as processors and may only use the data on our instructions:
| Provider | Service | Location and safeguards |
|---|---|---|
| Cloudflare, Inc. | Website hosting and cookie-free visitor statistics | EU and US · EU-US Data Privacy Framework and standard contractual clauses |
| Microsoft Ireland Operations Ltd. | SF Abogados email and document storage | EU |
| IONOS SE | EurochinaBridge email | EU (Germany) |
WhatsApp and WeChat. If you choose to write to us via WhatsApp (Meta Platforms Ireland Ltd.) or WeChat (Tencent), those services process your data under their own policies. WeChat may store information in China. If you prefer your information not to leave the European Economic Area, we recommend email or the web form.
5. How long we keep it
-
Queries that do not become an engagement: one year from the last communication.
-
Clients: for the duration of the engagement and, afterwards, for the limitation periods for professional liability and the periods required by tax law (four years) and anti-money laundering law (ten years).
-
Newsletter: until you unsubscribe.
-
Whistleblowing channel: for the time strictly necessary to decide whether to investigate and, at most, the period set by Law 2/2023.
-
CVs: one year.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@rukometparticipacioneseinversiones.com and stating which right you are exercising. We will reply within one month.
If you consider that we have not dealt with your request properly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
Lawyers’ professional secrecy may limit the exercise of some rights where they affect information about other clients or the defence of a matter. If so, we will explain why.
7. Security
We apply technical and organisational measures appropriate to the risk: encrypted connections, access control, backups and a duty of confidentiality for all Group staff and partners.
8. Minors
The websites are not aimed at children under fourteen. If you act on behalf of a minor, you must be their legal representative.
9. Changes
We may update this policy to reflect changes in the law or in our services. We will always publish the version in force with its date.
Last updated: 26 October 2026.