PRIVACY POLICY

1. DATA CONTROLLER

In compliance with Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter GDPR) and Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), it is hereby informed that the website https://www.legalcorelabs.com (hereinafter, the “Website”) is managed by a group of legal professionals operating under the trade name Legal Core Labs (hereinafter "LCL").
LCL does not currently constitute a legal entity, but rather a joint initiative of legal professionals who act independently or in occasional collaboration under this name.
For any questions related to the processing of your personal data or this privacy policy, you may contact us through the following means:

• Contact email: contacto@legalcorelabs.com
• Postal address for notifications: Rúa Cantón San Roque, 9, 1º D, 15800 Melide, A Coruña, Spain
• Phone: 913 566 647
• Upon request and in compliance with the principle of transparency, the full identification details of the website controllers will be provided within 24 hours, or you may obtain them directly via the following link.

2. SCOPE OF THE POLICY

This Privacy Policy governs the processing of personal data that may be collected through this website, its contact forms, content subscriptions, electronic communications, newsletter subscriptions, training events, or other activities organized by LCL.
Access to and use of the Website implies knowledge and acceptance of this Policy, as well as the conditions set out in the Legal Notice and the Cookies Policy. LCL provides clear and accessible information before requesting any personal data, so that the user can give their consent freely, specifically, and informed.
This policy may be updated in response to regulatory requirements, changes in processing activities, or strategic decisions of the firm. Any relevant changes will be communicated to users through the Website or appropriate channels. Continued use of the site after such changes implies acceptance of them.
You may consult the Legal Notice and Cookies Policy of this website for more information on the use of tracking technologies or general navigation conditions.

3. DATA PROTECTION PRINCIPLES WE APPLY

At LCL, we are committed to respecting and protecting your privacy, ensuring that the processing of personal data is carried out in accordance with the following principles:

• Lawfulness, fairness, and transparency: We will only process data lawfully, with an appropriate legal basis, and providing all necessary information to the user.
• Purpose limitation: Your data will be collected for specific, explicit, and legitimate purposes and will not be processed in a manner incompatible with those purposes.
• Data minimization: We only request the data strictly necessary for each purpose.
• Accuracy: We keep your data up to date and take the necessary steps to rectify it when necessary.
• Storage limitation: We will retain data only for as long as necessary for the purposes of processing.
• Integrity and confidentiality: We implement appropriate technical and organizational measures to protect your data's security and prevent unauthorized access.

4. PERSONAL DATA AND PURPOSES OF PROCESSING

Depending on the data collection channel or the user's interaction with LCL, we may process your personal data for the following purposes:

• a) Management of inquiries, requests, and forms
  When the user contacts LCL through the Website's contact form or by email, we process their data to manage such communication, respond to their inquiry, schedule meetings, or send the requested information about our legal services or activities.
• b) Provision of legal services and management of professional relationships
  If a professional relationship is established, the data will be processed to formalize proposals, prepare quotes, manage engagement letters, carry out legal assignments, issue invoices, and properly follow up on the contracted service.
• c) Sending legal content and updates
  If the user consents, we may use their contact details to send them legal articles, guides, regulatory alerts, or content of interest related to the areas LCL covers (data protection, compliance, digital law, etc.). In particular, if subscribed to the newsletter, the data will be processed exclusively for informational purposes and users may unsubscribe at any time via the link included in each communication.
• d) Experience assessment and quality improvement
  LCL may conduct satisfaction surveys or occasional assessments to learn users' opinions and improve the quality of the services provided.
• e) Categories of data processed
  Depending on the relationship established with the user, LCL may process identifying data (name, surname, email, phone), professional data (company, position), information derived from the inquiry or requested service, and, where appropriate, billing data. Likewise, in cases where the user subscribes to informational content or participates in activities promoted by LCL, data related to their preferences or professional interests may also be processed, always proportionally and limited to the specific purpose for which they were collected.
• f) Analysis of browsing behavior and user experience improvement
  LCL uses Microsoft Clarity, a web analytics tool provided by Microsoft Corporation, to understand how users interact with the Website. This tool allows analyzing browsing behavior through session recordings, heatmaps, and other usage metrics.
  Microsoft Clarity collects information about how users navigate the site, including clicks, scrolling, mouse movements, and pages visited. This information is used exclusively for usability improvement, web design optimization, and site performance analysis.
  Important: Microsoft Clarity is only activated if the user has given express consent through the cookie banner. The data collected is anonymous and does not allow personal identification of the user. Microsoft Clarity does not collect sensitive information such as passwords, payment data, or personal information entered in forms.
  For more information on how Microsoft Clarity processes data, you can consult its Privacy Policy and its cookie usage terms.

5. LEGAL BASIS FOR PROCESSING

The legal basis legitimizing the processing of your personal data will depend on the specific relationship between you and LCL:

• Data subject's consent: when you voluntarily fill out a contact or subscription form.
• Performance of a contract: when processing is necessary to provide you with a requested legal service or formalize a professional relationship.
• Legitimate interest of the controller: to maintain the relationship with clients or users and improve services, provided that your fundamental rights are not infringed.
• Compliance with legal obligations: when it is necessary to retain certain information to meet legal or tax requirements.

6. DISCLOSURE OF DATA TO THIRD PARTIES

LCL will not transfer or disclose personal data to third parties without the user's prior consent, except when strictly necessary to comply with a legal obligation or when auxiliary service providers act on behalf of LCL (e.g., web hosting services, accounting, videoconferencing platforms, corporate email, or web analytics tools such as Microsoft Clarity).
In such cases, LCL selects providers that offer sufficient guarantees to apply appropriate technical and organizational measures in accordance with the GDPR, signing the corresponding data processing agreements when necessary.

7. INTERNATIONAL DATA TRANSFERS

As a general rule, LCL does not carry out international data transfers. However, if it is necessary to use tools whose infrastructure is located outside the European Economic Area (e.g., Microsoft Clarity, email or cloud storage providers) for the provision of certain services, LCL will adopt the safeguards required by the GDPR, such as signing standard contractual clauses or verifying adequacy decisions by the European Commission.
In the specific case of Microsoft Clarity, Microsoft Corporation has adequate protection mechanisms and complies with the privacy standards established by European regulations.

8. DATA RETENTION

Personal data will be retained only for as long as necessary to fulfill the purpose for which they were collected. Once that purpose has been fulfilled, the data will be blocked and retained exclusively for the legally applicable periods to address possible liabilities arising from the processing.
For guidance:
General inquiries or communications: will be retained while the request is being managed and, at most, for 1 year from the last interaction.
Contractual relationships: data will be retained for the duration of the professional relationship and subsequently for the legal limitation period for civil actions or for 5 years.
Informational communications: data will be processed as long as the user does not withdraw their consent.

9. USER RIGHTS

As a data subject, you may exercise the following rights at any time:

• Right of access: to know what personal data is being processed and for what purpose.
• Right to rectification: to request the correction of inaccurate or incomplete data.
• Right to erasure: to request the deletion of your data when it is no longer necessary or when you withdraw your consent.
• Right to object: to object to the processing of your data for reasons related to your particular situation.
• Right to restriction of processing: to request the suspension of processing in certain cases.
• Right to data portability: to receive your data in a structured format and transmit it to another controller, where applicable.

You may exercise these rights by sending a written request, together with a copy of your ID or identification document, to:

• Email: contacto@legalcorelabs.com
• Postal address: Rúa Cantón San Roque, 9, 1º D, 15800 Melide, A Coruña, Spain

You may also file a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe your data protection rights have been violated.

10. SECURITY MEASURES

LCL declares that it has adopted the necessary technical and organizational measures to ensure an adequate level of security for the risks presented by the personal data processing it carries out.
These measures are aimed at preserving the confidentiality, integrity, availability, and resilience of information, as well as preventing unauthorized access, loss, alteration, or destruction of data, in accordance with the applicable data protection regulations.
LCL also regularly reviews and updates its security policies and protocols to keep them adapted to technological advances, identified risks, and the evolution of the regulatory framework.

11. CONFIDENTIALITY

Personal data provided by users will be treated in strict confidence. LCL undertakes to keep them secret and to take the necessary measures to prevent their alteration, loss, or unauthorized processing.

12. MINORS

This website is not intended for minors. If LCL becomes aware that personal data of a minor has been collected without authorization, it will proceed to delete it immediately.

13. CHANGES TO THE PRIVACY POLICY

LCL reserves the right to modify this Privacy Policy to adapt it to new regulatory requirements, case law, industry practices, or its own legitimate interests at any time.

Last updated: October 19, 2025