Cuatrecasas website and applications privacy policy
1. Purpose and definitions
This Privacy Policy (the "Privacy Policy") governs how Cuatrecasas Legal, S.L.P. processes personal data on its website https://www.cuatrecasas.com/ website (the "Website").
For the purposes of this Privacy Policy, the term "Users" refers to any individuals accessing, browsing or interacting with the Website, including using the forms and functionalities available on it.
2. Who is the data controller?
The controller of the personal data processed on the Website is Cuatrecasas Legal, S.L.P. ("Cuatrecasas" or the "Firm"), with tax identification number B59942110 and address at Avenida Diagonal 191, 08018 Barcelona (Spain).
Users can contact Cuatrecasas’s data protection officer at data.protection.officer@cuatrecasas.com.
3. What data do we process?
Depending on the Users’ use of the Website, Cuatrecasas can process the following categories of data:
A) Subscription to the Firm’s newsletter:
Identification and professional data: first name, last name, corporate email, company, position, language, country, telephone (optional), and selected preferences/interests (e.g., areas and sectors), as per the subscription form.
B) Registration for Firm’s events:
Identification and professional data (e.g., name, surname, email, company, position, professional contact details).
If applicable, image or voice, or both (photographs, recordings and retransmissions) when the event is photographed, recorded or broadcasted, for information purposes regarding the Firm's activity.
C) Contact form:
Contact data and the data that Users include in their message (e.g., subject, content, company/role), as well as metadata needed for managing the communication.
D) Navigation (cookies and technical data)
IP address, online identifiers, browser/device information, pages visited, and data derived from the use of cookies and similar technologies. Users can consult the details in the Cookie Policy.
E) Third-party data:
If Users include third-party data, they declare that they have previously informed the third parties and that they have a legitimate basis for sharing them.
4. For what purposes does Cuatrecasas process the Users’ data and what is the legal basis?
Cuatrecasas will process the personal data for the following purposes:
4.1. To manage newsletter subscription
- Purpose: to manage the Users’ registration as subscribers, send legal news, publications and, where appropriate, information on Cuatrecasas activities and events.
- Legal basis: (i) Users’ consent, when requested (e.g., newsletter registration); or (ii) legitimate interest to maintain the professional and informative relationship with corporate contacts, to the extent permitted by applicable law; or both.
Cancel subscription/opt-out: Users can unsubscribe at any time by using the link included in all communications or by contacting the data protection officer.
4.2. To manage event registrations
- Purpose: to process registration, logistics, capacity control, event communications, certificates/attendance and to manage relationships with attendees.
- Legal basis: consent of attending Users or execution of pre-contractual measures associated with the Users' registration, or both.
Image/voice in events (if applicable):
- Purpose: to document and publicize the Firm's activity (internal channels and online environment: website, social media, digital platforms).
- Legal basis: Users’ consent or Cuatrecasas' legitimate interest in communicating its institutional activity, or both, considering the nature of the event and the attendees’ reasonable expectations (always clearly informing in the registration form and in the event itself).
4.3. To respond to contact requests
- Purpose: to respond to requests for information and inquiries submitted by Users in the website contact form.
- Legal basis: Users’ consent when submitting the requests.
4.4 Managing use of the Website (cookies) and its security
- Purpose: to allow navigation, ensure the operation of the Website, manage its security and, where appropriate, obtain metrics and usage statistics in accordance with the applicable cookie settings.
- Legal basis: (i) technical need to enable the connection and use of the Website in the case of technical cookies; and (ii) Users’ consent when required for non-technical cookies, as established in the Cookie Policy.
5. How long do we keep Users’ data?
Cuatrecasas will keep the data only for the time necessary to meet the purpose for which we collected it, and then the data will be blocked while legal and contractual liabilities could arise.
In particular:
- Subscription to newsletter: as long as Users keeps the subscription active and do not request unsubscription or opt out.
- Registration and participation in events: during the event management and for a reasonable period after for follow-up, incident handling and fulfillment of obligations.
- Queries: during the time necessary to process and close the request, and, if applicable, during the applicable statute of limitations periods.
- Cookies: according to the deadlines in the Cookie Policy.
6. To whom do we disclose the Users’ data?
In general, Cuatrecasas will not disclose the data to third parties unless it is necessary to provide the service or manage the relationship, there is a legal obligation, or the Users have authorized it.
6.1. Cuatrecasas group entities
As a Firm with international presence, when necessary for the purposes described above (e.g., coordinating international events and managing communications), data could be shared with other Cuatrecasas group companies.
List of Cuatrecasas group companies:
https://www.cuatrecasas.com/media_repository/docs/GCA.pdf
6.2. Event co-organizers
If Users register for events organized jointly with third parties, their data can be disclosed to the co-organizers exclusively for organizing and managing the event.
7. International data transfers
If the disclosure of data to Cuatrecasas group entities or suppliers involves an international transfer outside the European Economic Area, Cuatrecasas will apply appropriate safeguards, such as standard contractual clauses or other valid mechanisms under applicable law, to ensure an equivalent level of protection.
8. Automated decisions
Data will not be subject to decisions based solely on automated processing that produce legal effects or significantly affect the Users in a similar way.
9. Rights and how to exercise them
Users can exercise the rights of access, rectification, erasure, objection, restriction and portability, and can withdraw consent at any time.
Users can exercise these rights by sending a request, indicating the right they wish to exercise and providing the necessary information for Cuatrecasas to verify their identity, if applicable, to:
- data.protection.officer@cuatrecasas.com, or
- in writing to Avenida Diagonal, 191, 08018 Barcelona (Spain)
If Users consider that their request has not been adequately addressed, they can file a complaint with the Spanish Data Protection Agency or with the competent authority.
10. Changes in the Privacy Policy
Cuatrecasas can update this Privacy Policy to reflect legal, technical and operational changes. The current version will be published on this page.
Last update: February 2026
© Cuatrecasas Legal SLP 2026. Total or partial reproduction is forbidden. All rights reserved