• Make a Donation
  • Ask For Advice

Privacy Policy

Privacy Policy

Last Updated: 14 October 2025

This legal text provides details of how we collect and process your personal data through your use of our website http://www.citizensadvice.org.es, including any information you may provide to us through the website when you fill out the form provided for this purpose. By providing your data, we inform you that our services are not available to individuals who are legally prohibited from providing consent. Therefore, when you submit the forms, you guarantee that you have sufficient capacity to give consent.

Below, we inform you of the data protection policy of Citizens Advice Bureau Spain.

1. Data Controller

Contact details of the data controller:

Citizens Advice Bureau Spain, with CIF (Tax ID number): G93354348 and registered office at: Calle San Juan No. 10, Castillo de la Duquesa 29679 Manilva, Málaga, and telephone number: 615814264. Email: myra@citizensadvice.org.es

(Registration data)

Citizens Advice Bureau Spain is the data controller for your data. (Hereinafter, “we” or “our”).

2. What data do we collect?

The General Data Protection Regulation defines personal data as any information relating to an identified or identifiable natural person, that is, any information capable of identifying a person. This does not include anonymous or percentage data. Personal data that may be collected directly from the data subject will be treated confidentially and will be incorporated into the corresponding processing activities, owned by Citizens Advice Bureau Spain.

On our website, we may process certain types of personal data, which may include:
• Identity data: first and last name.
• Contact information: email address.

We do not collect any special categories of personal data (such as data that reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health information, genetic or biometric data).

If you are required to collect personal data by law or under the terms of a contract between us and you refuse to provide it, we may not be able to perform the contract or provide the service, and you must notify us in advance.

3. How do we collect your personal data?

The means we use to collect personal data are:
• Through the form on our website, through our contact email, by phone, or by post, when:

  • You request information about our services
  • You contract our services
  • You subscribe to any of our services or publications

To ensure the quality of our portal, we reserve the right to reject any registration request or to suspend or cancel a previously accepted registration if we believe it does not meet these requirements or any other law or regulation. If this occurs, we will try to explain the reasons for our decision, but we cannot commit to doing so in all cases.

Through technology or automated interactions: On our site, we may automatically collect technical data about your equipment, browsing actions, and usage patterns. This data is collected through cookies or similar technologies. If you would like more information, you can consult our cookie policy here.

• Through third parties: Google: analytical data or search data. Outside the European Union.

4. Purpose and legitimacy for the use of your data

The most common uses of your personal data are:
– To formalize a contract between Citizens Advice Bureau Spain and you.
– When you give your consent to the processing of your data.
– When we need it to comply with a legal or regulatory obligation.
– When it is necessary for our legitimate interest or that of a third party.

The User may revoke the consent given at any time by sending an email to myra@citizensadvice.org.es or consulting the section on exercising rights below.
Below, we have attached a table in which you can see the ways in which we will use your personal data and the legitimacy for such use, as well as what type of personal data we will process. We may process some personal data for additional legal reasons, so if you need details, you can send an email to myra@citizensadvice.org.es

Form Purpose Data type

Lawful basis for processing

Contact

The purpose is the management of contacts and requests for information received through the website.

–          Name

–          Address

–          Email

–          Phone Number

 

  • Consent of the data subject (Art. 6.1.a GDPR)

  • Pre-contractual measures (Art. 6.1.b GDPR)

  • Processing is necessary for the purposes of the legitimate interests pursued by the data controller (Art. 6.1.f GDPR)

 

Newsletter

The purpose is to manage the data provided in order to send information about our services and promotions.

–          Email
  • Consent of the data subject (Art. 6.1.a GDPR)

  • Pre-contractual measures (Art. 6.1.b GDPR)

  • Processing is necessary for the purposes of the legitimate interests pursued by the data controller (Art. 6.1.f GDPR)

Marketing Communications

You will only receive marketing communications if:

  • You have requested information from us or entered into a contract with us for a product or service.
  • You have provided us with your data and ticked the relevant box on our form.
  • You have not opted out of receiving such communications.

We will always obtain your explicit consent before sending any marketing communications. You may withdraw your consent at any time by contacting us at myra@citizensadvice.org.es.

If you choose to opt out of marketing communications, we will continue to retain your personal data where it arises from a contractual relationship, in order to comply with our legal obligations.

Purpose: We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another related purpose. In such cases, we will inform you in advance, explain the legal basis for processing, and ensure that the new purpose is compatible with the original one.

5. How long do we keep your data?

We will retain your data for as long as is necessary to fulfil the purposes for which it was collected, and to determine any potential liabilities that may arise from such purposes and from the processing of the data. Retention periods established under applicable legislation will apply, insofar as they are relevant to the processing in question.

Subscriber data via email or form: retained from the time the user subscribes until they unsubscribe.

6. Children

Citizens Advice Bureau Spain does not permit individuals under the age of 14 to provide personal data through the channels available on this website (such as completing web forms to request services, submitting contact requests, or sending emails). Accordingly, individuals who provide personal data via these means formally declare that they are at least 14 years of age, and Citizens Advice Bureau Spain accepts no responsibility for failure to comply with this requirement.

If your child, who is under the specified age limit, has provided personal information to Citizens Advice Bureau Spain, please contact us so that you may exercise the applicable rights in relation to their data.

In cases where services offered by Citizens Advice Bureau Spain are directed at children under the age of 14, appropriate mechanisms will be put in place to obtain the authorisation of the child’s parents or legal guardians.

7. Exercising Your Data Protection Rights

How can you exercise these rights?
Users may contact Citizens Advice Bureau Spain either by post at its registered office or by email at myra@citizensadvice.org.es, attaching in both cases a copy of their national identity card (D.N.I.) or another equivalent form of identification, in order to request the exercise of the following rights:

  • Right of access: You may request confirmation as to whether Citizens Advice Bureau Spain is processing your personal data.
  • Right to rectification: You may request correction of any inaccurate data, or exercise the right to erasure (“right to be forgotten”).
  • Right to restriction of processing: You may request that processing of your data be limited; in such cases, Citizens Advice Bureau Spain will retain the data only for the exercise or defence of legal claims.
  • Right to object: You may object to the processing of your data. Citizens Advice Bureau Spain will cease such processing unless there are compelling legitimate grounds or it is required for the exercise or defence of potential legal claims.
  • Right to data portability: Where technically feasible, you may request that your personal data be transferred to another controller. Citizens Advice Bureau Spain will facilitate such portability.

You may use the forms provided by the Spanish Data Protection Agency (AEPD) to exercise these rights.

Lodging a complaint with the AEPD: If you believe there is a problem with the way Citizens Advice Bureau Spain is handling your data, you may submit a complaint to the competent supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

We may need to request specific information from you to confirm your identity and to safeguard your right to access your personal data (or to exercise any of the other rights set out above). This is a security measure to ensure that personal data is not disclosed to any person who does not have the right to receive it.

We will respond to all requests within the legally established timeframe of one month. This period may be extended if your request is particularly complex. In such cases, we will notify you and keep you updated.

8. Data Sharing: Provision of Services

In the course of our work, we may require assistance from third parties who will process data solely to provide the contracted service, and with whom we have appropriate agreements in place to safeguard your rights. These may include:

  • Service providers that provide IT and system administration services.
  • Professional advisers, including lawyers, auditors, and insurers who provide banking, legal, insurance, and accounting consultancy services.

All processors to whom we transfer your data will respect the security of your personal data and process it in accordance with the GDPR.

We only allow such processors to process your data for specified purposes and in accordance with our instructions. In line with our transparency obligations, you may request a list of these third-party service providers by contacting us at myra@citizensadvice.org.es.

9. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to employees, contractors, and other third parties who have a business need to know. They will only process your personal data in accordance with our instructions and are subject to a duty of confidentiality.

We have also put procedures in place to deal with any suspected personal data breach. In the event of a breach, we will notify you and the competent Supervisory Authority, in accordance with Articles 33 and 34 of the GDPR.

Privacy Policy for Citizens Advice was prepared by:

PG Seguridat

Email:info@privacidadglobal.com

V6/2022-1702

Lost in Spanish bureaucracy?
Touch here.
Partner Logo
Spain info Card Benefits