Privacy policy
How we handle your personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). No small print.
Last updated: 6 June 2026
1. Data controller
- Controller: Globalium Extranjería (trading as Globalium Expats)
- Lead lawyer: Adrián Merchán Oterino (ICA Málaga, lawyer no. 11418)
- Address: Camino de Coín 14, 29640 Fuengirola (Málaga)
- Email: infoglobalextranjeria@gmail.com
- Phone: +34 667 77 02 19
2. What data we process
We process the data you voluntarily provide through the website forms, by WhatsApp, by phone or by email. Depending on the channel, this may include:
- Identification and contact details: name, phone, email.
- Information about your situation that you choose to share so we can review your case (nationality, immigration status, a description of your enquiry).
- Technical browsing data, on the terms of our Cookies policy.
Please do not include special categories of data (health, beliefs, etc.) unless they are strictly necessary for the legal service requested.
3. Purposes and legal basis
| Purpose | Legal basis (art. 6 GDPR) |
|---|---|
| Answering your enquiry and reviewing your immigration case. | Your consent and/or pre-contractual steps taken at your request (art. 6(1)(a) and 6(1)(b)). |
| Providing the legal services you engage us for. | Performance of a contract (art. 6(1)(b)). |
| Complying with legal obligations (tax, professional duties). | Legal obligation (art. 6(1)(c)). |
| Analytics cookies (if you accept them). | Consent (art. 6(1)(a)). |
4. Retention period
We keep your data for as long as our relationship lasts and, once it ends, for the applicable statutory limitation periods (tax, commercial and professional liability). Data from enquiries that do not lead to an engagement is kept only for as long as needed to deal with your request, and is then deleted or anonymised.
5. Recipients and processors
We do not share your data with third parties except where required by law. To deliver our service we use providers that act as data processors with appropriate safeguards, including:
- Vercel Inc. — website hosting.
- Google LLC — email (Gmail) and, where applicable, web analytics.
- Resend — delivery of form-submission emails.
- Twilio Inc. — WhatsApp lead notifications.
Some providers may be located outside the European Economic Area; in that case, international transfers rely on the safeguards set out in Chapter V of the GDPR (standard contractual clauses or adequacy decisions).
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent given, by writing to infoglobalextranjeria@gmail.com stating the right you wish to exercise. If you believe the processing does not comply with the rules, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to ensure a level of security suited to the risk, in order to protect your data against unauthorised access, loss or alteration.
8. Changes to this policy
We may update this policy to reflect changes in the law or in our services. We recommend reviewing it periodically; the date of the last update appears at the top of this page.