Last updated: 1 October 2026
At Hidalgo Fernández-Zúñiga Asesores we treat the information of people who contact us with the same confidentiality we apply to our clients’ matters. This policy explains what data we collect through this website, what we use it for and what rights you have over it.
It has been drafted in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).
This is a translation provided for information purposes. In the event of any discrepancy, the Spanish version prevails.
Data controller
- Company: Hidalgo Fernandez-Zuñiga, S.L. (hereinafter, “HFZ Asesores”)
- Tax ID (CIF): B29832862
- Address: Calle Vendeja, 40, 3.º, 29001 Málaga (Spain)
- Telephone: +34 952 22 43 22 · +34 952 22 14 89
- Email: info@hidalgofernandezconsultores.es
HFZ Asesores has not appointed a Data Protection Officer, as it is not required to do so under Article 37 GDPR or Article 34 LOPDGDD. Any question about the processing of your data can be sent to the email address above.
What data we collect and where it comes from
We only process the data you provide to us directly:
- Contact form: first name, surname, email address, mobile phone number and the content of your message.
- Phone calls and emails: the data you share with us when contacting us through these channels.
In this first contact, please describe your query in general terms and do not include documents or particularly sensitive information, such as health data or information about third parties. If your matter requires it, we will tell you how to send us that documentation securely. If you nevertheless provide data about other people, you are responsible for having informed them and obtained their permission.
This website is not aimed at children under 14, and we do not knowingly collect their data.
What we use your data for and on what legal basis
| Purpose | Legal basis |
| Answering your query and assessing whether we can help with your matter | Steps taken at your request prior to entering into a contract (Art. 6.1.b GDPR) |
| Providing the advisory service if you engage us | Performance of a contract (Art. 6.1.b GDPR) |
| Complying with the legal obligations that apply to us as advisers in tax, commercial and anti-money laundering matters | Compliance with a legal obligation (Art. 6.1.c GDPR) |
| Sending you information about our services or regulatory updates, only if you have expressly requested it | Consent (Art. 6.1.a GDPR and Art. 21 LSSI-CE) |
We do not carry out profiling or take automated decisions that produce legal effects concerning you. We do not send commercial communications without your prior consent, which you may withdraw at any time.
Confidentiality and professional secrecy
All the information you provide, including what you share in the first contact, is treated as confidential. The members of our team who access it are bound by a duty of confidentiality and, in the case of lawyers, by the professional secrecy established in the General Statute of the Spanish Legal Profession and Spanish Organic Law 5/2024 on the Right of Defence.
How long we keep your data
- Queries that do not become an engagement: for as long as needed to deal with them and, at most, one year from the last communication.
- Clients: for the duration of the professional relationship and, afterwards, for the periods required by applicable law. These include the limitation periods for tax and civil liability, the record-keeping obligation under the Spanish Commercial Code and the ten-year period set by Spanish Law 10/2010 on the prevention of money laundering and terrorist financing.
- Information mailings: until you withdraw your consent.
During the legal retention periods, data remains blocked and is only used to deal with possible liabilities or requests from the authorities. Once those periods end, it is securely deleted.
Who we share your data with
We do not sell or transfer your data to third parties for commercial purposes. It is only shared in the following cases:
- Public authorities, courts and tribunals, where there is a legal obligation or it is necessary to handle your matter, for example before the Spanish Tax Agency or the Land Registry.
- Service providers, such as web hosting, email or the firm’s management systems. They act as data processors under a contract that requires them to use the data only on our instructions and to keep it confidential.
International transfers
We aim to ensure that our providers host data within the European Economic Area. If any of them processed it outside the EEA, they would do so with the safeguards required by the GDPR: an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework for participating companies, or standard contractual clauses approved by the Commission.
Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given, without affecting the lawfulness of processing carried out before its withdrawal.
To do so, write to us at info@hidalgofernandezconsultores.es or by post to the address above, stating the right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We will reply within one month at the latest.
If you consider that we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), the supervisory authority for private entities, including in Andalusia.
Security
We apply technical and organisational measures appropriate to the risk to protect your data against loss, unauthorised access or misuse. These include the encrypted (HTTPS) connection of the website, restricted access to information and the duty of confidentiality of our whole team.
Cookies
The use of cookies and similar technologies on this website is explained in our Cookie Policy.
Changes to this policy
We may update this policy to reflect changes in the law or in the way we work. The date of the last update appears at the top of this page. If the change is significant and we have your contact details, we will let you know.
