Privacy Policy

Last updated: January 2026

This policy explains how personal data provided by users through the website lanzalibre.es is processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).

1. Data Controller

The controller responsible for the processing of personal data collected through this website is Ana Mongelos García, a Sworn English Translator and Interpreter appointed by Spain’s Ministry of Foreign Affairs, European Union and Cooperation.

To exercise any rights relating to your personal data, or to obtain the controller’s full identifying details (tax identification number and professional address), you may contact the professional email address: info@lanzalibre.es. Requests will be handled within the legally established time limits.

2. Data Collected

The following personal data provided voluntarily by users when completing the quotation request form may be processed:

• Full name
• Email address
• Telephone number (optional)
• Message and details of the request
• Documents attached to the request (where the user chooses to provide them)

No special categories of personal data are intentionally collected. The service provider does not use advertising tracking cookies or third-party analytics tools that collect users’ personal data.

3. Purposes of Processing

Personal data is processed exclusively for the following purposes:

• To respond to requests for quotations and, where appropriate, to communicate with the user by email or telephone.
• To formalise and manage translation assignments once accepted by both parties.
• To comply with applicable legal obligations, particularly those arising from the regulated professional activity of a sworn translator and interpreter.
• To maintain a minimal record of communications for service quality and traceability purposes.

Personal data will not be used for any purpose other than those described above, nor will marketing communications be sent to users who have not expressly requested to receive them.

4. Legal Basis for Processing

The processing of personal data is based on:

• The data subject’s consent (Article 6(1)(a) GDPR), given when voluntarily submitting the contact form.
• The performance of a contract or the implementation of pre-contractual measures (Article 6(1)(b) GDPR), where processing is necessary to prepare for or fulfil a translation assignment.
• Compliance with legal obligations (Article 6(1)(c) GDPR), applicable to the regulated professional activity and to the retention of communications for tax and commercial purposes.

5. Data Retention Periods

Data submitted through the quotation request form will be retained only for as long as necessary to process the request and, where applicable, to carry out the assignment. Once the professional relationship has ended, the data will be retained in a restricted form for the statutory limitation periods established by applicable tax and commercial legislation (generally between four and six years), after which it will be securely deleted.

Documents submitted that do not result in a translation assignment will be deleted within a maximum period of 90 days from the date of the last communication, unless the data subject expressly requests their immediate deletion.

6. Recipients of the Data

Personal data will not be disclosed to third parties except where required by law. In the ordinary provision of the service, personal data may be processed by the following data processors, with whom the contractual safeguards required under the GDPR are in place:

• Google LLC — provider of the professional email service (Gmail) used to receive and respond to enquiries. Requests submitted through the website form are forwarded to the professional email account via Google’s official API. See Google’s Privacy Policy.
• Web hosting provider — the website is hosted on European infrastructure subject to data processing arrangements compliant with the GDPR.

No international transfers of personal data outside the European Economic Area (EEA) are carried out, except those inherent in the use of Google LLC services, which operate under adequacy decisions and Standard Contractual Clauses approved by the European Commission.

7. Data Subject Rights

Data subjects have the right to:

• Access — to know what personal data is being processed and to obtain a copy of it.
• Rectification — to correct inaccurate or incomplete personal data.
• Erasure — to request the deletion of personal data when it is no longer necessary.
• Restriction of Processing — to request that the use of personal data be restricted in certain circumstances.
• Data Portability — to receive personal data in a structured, commonly used format.
• Object — to object to the processing of personal data on grounds relating to their particular situation.
• Withdraw Consent — at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please send an email to info@lanzalibre.es stating the right you wish to exercise and providing proof of identity. Requests will be answered within a maximum period of one month.

8. Complaints to the Supervisory Authority

If a user believes that their data protection rights have not been adequately respected, they have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD, www.aepd.es), C/ Jorge Juan, 6, 28001 Madrid.

9. Data Security

Appropriate technical and organisational measures are implemented to ensure a level of security appropriate to the risks associated with the processing of personal data. These measures include, among others, encrypted communications (HTTPS), password-protected access to the administration panel, the use of OAuth for the secure storage of access tokens for third-party services, and restrictions on personnel access to personal data.

10. Changes to This Policy

This policy may be updated from time to time to reflect legal, technical, or operational changes. The current version will always be the one published on this page and will indicate the date of its most recent update at the top of the document.