Martínez-Cardós Law Firm
Data Protection and GDPR Lawyers in Spain
GDPR Compliance, DPO Services and AEPD Proceedings
We are English-speaking data protection lawyers in Madrid. We help companies, professionals and start-ups comply with the GDPR and Spain’s data protection act (Organic Law 3/2018, LOPDGDD): we audit their situation, design the policies and procedures they need, act as their Data Protection Officer (DPO) and represent them before the Spanish Data Protection Agency (AEPD).
Specialisation in New Technologies Law and Data Protection, offering comprehensive advisory services and compliance with current regulations, including the GDPR and Spanish Law 3/2018. We are committed to ensuring data protection and legal compliance, providing personalised solutions for each client.
Data protection compliance
- Analysis and diagnosis of the current data protection situation.
- Evaluation of compliance with applicable regulations. Design and implementation of measures and policies to ensure regulatory compliance.
- Regular updating and review of internal procedures regarding data protection.
Compliance with the GDPR (Regulation (EU) 2016/679)
- Advice on the principles and requirements established in the GDPR.
- Adaptation of processes and policies for the processing of personal data to the GDPR.
- Risk assessment and management related to data processing.
- Preparation and review of data protection contracts and clauses.
Compliance with Organic Law 3/2018 (LOPDGDD) for companies and the self-employed
- Analysis and compliance with specific requirements of Spanish legislation on data protection.
- Adaptation of internal procedures to the obligations established by Spanish law.
- Advice on data protection in relation to commercial and business activities.
Data Protection Officer (DPO) services
- Appointment and performance of DPO functions in accordance with applicable regulations. Supervision and control of compliance with data protection regulations.
- Coordination with control authorities in case of security incidents or data breaches.
- Ongoing advice on data protection and privacy issues.
Defence before the Spanish Data Protection Agency (AEPD)
- Legal representation in sanctioning procedures initiated by the Spanish Data Protection Agency.
- Preparation of appeals and responses to requests from the Spanish Data Protection Agency.
- Advice on the management of investigations and audits conducted by the Spanish Data Protection Agency.
- Defense and representation in procedures for the exercise of rights and complaints before the Spanish Data Protection Agency.
FAQs: Data Protection
What does GDPR and LOPDGDD compliance involve?
A diagnosis of the current situation, an assessment of compliance, the design and implementation of the necessary measures and policies, the review of contracts and clauses, risk management and regular updates of internal procedures.
Can you act as Data Protection Officer (DPO)?
Yes. We take on the DPO role, monitor compliance, coordinate with the supervisory authorities in the event of security incidents or data breaches and provide ongoing advice.
Do you defend clients before the Spanish Data Protection Agency?
Yes. We represent clients in penalty proceedings, prepare appeals and responses to AEPD requests and assist with investigations, audits and complaints about the exercise of rights.
Who do you advise on data protection?
Companies, professionals, the self-employed and start-ups that process personal data and must comply with Regulation (EU) 2016/679 and Spain’s Organic Law 3/2018.
Lawyers specialised in this area
Other practice areas