Privacy policy

This policy explains how personal data provided through LAB NOU is processed.

1. Data we process

We may process identification and contact details, professional details if you contact us on behalf of a company or practice, and property or case information needed to understand and manage your request.

2. Purposes

• To respond to enquiries and requests submitted through the website.
• To assess the feasibility, scope and conditions of a potential professional service.
• To manage the professional relationship where an engagement is agreed.
• To comply with applicable legal, tax, administrative and professional obligations.

We do not use these details to send unsolicited marketing communications.

3. Legal basis

Enquiries and service requests are processed in order to take pre-contractual steps at the data subject’s request and, where an engagement is agreed, to perform the resulting contract. Some processing is also necessary to comply with legal obligations.

4. Retention

Data is kept for as long as necessary to handle the request and manage the professional relationship. If no engagement is agreed, data will only be retained for a period reasonably necessary for follow-up and potential legal responsibilities. Where a professional relationship exists, the retention periods required by applicable legal, tax, administrative and professional rules will apply.

5. Recipients and service providers

Personal data is not disclosed to third parties unless needed to perform the service or comply with a legal obligation. Depending on the procedure, this may include public authorities, registers, professional bodies or other competent entities. LAB NOU uses technology providers for website hosting, form processing, email and cloud services, which may act as processors.

6. International transfers

Some technology providers may process data outside the European Economic Area. Where this occurs, processing must rely on safeguards recognised under the GDPR, such as adequacy decisions, the EU-US Data Privacy Framework where applicable, or the European Commission’s Standard Contractual Clauses.

7. Your rights

You may request access, rectification, erasure, objection, restriction or portability of your personal data, where applicable, by writing to hola@labnou.es. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Automated decisions

We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

9. Security and updates

Reasonable measures are applied to protect personal data. This policy may be updated if services, providers or legal obligations change.

Last updated: September 2026.