data protection
Article 14 GDPR: The Duty to Inform When Personal Data Comes From Other Sources (Data Protection Series III)
Last updated: 27 July 2026. Quick answer. When you obtain personal data from a source other than the data subject (a third party, a public register, a data broker), Article…
Delegating Without Risk: A Case-Law Guide to the 5 Critical Points on the Data Processing Agreement (Data Protection Series II)
Last updated: 22 July 2026. Quick answer. In Spain, outsourcing the processing of personal data to a provider without a written data processing agreement (art. 28.3 GDPR) is a serious…
Capitalising Without Owning: A Business and Case-Law Guide to the True Ownership and Profitability of Data (Data Protection Series I)
Last updated: 20 July 2026. Quick answer. Under Spanish law, personal data is not merchandise a company can own outright: the only “owner” of the right is always the individual…
What is a privacy policy?
A privacy policy is a legal document that details how an organisation collects, uses, stores and protects users' personal information. This document is essential for users to understand what data…
