Data protection
Privacy policy
Last updated: 22 October 2026
This policy is also available in Spanish and Catalan. In the event of any discrepancy, the Spanish version prevails.
1. Data controller
Owner: Noemí Ampurdanés Parés
Trading name of the law firm: Ajuridic (ajuridic.com)
Tax ID (NIF): 46128288V
Profession: Lawyer, member of the Illustrious Bar Association of Barcelona (Il·lustre Col·legi de l'Advocacia de Barcelona, ICAB)
Address: Carrer del Freser, 104, Sant Martí, 08026 Barcelona
Email: [email protected]
Telephone: 614 26 26 92
2. What data is processed and where it comes from
You provide the data yourself, and only when you choose to make contact or use the assistant. This website has no user accounts, displays no advertising and does not build profiles.
- Contact form. Name, email address and message (required) and, if you wish, telephone number and area of enquiry. To send the form you must tick the box confirming that you have read this policy. When you send it, the message reaches Noemí Ampurdanés by email, and you receive at the address you provide an automatic confirmation that does not repeat your message. The message is not stored on the website's server. To prevent abuse, the server uses a decoy field, a minimum submission time and a daily counter per IP address that stores only a pseudonymised fingerprint of the IP address, not the IP address itself, and is deleted after two days. Cloudflare Turnstile checks that you are not a robot (section 5).
- Telephone, WhatsApp or direct email. The data you provide (identity, contact details and information about your enquiry) is used to deal with your request and, where applicable, to manage the professional engagement. In the case of WhatsApp, the message is transmitted by that application's provider under its own terms, which are independent of this website; if you prefer not to use it, you may call or write by email.
- SofIA assistant (chat). SofIA is an artificial intelligence. It generates its replies using Google's Gemini API, to which the text you type in the conversation is sent. SofIA does not ask for your name, telephone number or email: if you wish Noemí Ampurdanés to assist you, it refers you to the telephone, WhatsApp or the contact form. You are asked not to type personal or health data. To detect abuse and correct erroneous replies, the website records the date, the language, a random session identifier, a pseudonymised fingerprint of your IP address, your message and the reply. Before the record is saved, the website automatically replaces email addresses, telephone numbers, identity document numbers and bank accounts with a marker (for example, [email]); this filter is automatic and may fail. The conversation is also stored in your browser (session storage) until you close the tab. SofIA does not provide legal advice and does not create a lawyer-client relationship.
- Technical browsing data. Like any web server, the one hosting this website records, for security purposes, the IP address, date, page and browser of each request. The website also measures the technical performance of its pages with Cloudflare Web Analytics, without cookies (see the cookie policy).
For an initial enquiry it is sufficient to describe the matter in general terms. It is advisable not to write health data or data about third parties until you have spoken with Noemí Ampurdanés. If you provide such data voluntarily so that your case can be assessed, it is handled with the confidentiality attaching to legal professional secrecy.
3. Purpose and legal basis
- Replying to your enquiry (form, email, telephone or WhatsApp) and assessing whether Noemí Ampurdanés can take on the matter: your request for contact with a view to a possible engagement (Art. 6(1)(b) GDPR). If you provide health data or other specially protected data: establishment, exercise or defence of legal claims (Art. 9(2)(f) GDPR).
- Providing legal services, if the enquiry leads to an engagement (Art. 6(1)(b)), and complying with applicable legal obligations, such as tax, professional-conduct and anti-money-laundering obligations (Art. 6(1)(c)).
- Conversation with SofIA: your consent, which you give by typing after reading the notice displayed when the chat is opened (Art. 6(1)(a)). You may stop using it at any time.
- Chat log, form anti-spam and anti-robot verification: the legitimate interest in protecting the website against abuse and in correcting erroneous replies from the assistant (Art. 6(1)(f)). You may object by writing to the address given in section 1.
No automated decisions with legal effects are taken. Providing the data is voluntary, but without a name and a means of contact it is not possible to reply.
4. Retention
- Form messages and other communications: not stored on the website; they remain in Noemí Ampurdanés's email account.
- Without an engagement: 12 months from the last communication; after that period they are deleted.
- With an engagement: for the duration of the professional relationship and 6 years after it ends, or 10 years where anti-money-laundering legislation applies.
- Form anti-abuse counter: two days.
- Chat conversation log: a maximum of 90 days; it is then deleted.
- Conversation stored in your browser: until you close the tab.
- Server logs: the technical period applied by the hosting provider, for security purposes only.
Data that must be retained under a legal obligation is blocked and made available only to judges, courts, the Public Prosecutor's Office or the competent authorities.
5. Recipients and providers
Data is not sold or disclosed for commercial purposes. It is disclosed to third parties only where the matter itself requires it (court procurators, notaries, experts or other professionals involved in your case, always with your knowledge) or where required by law. In addition, the following technology providers are involved. They act as data processors under a contract pursuant to Article 28 GDPR and do not use the data for their own purposes:
- Hostinger, which provides the website hosting and the email service from which the notification to Noemí Ampurdanés and the automatic confirmation are sent, within the European Union.
- Cloudflare, which provides the website's network and protection (requests to this website pass through its infrastructure), the Turnstile anti-robot verification and the Cloudflare Web Analytics performance measurement. It may temporarily store on its servers copies of the website's public pages in order to serve them more quickly; those copies contain only the public content. Turnstile loads when you reach the contact section and, to check that you are a person, receives your IP address and technical data about your connection and browser. Turnstile does not receive the content of your message, although the message passes through Cloudflare's network, like all other traffic to the website.
- Google, through the Gemini API, to generate SofIA's replies. The terms for the API's paid services apply, under which Google processes the content in accordance with its data processing addendum, does not use it to improve its products and retains logs only for a limited period to detect abuse and comply with legal obligations.
6. International transfers
Cloudflare may process the IP address and technical connection data, and store copies of the public pages, outside the European Economic Area. Google, through the Gemini API, may process the text of the conversation with SofIA in any country where it has facilities. In both cases the transfer relies on the safeguards of Chapter V GDPR. Hosting and outgoing email are processed in the European Union.
7. Your rights
You may exercise, free of charge, your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent where the processing is based on it (for example, for the chat), without affecting processing already carried out. Please write to [email protected] stating the right you wish to exercise; if necessary, you will be asked to prove your identity. A reply is given within one month, extendable to two months if the request is complex. Data in a file that must be retained under a legal obligation or for the defence of claims cannot be erased; in that case the reason will be explained to you. If you consider that your request has not been properly handled, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).
8. Minors
This website is not directed at children under fourteen and does not knowingly collect their data. Where a matter concerns a minor, the data is provided by the person who holds legal representation of the minor.
9. Changes to this policy
This policy may be updated if the website's services or the applicable rules change. The current version is always the one published on this page, with the date shown at the top. You may also consult the legal notice (available in Spanish only) and the cookie policy.
← Back to the website