Privacy policy
Last updated: October 2026
Data controller
Investments & Law Solutions, S.L. (LEXCOSTA), tax ID (NIF) B93443661, C/ Almonte 10, 29004 Málaga. Contact: pablo@lexcosta.com.
Data we process
The data you provide when you contact us via WhatsApp, email or telephone: name, telephone number or email address and the content of your message, including, where applicable, the answers you selected in this website's contact form. Please do not include particularly sensitive data or case documents in your first message.
The contact form on this website does not send or store any data: it only prepares a message that you choose to send from your own WhatsApp app.
Purpose and legal basis
To respond to your enquiry and, where appropriate, prepare a proposal. The legal basis is your consent and steps taken at your request before entering into a contract (article 6(1)(a) and 6(1)(b) of Regulation (EU) 2016/679, GDPR).
If an engagement is agreed, your data will be processed to perform it and to meet the firm's legal obligations, including anti-money-laundering requirements.
Retention
Data from an enquiry that does not lead to an engagement are kept for as long as needed to respond and for no more than one year. If there is an engagement, for the duration of the professional relationship and the applicable legal limitation and retention periods.
Recipients
We do not share your data with third parties unless required by law. Our website hosting and email providers have access to them as processors, under contracts complying with article 28 GDPR. Where any of them processes data outside the European Economic Area, it does so with the safeguards of Chapter V GDPR (adequacy decision or standard contractual clauses).
If you contact us via WhatsApp, the service is provided by WhatsApp Ireland Limited (Meta group) under its own terms and privacy policy. Conversations are end-to-end encrypted; even so, we recommend that you do not send particularly sensitive data or documents through that channel until we indicate the appropriate one.
All data you provide are covered by professional secrecy.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to pablo@lexcosta.com. If you believe your request has not been properly handled, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
This is a translation. In case of discrepancy, the Spanish version prevails.