privacy policy

Who is responsible for your data?

This website and its related services are provided by:

Throughout this policy we refer to ourselves as "Altia Migration", "the firm" or "we". This policy explains what information we collect, why, how long we keep it, and what rights you can exercise over it.

Which rules apply?

Altia Migration operates from Spain and serves clients both inside and outside the European Union. We apply the General Data Protection Regulation (GDPR) and Spanish data protection law to the processing of your personal data, regardless of the country you contact us from.

If you have any question about how we handle your data, you can write to us at info@altiamigration.com and we will respond within the timeframes set out by law.

What we collect, and when

Immigration procedures require a fair amount of documentation, so we prefer you know in advance what may be asked of you. We collect personal data at two distinct stages:

When you first contact us. Through the contact form, email, phone or WhatsApp, we collect your name, email address, phone number, nationality or country of residence, the service you are interested in, your objective, and any other information you choose to include. Nothing further is required for an initial enquiry.

If you decide to instruct us. Preparing a residency, nationality or company-formation case requires the documentation set out by the Spanish authorities or the relevant consulate. Depending on the procedure, this may include: passport and national identity documents; birth, marriage or civil-status certificates; criminal-record certificates from the countries where you have lived; proof of address; medical certificates and insurance policies; proof of financial means, such as bank statements, tax returns or tenancy agreements; employment or service contracts; academic and professional qualifications; deeds; and, where the case requires it, evidence of the source of funds.

If your case involves family members, the same categories apply to them, and we only request the information the competent authority requires for the specific procedure they are undergoing.

Technical data. Our website stores a small amount of information in your browser to remember your language or the page you were viewing, and our server logs the IP address of each contact-form submission to prevent misuse. We do not use advertising or profiling cookies, and we do not track your activity on other websites.

Information about other people

If you provide us with personal data about someone else (a spouse, child, business partner, or contact person), you are responsible for making sure that person knows you have done so and that their data will be handled as described in this policy. Wherever possible, we will contact that person directly.

Why we process your data, and on what legal basis

To respond to your enquiry and arrange the meeting you request. Because you have asked us to, and because we have a legitimate interest in responding to people who contact us.

To prepare, file and follow up your case. To perform the engagement agreed with you, and because the relevant authorities require that documentation to reach a decision.

To comply with legal identification and record-keeping obligations that apply to us as a law firm, or to the banks, notaries and registries involved in your matter.

We do not use your data for marketing purposes unless you have specifically requested it, and we never sell personal data.

Special categories of data

Some immigration cases may include information about health, family circumstances, criminal records, or even data relating to political opinions or religious beliefs when the procedure requires it. When you provide this information, we use it solely to advise you and prepare your case, either with your explicit consent or because it is necessary for the establishment, exercise or defence of legal claims.

Please do not send sensitive documentation through the website's contact form. Once we are in contact, we will let you know how to send it securely.

Confidentiality

All information you share with us is treated with strict confidentiality, including your identity, nationality, family situation, assets, income, the reasons for your move, and the very fact that you have instructed us. Everyone who works on your case is bound by confidentiality obligations, and access to your file is limited to those involved in handling it.

Who we share it with

Only when necessary for your matter: Spanish public authorities, consulates and registries; sworn translators, notaries and other external professionals involved in your case; banks, when the procedure requires it; and technology providers acting under our instructions and a written data-processing agreement. We do not share personal data for advertising purposes and do not disclose it to third parties beyond what is described here.

International transfers

We serve clients in different countries and handle procedures before Spanish authorities. Providing our services may therefore involve transferring personal data between your country of residence and Spain. Where such a transfer takes place to a country outside the European Economic Area, we rely on its necessity for the performance of the engagement you have entrusted to us, or on any other safeguard provided for under applicable data protection law.

Security

We apply technical and organisational measures appropriate to the risk, including encrypted transmission of this website, restricted access to files for the staff working on each matter, and binding confidentiality obligations across the whole team. Messages submitted through the web form are stored on a server with restricted access.

No system is immune to every risk. Should a security breach affect your rights, we would notify you and, where applicable, the competent supervisory authority.

How long do we keep your data?

Enquiries that do not lead to an engagement are kept for a limited period and then deleted.

Client files are kept for the duration of the matter and, afterwards, for as long as we are required to retain them under our professional record-keeping obligations or to be able to answer any question arising from the work carried out. We periodically review the records we hold and delete anything no longer needed.

Your rights

You can ask us for a copy of the personal data we hold about you, and ask us to correct or delete it. You can also ask us to restrict its processing or object to it, as well as request that we transfer it to another provider. Where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

You can exercise these rights by writing to info@altiamigration.com. We may need to verify your identity before acting on your request.

These rights have limits. We may be unable to delete documentation already filed with an authority, or that we are legally required to retain; if so, we will explain why.

If you are based in the European Union and believe we have not handled your data correctly, you may lodge a complaint with the supervisory authority of your country of residence. In Spain, that authority is the Spanish Data Protection Agency (www.aepd.es).

Children

We do not knowingly collect data directly from minors through this website. When a family case involves children, the relevant documentation is provided by the parent or legal guardian handling the application.

Changes to this policy

We may update this policy from time to time. The date of the most recent version appears at the top of this page.