Privacy notice
Last updated: 30 July 2026.
This is an English translation provided for your convenience. The Spanish version is the binding text: if the two differ, the Spanish one prevails.
Who is responsible for processing your data
Humberto Franco Díaz de León, practising under the business name Franco & Asociados (hereinafter, "the Practice"), holder of Mexican professional licence number 6538816, is responsible for the use and protection of your personal data.
For all purposes of this notice, the Practice states:
- Address: Apartado de Correos 21001, 28080 Madrid, Spain.
- Contact email: contacto@francoyasociadoslegal.com.
Personal data we collect
Through the contact form on our website we collect only the data you provide voluntarily:
- Full name.
- Email address.
- Country of residence.
- Subject of the inquiry.
- The description of the case you choose to include in your message.
If, in the course of the professional relationship, you send us additional documents (certificates, identification or powers of attorney, for example), that data will be processed with the same diligence and for the purposes described in this notice.
We do not collect sensitive data
We do not request sensitive personal data through the form. Please do not include data of that nature in the message field (health information, ethnic origin, religious beliefs or political opinions, for example) unless it is strictly necessary for the matter you are putting to us, in which case sending it will be understood as your express consent to process it for the purpose of handling your case.
Purposes of the processing
Your data is used for the following purposes, all necessary in order to deal with your request:
- To communicate with you and answer your inquiry in writing.
- To assess whether the matter you put to us is viable.
- Where applicable, to prepare and send you the quotation, the professional services agreement and the associated documents.
- To provide the professional services engaged and to follow up your file.
- To comply with the legal, tax and accounting obligations arising from the professional relationship.
We do not use your data for advertising purposes and we do not add it to marketing lists.
Legal basis for the processing
In Mexico, the processing is based on your consent and on the need to take pre-contractual steps and perform the professional services relationship, in accordance with the LFPDPPP. For persons located in the European Union, the lawful basis is taking pre-contractual steps at the data subject's request and performance of the contract (article 6.1.b of the GDPR), your consent (article 6.1.a) and compliance with legal obligations (article 6.1.c).
Processors and transfers
The following providers are involved in operating the website and handling your inquiry. They act as processors and handle your data only on our instructions:
- Web3Forms: processes the submission of the form and forwards it to our email address. This provider is located outside Mexico and the European Union, so sending the form involves an international transfer of data, limited to what is necessary for your message to reach us.
- Google Fonts (Google LLC): when the site's typefaces load, your browser communicates your IP address to Google's servers.
- Cloudflare: hosts the page and manages its security and availability.
Apart from these cases, we will not disclose or transfer your data to third parties without your consent, save for the exceptions provided by law (a request from a competent authority, for example).
Retention period
We will keep your data for as long as necessary to deal with your inquiry and, if you engage our services, for the duration of the professional relationship and the periods required by the applicable legal, tax and professional liability obligations. Once those periods have elapsed, your data will be deleted or blocked in accordance with the regulations.
Your rights
If you reside in Mexico: under the Federal Law on the Protection of Personal Data Held by Private Parties, you have the right to access your data, rectify it where it is inaccurate, cancel it where you consider it is no longer required, and object to its processing (known as ARCO rights), as well as to withdraw the consent you have given.
If you are in the European Union: under the General Data Protection Regulation (GDPR), you also have the rights of access, rectification, erasure, objection, restriction of processing and data portability.
If you are elsewhere, including the United States and the United Kingdom: we will honour the same rights of access, rectification, erasure and objection, on request, regardless of where you reside.
To exercise any of these rights, write to us at contacto@francoyasociadoslegal.com stating your name, the right you wish to exercise and a clear description of the data concerned. We will reply within the periods set by the applicable regulations.
Withdrawal of consent
You may withdraw the consent you have given us at any time, through the same contact channel. Withdrawal will not have retroactive effect and will not affect processing already necessary to meet outstanding legal or contractual obligations.
Cookies and external resources
This page does not use advertising or tracking cookies for profiling purposes. It only loads the Fraunces, Jost and Marcellus typefaces from Google Fonts, which may involve a technical connection to Google's servers when the page opens.
Supervisory authorities
If you consider that your right to data protection has been infringed, you may turn to:
- In Mexico, the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno), the authority responsible for personal data protection under the Federal Law on the Protection of Personal Data Held by Private Parties (Official Gazette of the Federation, 20 March 2025).
- In Spain, the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD).
- If you reside in another country, you may also contact your local data protection authority.
Changes to this notice
We may update this notice because of changes in the law, in our services or in our privacy practices. We will publish the current version on our website and state the date it was last updated, which appears at the top of this document.