Go to home page
# Privacy Policy
**Last updated: 10 June 2026**
MOBA LAW SLP respects your privacy and processes your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
## 1. Data controller
- **Controller:** MOBA LAW SLP
- **Tax ID (NIF):** B22973085
- **Address:** Carretera de Rubí nº 40-50, planta 3, puerta 7, Sant Cugat del Vallés (08174), Barcelona, Spain
- **Contact / Data Protection contact:** hola@holalegal.ai
## 2. Data we process
- Identification and contact data (name, email, phone).
- Data provided in the assessment form: nationality, residence, family situation, economic activity, income, assets and holdings, immigration and tax situation, and any other information you provide.
- AI assistant usage and browsing data.
- Billing data. Card or payment-method details are processed directly by the payment gateway and are not stored by MOBA LAW SLP.
## 3. Purposes and legal basis
- **Providing the contracted service** (generating the report, granting access to the AI assistant and, where applicable, handling the professional consultation): performance of the contract.
- **Payment and invoicing management:** performance of the contract and compliance with legal obligations.
- **Handling enquiries and service communications:** performance of the contract and legitimate interest.
- **Marketing communications** (if any): your consent, which may be withdrawn at any time.
## 4. Retention
We keep your data for as long as the contractual relationship lasts and, thereafter, for the periods required by law (tax, commercial and professional-conduct obligations). Data is then blocked and deleted.
## 5. Recipients and processors
To provide the service we use providers acting as data processors, including:
- **Artificial intelligence** providers that process the form content to generate the report and the assistant's responses.
- **Hosting** and infrastructure provider.
- **Payment gateway** to process charges.
We do not share your data with third parties except where legally required.
## 6. International transfers
Some technology providers (for example, the artificial intelligence services) may be located outside the European Economic Area, including in the USA. In such cases, transfers are carried out with the appropriate safeguards provided for in the GDPR (the European Commission's Standard Contractual Clauses or applicable adequacy frameworks).
## 7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to hola@holalegal.ai, proving your identity. If you believe your rights have not been upheld, you may lodge a complaint with the Spanish Data Protection Agency (**www.aepd.es**).
## 8. Security
MOBA LAW SLP applies appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration.