Privacy Policy

We are committed to the protection of privacy and personal data of all of our clients and other contacts derived from the use of our web page or within the context of professional meetings, reception of applications, and so on.

We hereby inform you as data subject on the collection and use by HIERRO ESTUDIO LEGAL, S.L.P., as the controller, that your personal data is treated in accordance with applicable laws and, in particular, with the new EU General Data Protection Regulation (GDPR) 2016/679 from 27 April 2016 that entered into force on 25 May 2018.

Collection of your personal data

The collection of personal data by HIERRO ESTUDIO LEGAL, S.L.P. is ruled by the principles of data minimisation:  we only collect personal data that is relevant and limited to what is necessary for relation to the purposes for which they are processed.

Legal basis and purpose for processing your personal data

Processing of your personal data only takes place in conformity with applicable regulations and, in particular:

  • whenever it is necessary to determine disputes referred to any of us as an arbitrator or to avoid conflicts of interest to disputes that may be referred to us
  • whenever it is necessary to perform or enter into a contract;
  • whenever you have given us your express and unambiguous consent (for marketing communications, for instance);
  • whenever it is necessary for us to comply with legal obligations (e.g., compliance with money laundering regulations, etc.);

Personal data is collected and processed for specific, explicit and legitimate purposes. Depending on the case, your personal data may be processed for the purpose of:

  • determining the dispute referred to any of us as an arbitrator
  • communicating with you within the context of matters we work on
  • receiving or subscribing communications, newsletters or invitations;
  • considering your curriculum vitae to be part of our team;
  • participating in surveys on our services to improve client or user experience.

Security of your personal data

To preserve the security of your personal data, only authorised members of the team can have access to it.  We undertake out  best efforts and diligence to preserve the confidentiality and integrity of your personal data, prevent data security breaches, deliberated manipulations, alterations and loss of data and non-authorised accesses and have appropriate technical and organisational measures to ensure that personal data is processed and stored adequately.

To the extent required for the purposes outlined above, we may share your personal data with:

  • Co-arbitrators (if any)
  • The Tribunal Secretary (if any)
  • The appointing/administering arbitral institution (if any)
  • A Court, should the arbitration result in legal proceedings to which we are a party or in which we are a witness
  • Legal advisers in the event of a dispute or other legal matter
  • Law enforcement official, government authorities or other third parties in order to meet our legal obligations
  • Any other party where we ask you and you consent to the sharing

Countries located outside the EEA may not have data protection laws and regulations comparable to the ones applicable in the EU. To the extent that no statutory level of security comparable to the European data protection laws exists in such countries, we will adopt appropriate measures to ensure that your personal data will be adequately protected in these countries.

Your rights

Subject to the limits under applicable regulations, you are entitled to exercise the following rights on your personal data:

  • Right of access and information (art. 15 GDPR): in particular, you have the right to request from us information on the purposes of the processing of your personal data, the specific categories of data concerned, the recipients of your personal data, the source of your personal data if they were not collected from you, the envisaged storage period and the existence of any automated decision-making.
  • Right to rectification (art. 16 GDPR): obtain the rectification of your personal data that are inaccurate as well as, in view of the purposes for processing, the right to have incomplete personal date completed.
  • Right to erasure (art. 17 GDPR): obtain the erasure of your personal data provided that the processing is not required to comply with legal obligations or necessary for the establishment, exercise or defense of legal claims or due for reasons of public interest.
  • Right to restriction of processing (art. 18 GDPR): obtain a restriction of processing of your personal data where (i) you have informed us on the inaccuracy of your personal data and for the period necessary to verify the accuracy of said data, (ii) the processing of your data is not in accordance with applicable regulations and you decide to request appropriate restrictions instead of erasure; or (iii) you have objected to a specific processing of your personal data pursuant to art. 21 GDPR but there are legitimate grounds for us to continue other processing and verification thereunder is pending.
  • Right to portability (art. 20 GDPR): within the limits established by applicable regulations, when processing is based on your consent or on a contract, this right allows you to receive the personal data you have made available to us in a structured, commonly used and machine-readable format and to transmit this data to another data controller without hindrance from us. When technically feasible, provided you so request, we shall transmit directly your personal data to another controller.
  • Right to withdraw your consent (art. 7.3 GDPR): where the processing of your personal data is based on your consent, you will be entitled to withdraw your consent at any time.
  • Right to lodge a complaint (art. 77 GDPR): if, despite our efforts to preserve the security and confidentiality of your personal data, you consider that your rights have been infringed, you are entitled to lodge a complaint with a supervisory or control authority, in particular, the authority of your habitual residence, place of work or place of the alleged infringement. In any event, a list of supervisory and control authorities should be made available by the European Commission in its website (

Exercise of your rights

For exercising your rights as well as for any questions and clarifications that you might need on this Policy, you may contact us at

Cookie Policy Notice:

This website uses cookies to improve your experience. We’ll assume you’re ok with this, but you can opt-out if you wish.

We do not collect personally identifiable information about you – such as your name, e-mail address, etc. – unless you email us directly.

We do automatically collect certain non-personally identifiable information when you visit our site – such as the type of browser you are using, etc – through so-called “cookies” on our website WWW.HIERROARBITRATION.COM. We use the information to analyze site usage which allows us to improve the design and content of our site.

By using our website, you accept the use of cookies in accordance with this Cookie Notice. If you do not accept the use of these cookies please disable them following the instructions in this Cookie Notice, for instance by visiting the Cookie Consent Wizard or changing your browser settings so that cookies from this website cannot be placed on your computer or mobile device.

What is a cookie?

Cookies are text files containing small amounts of information which are downloaded to your computer or mobile device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognizes that cookie.

Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improving the user experience. They can also help to ensure that adverts you see online are more relevant to you and your interests.

What cookies do we use?

These cookies collect information about how visitors use a website, for instance, which pages visitors go to most often, and if they get error messages from web pages.

How to control and delete cookies through the browser

The ability to enable, disable, or delete Analytics Cookies can also be completed at the browser level. In order to do this, follow the instructions provided by your browser (usually located within the “Help”, “Tools” or “Edit” facility). Click here to know more:

Our commitment to security

We employ security measures to prevent unauthorized access to information that we collect online.

How to contact us

If you have any questions or concerns about our privacy policy or its implementation, you may contact us at