Protecting data is not expensive, but
ignoring the law is.
Lawyers Specializing in Data Protection
We have encountered many clients who have had to assume penalties of thousands of euros for not adapting their activity to data protection regulations.

Why you should adapt your activity to the GDPR
Data Protection Data Protection
The risk of having a problem related to the processing of personal data may seem low, but if you have any incidence of this type, we can assure you that the economic impact is high.
Because the Law obliges you if you process personal data
See serviceIf you process personal data in any way, you should ask yourself whether you have established adequate measures for this in your activity.
Because it generates confidence
See serviceThere is a growing awareness of the importance of data protection compliance. Your customers will increasingly ask you for proof of compliance with these obligations.
Because you will gain peace of mind
See serviceAny disgruntled customer, a disgruntled ex-employee or a competitor could complain about your data protection shortcomings. What will you be able to argue in your defense? We can help you avoid such a situation.
Clients who have worked with us
The firm that takes care of your ideas
Bamboo Legal is a law firm specialized in Intellectual and Industrial Property that goes far beyond the registration of trademarks.
A coffee that can save you thousands of euros
Talk to an Expert
at Data Protection
Book your free consultation with a professional specialized in data protection. Leave your details and we will contact you.

Our team
Bamboo Legal is a law firm with specialists in data protection and digital law that speaks your language, without technicalities.

Javier Serrano Irurzun
Lawyer and API


Testimonials from
our customers
They already comply with data protectionFind out how we help companies like yours comply with data protection, told by themselves.
How can a Data Protection Lawyer
We help you to comply with all the obligations of the GDPR and the LOPDGDD in a simple, clear and practical way, to avoid fines and protect your reputation.
- Risk analysis and/or data protection audits.
- Drafting of informative clauses and privacy policies.
- Reports and protocols adapted to the GDPR.
- Internal trainings on privacy and GDPR.
- Consulting firm specializing in privacy and GDPR.
- Legal representation.
- Administrative and/or judicial channels.
- External service of Data Protection Delegate (DPD).
- Advice on when and how to obtain consent.
- Preparation of the Treatment Activities Register (RAT).
- Data protection contracts with employees and collaborators.
- Conducting Data Protection Impact Assessments (DPA).

Come and see us at our offices
We are 100% digital, but we offer you our offices if you wish.
Questions about data protection
These are the most frequently asked questions about data protection and how to avoid the risks derived from its laws.
You must take into account the General Data Protection Regulation (GDPR) and the Organic Law on Data Protection and guarantee of digital rights (LOPDgdd) as well as concordant rules and identify which personal data processing you carry out (customers, suppliers, contacts, employees, collaborators, video surveillance, etc.).
Remember that "processing personal data" is any operation you perform on information that can identify or make identifiable a natural person.
Do not forget the guiding principles of personal data processing: lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, retention, integrity and confidentiality, and proactive accountability.
It is essential that you provide the required information about the data controller, the data being processed, how and for what purpose it is processed, as well as the rights available to data subjects, among other things.
You must analyze the risks and security measures available to you in the processing of personal data.
You should assess the need for:
- Write a Treatment Activity Record (RAT)which is a document specifying the organizational and technical measures of your processing. It is mandatory in most cases.
- To have a Data Protection Delegate (DPD)The LOPDgdd, which will be mandatory only in certain cases in which a regular and systematic observation of data subjects is carried out on a large scale or a large scale processing of special categories of data or you carry out an activity listed in the LOPDgdd.
- Perform a Data Protection Impact Assessment (DPA)if you carry out processing operations involving a high risk to the rights and freedoms of natural persons or if a systematic and exhaustive evaluation of personal aspects is carried out.
Protocols must be established (security and management of security breaches, information and communication of processing to data subjects, exercise of rights, etc.).
The corresponding documents and contracts must also be drawn up with the parties involved in the processing (confidentiality contracts, data processing contracts, etc.) and any other document that may be required by regulation in each case.
Our lawyers can help you through the entire process of adapting your business to data protection legislation. Book a free consultation.
The consequences are not only fines (up to 20 million euros or 4% of your turnover), but also loss of customer confidence and damage to your reputation, which can be even more difficult to repair.
In case of inspection or complaint from a third party who considers their rights have been violated, the Spanish Data Protection Agency (AEPD) may initiate a sanctioning procedure and force you to change your practices immediately.
To avoid reaching that point, we recommend that you contact us to analyze the level of compliance with data protection regulations in the development of your business or professional activity. We will review your situation and create an action plan to comply with the regulations in a practical way.
Other intellectual property services
A set of specialized intellectual property services to protect your innovations and maximize your market potential.

Patents and trademarks
Everything to make your brand or invention exclusively yours. Feasibility reports, national, European and international patent and trademark registrations, trademark and patent surveillance...

Digital Law
We are experts in providing legal advice to all types of digital businesses. If you have an online business, we can help you avoid fines and penalties.

Trademark suspension
Has the SPTO suspended the registration of your trademark? We analyze the reason and prepare the necessary response or correction in order to overcome the suspension received.
Speak to an expert data protection lawyer in Madrid
Book a free appointment with a lawyer specialized in data protection in Madrid. We will advise you free of charge and without obligation on how to protect your creations.






