Digital Rights Lawyer in Spain

Online reputation, algorithmic decisions, digital identity: does your company respect people’s rights?

We advise tech companies on respecting the digital rights of users, customers and employees. From algorithmic governance to online reputation, including digital identity and transparency in automated decisions.

Request a free initial assessment. We’ll review your processes, identify digital rights risks and propose an action plan.

No commitment · We reply the same day

YEARS OF EXPERIENCE

+ 0

CLIENTS ADVISED

+ 0

PROJECTS COMPLETED

+ 0

PRACTICE AREAS

+ 0

WHAT SETS US APART

Where Technology Affects People, That's Where We Are

We reply the same day

DIGITAL RIGHTS SERVICES

What Does Your Company Need?

Legal advice on digital rights, algorithmic governance and technological transparency for companies that want to operate ethically and lawfully.

Content, reputation and digital communication

We protect the online reputation of companies and executives: the right to be forgotten, removal of defamatory content, complaints to platforms and court proceedings for infringement of honour, privacy and image rights in the digital environment.

Algorithmic governance and transparency

We advise on the transparency of automated decisions under the GDPR and the AI Act: the right to an explanation, mechanisms to challenge algorithmic decisions, bias audits and the design of AI systems aligned with European ethical standards.

Digital identity, privacy and verification

We advise on digital identity verification, digital onboarding (KYC), advanced and qualified electronic signatures and compliance with the eIDAS Regulation. We assess the privacy risks of biometric identification and facial recognition systems.

Employees' digital rights

We advise companies on the digital rights of employees under the LOPDGDD: the right to digital disconnection, privacy with regard to video surveillance and geolocation, use of digital devices at work and monitoring of communications.

Technology ethics and digital ESG compliance

We design technology ethics and digital ESG compliance frameworks for companies that want to go beyond minimum compliance: responsible AI use policies, algorithmic transparency, digital sustainability and reporting on the social impact of technology.

SECTORS AND COMPANIES

Does Your Technology Affect People?

We advise companies in the following sectors on digital rights.

SaaS and Platforms

Large-scale processing of user data

Fintech

Financial data and credit scoring

Digital Health

Clinical and patient data

eCommerce and Marketplaces

Purchase and behavioural data

Startups and Scaleups

Scaling with data from day one

PROCESS AND TIMELINES

How We Work

From the first call to compliance, in 4 steps

1 –

Initial assessment

We analyse your company: which automated decisions you make, how you manage the digital identity of users and employees, and what digital rights risks exist. Free of charge and with no commitment.

2 –

Risk assessment

We identify specific risks: lack of algorithmic transparency, no mechanisms to challenge decisions, employee monitoring without a legal basis and non-compliant identity verification processes.

3 –

Compliance plan

We design the policies you need: algorithmic governance, digital disconnection protocol, workplace video surveillance policy, AI ethics framework and transparency mechanisms for users.

4 –

Ongoing support

We monitor compliance on an ongoing basis and update the policies whenever your algorithms, processes or digital rights regulations change.

REVIEWS AND RATINGS

What Our Clients Say

Reviews from real clients and companies about our digital rights and online governance services.

Marta combines impeccable professionalism with a remarkable ability to explain complex legal concepts in simple terms...

Impeccable personal attention, availability and human touch. Broad knowledge and experience in the sector. Outstanding at solving problems. 100% recommended...

I have no words to express my sincere gratitude. Marta is a very dedicated and empathetic professional. She also works fast...

Thank you so much, Marta, for your invaluable advice. Without your knowledge of NFT technology in the art market, a new and promising field but one exposed to a lot of fraud, I would have got myself into serious trouble. Marta …

REGULATORY FRAMEWORK

Digital Rights in Spain and the EU

Digital rights in Spain are mainly governed by Title X of the LOPDGDD (Organic Law 3/2018), which recognises rights such as net neutrality, universal access, digital security, digital education, the right to digital disconnection at work and the right to be forgotten.

At EU level, the GDPR recognises the right not to be subject to decisions based solely on automated processing (Article 22), the AI Act sets transparency obligations for high-risk AI systems, and the DSA imposes algorithmic transparency obligations on online platforms.

The Charter of Digital Rights adopted by the Spanish Government in 2021 is not legally binding, but it sets the reference framework for protecting people’s rights in the digital environment and anticipates future rules on neurodata, digital identity and algorithmic ethics.

FAQ

Frequently Asked Questions on Digital Rights

What are digital rights?

They are fundamental rights applied to the digital environment: online privacy, freedom of expression on the internet, the right to be forgotten, digital disconnection at work, algorithmic transparency, digital identity and access to technology. In Spain they are set out in the LOPDGDD, the GDPR and complementary EU legislation.

What is the right to digital disconnection?

It is the employee’s right not to respond to work communications outside working hours. It is regulated in Article 88 of the LOPDGDD. Companies must draw up an internal digital disconnection policy, after consulting workers’ representatives, setting out how this right is exercised.

Can my company make automated decisions about people?

The GDPR prohibits decisions based solely on automated processing that produce legal effects or similarly significantly affect the person, unless there is explicit consent, the decision is necessary for a contract or it is authorised by law (Article 22). In all cases, the data subject has the right to obtain human intervention, express their point of view and contest the decision.

What are my company's obligations if it uses video surveillance on employees?

It must inform employees and union representatives in advance, display information signs following the AEPD template, limit recording to work areas (never changing rooms, toilets or rest areas), justify necessity and proportionality, delete the recordings within one month at most, unless they must be kept as evidence, and document the whole process in the record of processing activities.

What is algorithmic governance?

It is the set of policies, procedures and controls a company puts in place to manage ethically and lawfully the use of algorithms that make or support decisions affecting people. It includes transparency about decision criteria, mechanisms to challenge decisions, bias audits and human oversight.

Can a user ask for information about them to be removed from the internet?

Yes, through the right to erasure (Article 17 GDPR) and the right to be forgotten in search engines (Article 93 LOPDGDD). The controller must assess whether the request is justified and delete the information unless another right or legitimate interest prevails. If the controller refuses, the user can file a complaint with the AEPD.

REQUEST YOUR ASSESSMENT

Request a free initial assessment and receive a review of the digital rights risks in your company, the gaps detected and a clear action plan.