Data protection
Privacy policy
Who processes your data, for what purpose and on what legal basis, for how long, and how to exercise your rights.
Last updated: 7 September 2026
1. Data controller
- Controller
- Memory Pulse, S.L. (trade name: NIVELA)
- Tax ID (NIF / CIF)
- B21781067
- Registered address
- Calle Don Bernardino Correa Viera, 1A, 1ª planta, 35002 Las Palmas de Gran Canaria (Las Palmas), Spain
- Contact email
- contacto@nivelalegal.com
- Telephone
- +34 684 742 105
You may write to the address above about any matter concerning the processing of your personal data.
2. What data we process and where it comes from
We process only the data you give us voluntarily. We do not obtain data from external sources and we do not buy databases.
- Contact form: full name, telephone, email address, postcode (optional), preferred contact channel and the content of your message, if you write one.
- Guided assessment: your answers to the questionnaire and, if you decide to have us review your case, full name, telephone, email address, postcode and preferred contact channel.
- Direct communications: whatever you include in the email, the telephone call or the WhatsApp message you send us.
- Technical data: the IP address and the date of submission are recorded alongside the message, as a safeguard against automated submissions.
WhatsApp. If you choose this channel, the messaging service is provided by WhatsApp Ireland Limited under its own terms and privacy policy, which are outside this website. If you would rather no third party took part in the communication, use the form, email or the telephone.
Special categories of data. Please do not include health data, political opinions, trade union membership, sexual orientation, biometric data or information relating to criminal offences or convictions. Where the matter requires it, we will collect that information through an appropriate channel and on the corresponding legal basis.
Nor do we need, at this stage, account numbers, passwords or documents. If documentation is needed later in order to study your case, we will ask you for it through an appropriate channel.
3. The answers you give in the guided assessment
The guided assessment asks about your financial situation: what debts you have, who you owe, how you are managing the payments, whether you own any assets and whether there is any seizure or claim against you. This is personal data revealing financial difficulty, and we treat it with the discretion it deserves.
- Before you provide your contact details, the answers are stored in your own browser only, so that you do not lose your progress if you leave the page and come back. They are not sent to any server and we cannot see them. They delete themselves after seven days, and also when you press “Start again” or complete the submission.
- Only if you decide to have us review your case and provide your contact details are the answers sent to us along with them, so that we can study your situation.
- Your answers never travel in the browser address and are not disclosed to advertising or measurement platforms.
4. Purposes, legal bases and retention
| Purpose | Legal basis (art. 6 GDPR) | Retention |
|---|---|---|
| To deal with your enquiry and reply to you | Consent of the data subject (art. 6(1)(a)) and steps taken at the request of the data subject prior to entering into a contract (art. 6(1)(b)) | Up to 12 months from the last contact, if no engagement is entered into |
| To review the situation described in the guided assessment and explain which options are worth considering | Consent of the data subject (art. 6(1)(a)) and pre-contractual steps (art. 6(1)(b)) | Up to 12 months from the last contact, if no engagement is entered into |
| Provision of the professional service engaged | Performance of a contract (art. 6(1)(b)) | The duration of the relationship and, afterwards, the applicable limitation periods for claims and document retention periods |
| Compliance with tax, accounting and anti-money-laundering obligations | Legal obligation (art. 6(1)(c)) | The periods set by the applicable rules, with a minimum of 6 years and up to 10 years in anti-money-laundering matters |
| Website security and control of automated submissions | Legitimate interest in the security of our systems (art. 6(1)(f)) | 30 days maximum |
We do not use your data to send you marketing communications about other services without your prior consent.
5. Automated decisions and profiling
We do not take automated decisions producing legal effects concerning you or similarly significantly affecting you, within the meaning of article 22 of the General Data Protection Regulation.
The orientation shown by the guided assessment at the end of the questionnaire is informative text that depends on the answers given. It does not decide anything about your case, it does not classify you as eligible or ineligible for any procedure, and it produces no legal effect. Every assessment is carried out by a member of the team, with the documents in front of them.
Nor do we build profiles for advertising purposes or pass your data to advertising platforms.
6. Recipients and processors
We do not disclose your data to third parties, other than where required by law. The providers needed in order to deliver the service act as processors, under a contract complying with article 28 of the General Data Protection Regulation:
- Hosting and email provider: Hostinger International Ltd., with servers in the European Union.
- The law firm and the registered professionals taking part in your matter, once you formalise the engagement.
- Other professionals required by the procedure, such as a procurador (court agent), where necessary and after informing you.
If we adopt a third-party client management tool in the future, it will be recorded in this policy before we use it.
7. International transfers
As a general rule there are no international transfers of data: hosting and email are in the European Union.
The exception is WhatsApp, if you choose that channel. The service is provided by WhatsApp Ireland Limited, part of the Meta group, which may process data outside the European Economic Area under the safeguards provided for in Chapter V of the Regulation. Using that channel is your choice, and you have alternatives on equal terms.
8. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw the consent you have given, without this affecting the lawfulness of processing carried out before its withdrawal.
To exercise them, write to contacto@nivelalegal.com or to the postal address given above, identifying yourself and stating which right you wish to exercise. We will reply within one month, extendable in accordance with the Regulation where the request is complex.
If you consider that the processing does not comply with the rules, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es), calle Jorge Juan 6, 28001 Madrid, Spain.
9. Information security
We apply appropriate technical and organisational measures to protect your data: an encrypted connection across the whole site, restricted access to the mailboxes that receive the forms, and keeping the data requested at each stage to a minimum.
Please do not send full account numbers, passwords or copies of identity documents through the form or by email. If such documentation is needed, we will tell you how to send it securely.
10. Minors
This website and the services it offers are aimed at adults. We do not knowingly collect data from minors. If we find that a minor’s data has been provided, we will delete it.
11. Changes to this policy
This policy may be updated to reflect changes in the law or in the service itself. The date of the last update appears at the top of the page. Substantial changes will be communicated by an appropriate means to those who have a current relationship with us.