Privacy policy
Last updated 8 August 2026.
This policy covers adoraip.com and the services provided through it.
Who is the controller?
Gergana Dimitrova, trading as Adora IP, is the controller of your personal data.
Contact: hello@adoraip.com. Postal address is in the legal notice.
No data protection officer is appointed. Adora IP is a small practice and does not carry out the large-scale monitoring or large-scale special-category processing that would make one mandatory under Article 37 of the GDPR.
What data is collected, and why?
| What we collect | When | Why | Legal basis | Kept for |
|---|---|---|---|---|
| Name, email, company, and what you type about your matter | You submit the enquiry form or email us | To answer you and assess whether we can act | Article 6(1)(b), steps at your request before a contract | 2 years from last contact if you do not instruct us |
| Client and matter details, including documents | You instruct us | To carry out the work | Article 6(1)(b), performance of the contract | 6 years after the matter closes, or longer where professional or tax rules require |
| Billing details, invoices | You instruct us | Accounting and tax | Article 6(1)(c), legal obligation | As required by Spanish tax law |
| The page you were on when you wrote to us, your browser string and IP address | You submit the enquiry form | To detect spam and abuse of the form | Article 6(1)(f), legitimate interest in keeping the form usable | 12 months |
| Your cookie choice | You answer the banner | To stop asking you on every page | Article 6(1)(c) and ePrivacy, strictly necessary | Until you change or clear it |
We also count page views, and that count contains no personal data. Our own server records the page, the referring domain and whether the screen is phone-sized, then adds one to a running total. No IP address is written down, no cookie or identifier is used, and individual visits cannot be told apart or reconstructed. Because nothing personal is stored and nothing is placed on your device, this falls outside both the GDPR and the ePrivacy consent requirement. The cookie policy explains it in full.
Nothing on this site is collected for advertising, profiling or automated decision-making. There is no automated decision-making with legal or similarly significant effects within the meaning of Article 22.
You do not have to give any of this. Not giving it means we cannot answer your enquiry or act for you.
Who else sees it?
We use these processors. Each is bound by a data processing agreement.
| Processor | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting this website | Frankfurt, Germany, eu-central-1 |
| Supabase | Storing enquiries submitted through the form | European Union region |
| Hostinger | European Union |
No personal data is transferred outside the European Economic Area. Every processor above operates in the EU, and booking a call runs through this site rather than a third-party scheduler.
We do not sell personal data and we do not share it for anyone else's marketing.
We may disclose information where we are required to by law, by a court, or by the rules of a professional body.
Confidentiality
Most of what clients tell us is covered by professional confidentiality as well as data protection law. Where the two differ, the stricter obligation applies.
What are your rights?
Under the GDPR you have the right to:
- Access your data and receive a copy. The first copy is free. We may charge a reasonable fee only for further copies, or where a request is manifestly unfounded or excessive.
- Rectification of anything inaccurate or incomplete.
- Erasure, where we have no continuing basis to hold it. Note that professional and tax retention rules can override this for client files.
- Restriction of processing in certain circumstances.
- Object to processing based on legitimate interests.
- Portability of data you gave us, where processing is based on consent or contract and is carried out automatically.
- Withdraw consent at any time, where consent is the basis. Withdrawing does not affect anything done before you withdrew.
To exercise any of these, email hello@adoraip.com. We respond within one month. That can be extended by two further months for complex requests, and we will tell you within the first month if it is.
Complaints
If you think we have handled your data badly, tell us first and we will try to put it right.
You can also complain to a supervisory authority. Adora IP is registered in Spain, so the lead authority is:
- Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid
You may also complain to the authority in the EU country where you live or work, or where you think the problem happened.
Security
Data is held on servers in the European Union, transmitted over HTTPS, and reachable only by Gergana Dimitrova and, where a matter requires it, the professional representatives instructed on your behalf.
Marketing
We do not run a mailing list. If that changes, it will be opt-in, and every message will carry a one-click unsubscribe.
Other sites
Pages here link to WIPO, EUIPO, UKIPO and other sites. Their privacy practices are their own.
Changes
Any change appears on this page and the date at the top moves. Where a change matters to you, we will say so rather than rely on you noticing.