IvarsTec

Privacy and data protection law for Spanish businesses

IvarsTec is a legal practice in Valencia, Spain, that advises companies and public bodies on privacy and data protection. The firm says it has worked for more than twenty years with organisations of every kind, from small businesses to large companies and public entities, helping them meet the rules and improve the way they handle personal information. Its advice is tailored to each client, because the firm says every organisation has a different set of activities and risks.

Data protection implementation

The core service turns the legal requirements into working practice inside an organisation. The firm describes an assessment of how personal data is collected, stored and used, followed by a plan of action that brings the business into line with the law. It says the aim is to earn the trust of a client's own customers, who can then rely on the way their data is treated.

Outsourced data protection officer

Some organisations are required to appoint a data protection officer, and others choose to. IvarsTec offers this role as an external service, so that a business can meet its obligation without hiring a full-time specialist. The firm says it advises on when the appointment is compulsory and on what the officer should do once appointed.

Website and online compliance

The firm adapts websites and online services to privacy law, including the consent and information notices that visitors see. Its site also points to an ethical reporting channel that complies with the EU whistleblowing directive, and to advice on the use of artificial intelligence in companies, with attention to legal certainty and control.

Information security and the ISO 27701 standard

IvarsTec supports clients who work towards ISO 27701, the international standard for privacy information management, which extends an existing information security system to cover personal data. The firm says this lets a business demonstrate that its privacy controls are managed in a systematic way.

Cybersecurity packages

Alongside legal advice, the firm sells cybersecurity packages in several tiers. Its range runs from a plan for a self-employed professional to plans for small and medium businesses, for larger companies, for teams that work remotely and for online shops. The packages are presented as a way for each kind of business to cover its most common risks without buying a bigger service than it needs.

Removing personal data from online sources

The firm also helps individuals and businesses remove personal data, images and links from the internet and from search results, including material from media outlets and official bulletins where it is possible to have it withdrawn. Its site describes this as a way to protect privacy online.

Training staff

The company says the human side of data protection matters a great deal. It runs training for staff so that people in an organisation understand how protocols should be applied and why they matter, and it treats that training as a way to lower risk across the business.

Who the firm works with

Clients include self-employed people, small firms and larger companies, as well as public bodies. The firm says its work is independent and close to its clients, and it offers a free first analysis to businesses that want to know where they stand. Its material refers to the Spanish data protection authority as the regulator to which complaints can be made.