1. Purpose of this Policy

The website https://scala.law/ or https://www.scala.law/ (the "Website") is owned by SCALA Law Firm, S.L.P. ("SCALA"), tax identification number (NIF) B-93778363, with its registered office at calle Don Ramón de la Cruz, 38, 28001 Madrid, and email address info@scala.law.

The Website uses cookies and similar technologies to enable its operation and, where applicable, to remember certain preferences and obtain statistical information on its use. This Policy provides information on the technologies used, their purposes and the options for accepting, rejecting or withdrawing consent where required.

2. What cookies are

Cookies are small files that are downloaded and stored on the user's device (computer, tablet, mobile phone or other device) when accessing a website and that allow information relating to their browsing to be stored and retrieved. In certain cases, they make it possible to recognise the device or browser on subsequent visits. The information processed may include identifiers, IP address, date and time of access, pages visited, selected preferences and other browsing data, depending on the technology used. Where such information makes it possible to identify a natural person directly or indirectly, it will be considered personal data.

For the purposes of this Policy, references to cookies also include, where applicable, other technologies for storing or accessing information on the user's device that have equivalent purposes.

3. Types of cookies used by the Website

Technical or strictly necessary cookies. They enable essential functions of the Website, its security and, where applicable, remembering the choice made regarding cookies. They are exempt from the consent provided for in Article 22.2 of Spanish Law 34/2002 only where they meet the legal requirements for the exemption.

Preference or personalisation cookies. They allow the user's options to be remembered. They may be exempt from consent where they respond to an express choice by the user and are used exclusively for that purpose; in all other cases, consent will be requested where required.

Analytics or measurement cookies. They allow statistics to be compiled on the use and performance of the Website. Where no applicable legal exemption exists, they will remain deactivated until the user gives their consent.

4. First-party and third-party cookies

Cookies are first-party cookies when they are sent to the user's device from a domain managed by SCALA. They are third-party cookies when they are sent or managed from a domain or service controlled by another entity.

Third-party cookies, where they exist, will be identified in the inventory in the following section, together with their provider and purpose.

5. List of cookies used

The Website uses Google Analytics 4, a web analytics tool provided by Google, which makes it possible to understand how users interact with the Website and to obtain statistics on visits and pages viewed. The service provider is Google Ireland Limited. Its provision involves the processing of data by Google LLC in the United States, an entity certified under the EU-U.S. Data Privacy Framework. Transfers covered by that certification are based on the corresponding adequacy decision of the European Commission.

Further information: https://policies.google.com/privacy/frameworks?hl=en

The following table identifies the cookies and similar technologies used on the Website, indicating their name, provider, purpose, category, duration and whether they are first-party or third-party.

CookieProviderPurposeCategoryDurationOwnership
scala-consentSCALA Law Firm, S.L.P.To store the user's choice regarding cookies and its date (browser local storage)Technical or necessary12 monthsFirst-party
_gaGoogle Ireland LimitedTo distinguish unique users by means of a random identifierAnalytics or measurement2 years*Third-party
_ga_ENKWVKMXBRGoogle Ireland LimitedTo maintain session state and count visits and page viewsAnalytics or measurement2 years*Third-party

* Google Analytics 4 cookies have a duration of 2 years. The retention period for user and event data to which the Google Analytics 4 retention settings apply is 14 months.

6. Rejection and withdrawal of consent

Cookies and similar technologies subject to consent will remain deactivated until the User expresses their acceptance through an affirmative action. The User may accept, reject or configure their use through the mechanism provided on the Website. The options to accept and reject will be offered at the same level and with equivalent visibility. Silence, inactivity or merely continuing to browse do not constitute consent.

The User may change their preferences or withdraw consent at any time through the "Cookie settings" tool, which is permanently accessible from the Website. Withdrawing consent will be as easy as giving it, without affecting the lawfulness of the processing carried out beforehand.

7. Deleting cookies

The User may also block, disable or delete cookies through their browser settings. Deleting cookies may result in the loss of saved preferences, including those relating to consent, and may affect the operation of certain features of the Website. Deletion from the browser does not necessarily replace the withdrawal of consent through the mechanism described in the previous section.

Instructions for the main browsers:

8. Third-party cookies, international transfers and data protection

Where the use of third-party cookies involves transfers of personal data outside the European Economic Area, the recipients or countries concerned and the applicable mechanisms under Chapter V of Regulation (EU) 2016/679 will be identified, where appropriate, including, as the case may be, an adequacy decision or the appropriate safeguards provided for by law.

Where the use of cookies involves the processing of personal data, Users may consult the information on the controller, the legal bases, the recipients and the exercise of their rights in the Website's Privacy Policy, without prejudice to the specific information contained in this Policy.

9. Retention

The duration of each cookie is indicated in the cookie table. Session cookies are deleted at the end of the browsing session, while persistent cookies remain for the period defined for each of them, unless the user deletes them earlier.

The retention of personal data obtained through cookies, where applicable, will be in line with the purposes and periods indicated in the Privacy Policy and with the specific information of the providers identified.

10. Updating this Policy

SCALA may amend this Cookie Policy when the technologies used on the Website change, providers are added or removed, the configuration of the consent manager is modified or it is necessary to adapt to regulatory changes or to the criteria of the competent authorities.

The version in force will be the one published on the Website.

Last updated: October 2026.