IP & Data Protection — Las Palmas de Gran Canaria

Protecting what your business has built, and the data it holds

Cautio Legal helps businesses secure their intellectual property and meet their data protection obligations under Spanish and EU law — before something goes wrong, and if it already has. Free initial consultation, no obligation.

Free consultation Call — +34 684 742 105

Seguir en español

Two things people usually discover too late

A breach must be reported to the AEPD within 72 hours of discovery
GDPR can apply to you even if your business isn't based in the EU
Software and brand rights often sit with a developer or ex-partner by default
A processor agreement missing at the start is expensive to fix retroactively

The first: the software or brand a business was built on isn't actually registered to the company — it's still with the external developer, or the partner who left. The second: the data processing that happens every day has no documented legal basis and no processor agreement behind it.

We work both. Intellectual and industrial property — trademark registration, assignment of rights over software and content, development contracts. And data protection — GDPR and Spanish LOPDGDD compliance, processor agreements, impact assessments, and breach response.

When a security breach happens, the deadline to notify the Spanish Data Protection Agency is 72 hours. What gets decided in that window shapes much of any penalty that follows.

What we handle

Not an exhaustive list — if your situation isn't here, contact us and we'll tell you plainly whether we can help.

GDPR and LOPDGDD compliance

Bringing data processing into compliance, with a proper record of processing activities.

Processor agreements

Contracts with any third party that processes data on your behalf, and international transfer safeguards.

Data breach response

72-hour notification to the AEPD and a response plan when a breach happens.

AEPD inspections and sanctions

Responding to a sanctions procedure or inspection from the Spanish Data Protection Agency.

Trademark registration

Registering and defending trademarks and trade names.

Software and content rights

Assignment of rights over software and content, and development contracts that actually assign what they're meant to.

How we work with clients abroad

Video-call consultations

You don't need to be on the island, or even in Spain, for the first consultation or for most of the process.

One lawyer, throughout

The person you speak to on day one stays responsible for your case — you are not passed between people.

Explained in plain English

What's happening, what your options are, and what it will cost, confirmed in writing before we begin.

Common questions

Does GDPR apply to my business if I'm not based in the EU?

Often yes — if you offer goods or services to people in the EU, or monitor their behaviour, GDPR can apply regardless of where your business is established. We'll confirm whether it applies to you specifically.

We had a data breach — what's the deadline to report it?

72 hours to notify the Spanish Data Protection Agency (AEPD) from when you become aware of it, in most cases. What you decide in that window shapes much of any penalty that follows — contact us immediately if this applies to you.

Does my company actually own the software or brand it was built on?

Not always — it's common to discover that rights sit with an external developer or a former partner rather than the company itself. We can review and, where needed, formally assign those rights.

How much does this cost?

Fees are agreed in writing before we start, once we understand the scope of your case. The first consultation is free and without obligation.

Is what I tell you confidential?

Yes, it is protected by professional secrecy under Spanish law. In this first message, avoid sending sensitive documents — we'll tell you the secure way to share them once we're in contact.