In Spain, beyond the European GDPR, the LOPDGDD applies. For anyone doing direct marketing or buying leads, knowing its basics avoids trouble. (This is not legal advice: consult your DPO for your case.)
What the LOPDGDD is
It is the Spanish law that complements and develops the GDPR. Among other things, it regulates commercial communications and data processing for marketing purposes.
What it allows in direct marketing
- Processing data with a valid lawful basis (consent or legitimate interest, depending on the case).
- Sending commercial communications while respecting the right to object.
- Using data from accessible sources with due safeguards.
What it always requires
- Inform the data subject who processes their data and why.
- Allow opt-out easily in every communication.
- Respect the rights of access, rectification and erasure.
- Document the lawful basis.
That is why the lead source matters so much: buying from a provider that works with traceability and compliance from the source —like the infrastructure of Funneld and Data Layer— keeps you on the right side. See also buying leads and GDPR.
◧
Recommended resource
Data Layer — European Data as a Service
Turns scattered data into dashboards, reports, APIs and AI, with no infrastructure to manage. Processing in Europe and GDPR by design.
Visit datalayer.es →Key takeaways
- The LOPDGDD complements the GDPR in Spain.
- It requires a lawful basis, information and an opt-out.
- Buy from providers with traceability and source compliance.
Direct marketing, done right.
Leads with traceability and compliance from the source. Talk to our team.