Lola Carranza Sánchez

HIGHER ACADEMIC QUALIFICATIONS

Law Degree. University of Seville.

Master’s Degree in Human Resources Management from the Andalusian Business School.

For eighteen years she developed her professional career, as a senior lawyer, in the British Telecom group, which she joined after the latter absorbed Arrakis Servicios y Comunicaciones, a company in which Lola held the position of head of the legal department.

Until joining MONTERO ARAMBURU ABOGADOS, Lola has advised various technology-based companies on regulatory compliance, digital law and technological innovation. Likewise, as an external partner of a large leading cybersecurity consultancy, she has carried out regulatory adaptations for entities in different sectors of activity.

She is a data protection delegate in public law corporations and educational centres and collaborates with associations in the ICT sector.

Member of the Andalucía Digital Experts Committee. AECOTEC, cybercooperator at INCIBE (National Institute of Cybersecurity) and member of the Mentoring Club of the University of Seville (part of the Aurea US’Program).

CURRENT PROFESSIONAL EXPERIENCE

Specialised in legal advice in the following areas, attending to the core business and analysing the entity’s risks:

• DPO-DPD. Responsible for creating a culture of data protection in the organisation, through the creation/drafting of a regulatory body and advice and establishment of processes and technical and organisational measures in compliance with RGPD-LOPDGDD. Contact with interested parties and supervisory authorities.
• Data protection. Adaptation and compliance with RGPD-LOPDGDD. Drafting of informative clauses, processing assignment agreements, recording of processing activities, data life cycle, risk assessments, obtaining consent, etc.
• Drafting and review of all types of agreements with corporate clients and negotiation of contractual conditions. Review of RFPs, customer RFQs, MoUs, NDAs, service contracts and impact analysis.
• Drafting and review of contracts with suppliers, drafting of GTCs, service level agreements (SLAs).
• Public tenders. Study of tender documents and preparation of required documentation.
• Launch of data and ITS products and services, drafting the marketing conditions, in accordance with the regulatory framework.
• Responding to court injunctions and customer complaints. Drafting of appeals or dispute resolution procedures before SETID, CNMC, OMIC, etc.
• Regulatory compliance. Implementation of the regulations specific to the business activity and drafting of Legal Briefing or reports on the legal aspects of the entity’s core business.
• Drafting and implementation of security policies, technological use of business technology tools or BYOD programmes.
• Intellectual property. Protection of technological assets. Drafting of contractual clauses, escrow and registration contracts.
• Entrepreneurship, start-ups and investments. Advice to investors or Venture Capital companies on Smart or Dumb money models. Advice, accompaniment and legal solutions.

TEACHING EXPERIENCE

In the field of teaching, she is a lecturer of “digital compliance” in the Master’s Degree in Digital Business and in the LegalTech, Digital Law and Legal Innovation Diploma, both at the Universidad Loyola de Andalucia; she is also a trainer in the field of data protection in entities of different private sectors and public administrations, where she has carried out adaptations and implementations of the RGPD-LOPDGDDD.

PUBLICATIONS

She is co-author of the factbook on Data Protection published by Aranzadi. Writer of the chapter: “La protección de datos en el sector de las telecomunicaciones” (2003), author of several articles published in magazines of the sector ICT and Social Networks and regular speaker at courses and seminars related to the ICT business sector and Data Protection. Member of OdiseIA.