Datadata-law#40F2FE#0A7C8A

What can you safely share on the phonewhen a company calls to sell you something?

In five minutes you will know which questions you can answer on the phone, which you cannot and what rights you have when a company cold-calls you.

It is free and needs no sign-up. Nothing you enter leaves your browser.

01 / 05

Tool

WHO’S CALLING?0/8
● REC

    02 / 05

    How it decides

    Every answer is measured against three rules: who is calling, what they ask for and how it binds you.

    Who is calling

    Anyone calling to sell must say who they are and why they are calling. In Spain, since 2023 they need your prior consent or another legal basis, and you can ask where your number came from and object to further calls.

    What they ask for

    A company may only ask for the data it needs for what it says it will do. Your supplier already has your ID number and, if you pay by direct debit, your account. Your health, your schedule and who you live with are not needed to lower a bill.

    How it binds you

    When the company is the one calling, Spanish consumer law requires it to confirm the offer in writing, and you are only bound once you accept by signing or sending your agreement in writing. A code received by text counts as a signature. If you accept, you have 14 days to withdraw.

    03 / 05

    Questions

    What people ask us about this tool

    Is the call in the game real?

    It is made up, but every question comes from sales practices that exist. The rules the game applies are those of the GDPR, the Spanish Telecommunications Act and Spanish consumer law.

    Are my answers stored?

    No. The game runs in your browser and sends nothing.

    Why do I lose if I answer with suspicion?

    Because lying, insulting or accusing does not protect your data. What protects it is asking who is calling, asking for the offer in writing and refusing to give what is not needed, and none of that ends the call.

    What if I have already given my data on a call like this?

    If you accepted a contract, you can withdraw within 14 days. If you gave bank details, tell your bank. You can also ask the company to stop using your data and complain to the Spanish data protection authority if it does not.

    04 / 05

    More tools

    Each tool applies our rules to a different problem.

    Other tools

    Data
    Who’s Calling?
    what-to-share-on-the-phone#0A7C8A
    International
    Where to?
    where-to#A6006B
    Data
    The Inspector
    gdpr-inspector#0A7C8A
    AI
    The AI Radar
    ai-act-self-assessment#0B7A4B
    AI
    Green Light
    does-my-ai-need-a-lawyer#0B7A4B
    Litigation
    La Consultilla
    do-i-need-a-lawyer#8A5A00
    Litigation
    The Scales
    is-a-lawyer-worth-it#8A5A00

    05 / 05

    Artículos

    Lo que conviene leer después.

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    International

    Checking in to a hotel or holiday let in Spain: why you are asked for so much data

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    Data

    Why do websites make you pay if you reject cookies?

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    AI

    Can Meta and LinkedIn train AI on your posts and photos?

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    International

    What happens to someone's WhatsApp when they die, and what the family can do

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    International

    Branch or subsidiary in Spain: what the parent risks, what it pays and what it signs

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    International

    Enforcing a UK judgment in Spain: which route applies, what it takes and when it pays

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    Litigation

    How a civil lawsuit works in Spain after the 2025 reform

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    Data

    The Miljödata GDPR fine: when the processor pays for a data breach

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    International

    Brussels Ia under review: which court hears a cross-border case and how its judgment travels

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    International

    Does the EU KIDS Act apply to your game if you are outside Europe?

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    Data

    Connected products under the Data Act: what access by design demands from 12 September 2026

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    Data

    Does the EU Data Act apply to a SaaS company with no presence in Europe?

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    International

    Do you need a lawyer in Spain? Eight questions to answer before you pay for one

    David Sánchez Lorenzo, of counsel at PASSAS
    David Sánchez Lorenzo
    Litigation

    Claiming unpaid invoices in Spain: what the court checks before your claim is admitted

    David Sánchez Lorenzo, of counsel at PASSAS
    David Sánchez Lorenzo
    Litigation

    Unpaid Invoice From a Spanish Company? How Debt Recovery Works in Spain

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    AI

    Article 50(2) of the AI Act: the 2 December 2026 marking deadline

    Guillermo Passas Varo, founding partner of PASSAS
    Guillermo Passas Varo
    AI

    Article 5(1a) of the AI Act: how far the new prohibitions reach providers

    Guillermo Passas Varo, founding partner of PASSAS
    AI

    Digital Omnibus on AI: what the final text changes

    Who’s Calling?