Back

INHISPANIA INTLANCE, S.L. is committed to protecting the privacy of users who access this website and/or any of its services. The use of the website and/or any of the services offered by INHISPANIA INTLANCE, S.L. implies the user’s acceptance of the provisions contained in this Privacy Policy and that their personal data will be processed as stipulated. Please note that, although there may be links from our website to other websites, this Privacy Policy does not apply to other companies or organizations to which the website is redirected. INHISPANIA INTLANCE, S.L. does not control the content of third-party websites nor does it accept any responsibility for the content or privacy policies of these websites.

1) OWNER INFORMATION

In compliance with Article 10 of Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce, the following identifying details of the Owner are provided:
Website: https://inhispania.com/
Owner: INHISPANIA INTLANCE S.L.
Address: C/ Marqués de Valdeiglesias 3, 28004 Madrid
Tax ID: B83744847
Telephone: 915212231
Email: info@inhispania.com
Registration details: Registered in the Commercial Registry of Madrid; Volume 19178, Book 0, Folio 32, Section 8, Page M335707.

2) APPLICABLE LAWS

This privacy policy is based on current Spanish and European regulations regarding the protection of personal data on the Internet. Specifically, it complies with the following regulations:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
  • Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
  • Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE).

3) PRIVACY ISSUES

In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, we provide the following information about the processing of personal data you may provide:

  • Data Controller: INHISPANIA INTLANCE, S.L. (details at the top of this legal notice).
  • Personal Data Registration: In compliance with the GDPR and LOPD-GDD, we inform you that the personal data collected by INHISPANIA INTLANCE, S.L. through forms on its pages will be incorporated and processed in our file in order to facilitate, expedite, and fulfill the commitments established between INHISPANIA INTLANCE, S.L. and the User, or to maintain the relationship established in the forms completed by the User, or to respond to a request or inquiry. In accordance with the GDPR and LOPD-GDD, unless the exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, according to their purposes, the processing activities carried out and other circumstances established in the GDPR.
  • Legal Basis for Processing: The legal basis for processing personal data is consent. INHISPANIA INTLANCE, S.L. undertakes to obtain the User’s express and verifiable consent for the processing of their personal data for one or more specific purposes.

The User has the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, withdrawal of consent will not condition the use of the Website.

When the User must or may provide their data through forms to make inquiries, request information, or for reasons related to the content of the Website, they will be informed if the completion of any of them is mandatory because they are essential for the proper development of the operation carried out.

  • Other Legal Bases: Compliance with legal obligations. Legitimate interest: sending of own advertising.
  • Categories of Data: The categories of data processed by INHISPANIA INTLANCE, S.L. are only identifying data. No special categories of personal data are processed as defined in Article 9 of the GDPR.
  • Data Retention Period: Personal data will only be retained for the minimum time necessary for the purposes of their processing and, in any case, only for the following period: Data will be kept as long as the user is a client of our services, and with prior consent, wishes to receive information about our training courses and our school, or until the User requests their right to cancellation, opposition, or restriction of processing. However, certain identifying personal data and traffic data will be retained for a maximum period of 2 years in case it is required by Judges and Courts or for internal actions arising from misuse of the website.

At the time personal data is obtained, the User will be informed about the period during which the personal data will be retained or, when that is not possible, the criteria used to determine this period.

We also inform you that our information retention policies comply with the timeframes set by various legal responsibilities for prescription purposes:

a) General Rule: Under Article 30 of the Commercial Code, and unless other criteria apply, all company documents and/or information will be kept for 6 years. This affects all accounting, tax, labor, or commercial documentation, including correspondence.

b) Specific Periods: Our company must also set minimum periods depending on the type of data and the different prescription periods, which each department must be aware of.

No decisions will be made based on automated processing that produce effects on your data.

  • Purposes of Processing: The purposes of data processing are detailed below:
    • CLIENT MANAGEMENT: To provide the contracted services within the natural activity of each company and to invoice them. Data provided will be retained as long as the commercial relationship is maintained or for the years necessary to comply with legal obligations.
    • BUDGET MANAGEMENT: To send potential clients quotes for services and/or products. Data provided will be retained until you request the cessation of such processing.
    • MANAGEMENT OF POTENTIAL CLIENTS: To send people with legitimate interest information related to our products and services by any available means, and to invite them to events of interest. Data provided will be retained until you request the cessation of such processing and will be collected with prior express consent.
    • EVENT ORGANIZATION: To organize events (courses, talks, contests, and other outreach activities) by any of the Data Controllers. Data provided will be retained until you request the cessation of the activity or for the years necessary for justification of the activity.
    • TRAINING ACTIONS: As services provided to clients, courses, talks, and other training activities require specific management. Data provided will be retained for the years necessary to comply with legal obligations and justification of the training provided. Where necessary, they will be transferred to the Public Administration with competence in the matter.
  • Recipients of Data: The User’s personal data will not be shared with third parties. In any case, at the time personal data is obtained, the User will be informed about the recipients or categories of recipients of the personal data.
  • Personal Data of Minors: In accordance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, only those over 14 years of age may lawfully consent to the processing of their personal data by INHISPANIA INTLANCE, S.L. If the person is under 14 years of age, parental or guardian consent will be required for processing, and this will only be considered lawful to the extent that they have authorized it. Otherwise, the legal representative must inform us as soon as possible.
  • Rights Derived from the Processing of Personal Data: The User may exercise the following rights before the Data Controller, as recognized in the GDPR and Organic Law 3/2018:
    • Right of access: The right to obtain confirmation of whether INHISPANIA INTLANCE, S.L. is processing your personal data and, if so, to obtain information about your specific personal data and the processing carried out, as well as, among other things, information available about the origin of such data and the recipients of the communications made or planned.
    • Right of rectification: The right to have your personal data modified if it is inaccurate or, considering the purposes of the processing, incomplete.
    • Right of erasure (“the right to be forgotten”): The right, unless otherwise provided by current legislation, to have your personal data erased when it is no longer necessary for the purposes for which it was collected or processed; you have withdrawn your consent and there is no other legal basis; you object to the processing and there is no other legitimate reason to continue; personal data has been processed unlawfully; personal data must be deleted to comply with a legal obligation; or personal data has been obtained as a result of a direct offer of information society services to a child under 14 years of age. In addition to erasing the data, the Data Controller, considering available technology and the cost of implementation, must take reasonable steps to inform controllers processing the personal data of the data subject’s request for erasure of any links to those personal data.
    • Right to restriction of processing: The right to restrict the processing of your personal data. You have the right to obtain restriction of processing when you contest the accuracy of your personal data; the processing is unlawful; the Data Controller no longer needs the personal data, but you need it to make claims; and when you have objected to the processing.
    • Right to data portability: If the processing is carried out by automated means, you have the right to receive your personal data from the Data Controller in a structured, commonly used, and machine-readable format, and to transmit it to another controller. Where technically feasible, the Data Controller will transmit the data directly to that other controller.
    • Right to object: The right to object to the processing of your personal data or to have INHISPANIA INTLANCE, S.L. cease processing them.
    • Right not to be subject to a decision based solely on automated processing, including profiling: The right not to be subject to an individualized decision based solely on automated processing of your personal data, including profiling, unless otherwise provided by current legislation.

Finally, data subjects have the right to lodge a complaint with the competent Supervisory Authority (AEPD) if they believe there is a problem or violation of the current regulations in the way their personal data is being processed.

You may exercise the above rights by sending us a written request attaching a copy of a document that identifies you to our address or email (as listed at the beginning of this text).

4) PRINCIPLES APPLICABLE TO THE PROCESSING OF PERSONAL DATA

The processing of the user’s personal data will be subject to the following principles as set out in Article 5 of the GDPR and Article 4 and following of the LOPDGDD:

  • Principle of lawfulness, fairness, and transparency: User consent will be required at all times, following fully transparent information about the purposes for which personal data are collected.
  • Principle of purpose limitation: Personal data will be collected for specified, explicit, and legitimate purposes.
  • Principle of data minimization: Only strictly necessary personal data will be collected in relation to the purposes for which they are processed.
  • Principle of accuracy: Personal data must be accurate and always kept up to date.
  • Principle of storage limitation: Personal data will only be kept in a form that permits identification of the user for as long as necessary for the purposes of processing.
  • Principle of integrity and confidentiality: Personal data will be processed in a manner that ensures their security and confidentiality.
  • Principle of proactive responsibility: The Website Controller will maintain and regulate the necessary technical and logistical means to ensure that all applicable principles of processing are met.

5) WHAT SECURITY MEASURES DO WE APPLY?

We apply the security measures established in Article 32 of the GDPR; therefore, we have adopted the necessary security measures to ensure an adequate level of security to the risk of the data processing we perform, with mechanisms that allow us to guarantee the confidentiality, integrity, availability, and permanent resilience of processing systems and services.

Some of these measures are:

  • Informing staff about data processing policies.
  • Regular backups.
  • Access control to data.
  • Regular verification, evaluation, and assessment processes.

6) CONFIDENTIALITY AND SECURITY OF PERSONAL DATA

INHISPANIA INTLANCE, S.L. undertakes to adopt the necessary technical and organizational measures, according to the appropriate level of security to the risk of the data collected, to ensure the security of personal data and to avoid the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or unauthorized communication or access to such data.

The Website has an SSL certificate (Secure Socket Layer), which ensures that personal data is transmitted securely and confidentially, as the transmission of data between the server and the User, and in feedback, is fully encrypted.

However, since INHISPANIA INTLANCE, S.L. cannot guarantee the invulnerability of the Internet nor the total absence of hackers or others who may fraudulently access personal data, the Data Controller undertakes to promptly notify the User when a personal data security breach occurs that is likely to result in a high risk to the rights and freedoms of natural persons. As defined in Article 4 of the GDPR, a personal data security breach is any breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed.

Personal data will be treated as confidential by the Data Controller, who undertakes to inform and ensure, by legal or contractual obligation, that such confidentiality is respected by employees, associates, and any person to whom the information is made accessible.

7) LINKS TO THIRD-PARTY WEBSITES

The Website may include hyperlinks or links that allow access to third-party websites not operated by INHISPANIA INTLANCE, S.L. The owners of such websites will have their own data protection policies and are themselves responsible for their own files and privacy practices.

8) ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

It is necessary that the User has read and agrees with the conditions regarding the protection of personal data contained in this Privacy Policy, as well as accepts the processing of their personal data so that the Data Controller can proceed in the manner, during the periods, and for the purposes indicated. The use of the Website will imply acceptance of its Privacy Policy.

INHISPANIA INTLANCE, S.L. reserves the right to modify its Privacy Policy, according to its own criteria, or due to a legislative, jurisprudential, or doctrinal change by the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. Users are recommended to consult this page periodically to be aware of the latest changes or updates.

Last updated: 03/18/24