INHISPANIA INTLANCE, S.L. is committed to protecting the privacy of users who access this website and/or any of its services. The use of the website and/or any of the services offered by INHISPANIA INTLANCE, S.L. implies the user’s acceptance of the provisions contained in this Privacy Policy and that their personal data will be processed as stipulated. Please note that, although there may be links from our website to other websites, this Privacy Policy does not apply to other companies or organizations to which the website is redirected. INHISPANIA INTLANCE, S.L. does not control the content of third-party websites nor does it accept any responsibility for the content or privacy policies of these websites.
1) OWNER INFORMATION
In compliance with Article 10 of Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce, the following identifying details of the Owner are provided:
Website: https://inhispania.com/
Owner: INHISPANIA INTLANCE S.L.
Address: C/ Marqués de Valdeiglesias 3, 28004 Madrid
Tax ID: B83744847
Telephone: 915212231
Email: info@inhispania.com
Registration details: Registered in the Commercial Registry of Madrid; Volume 19178, Book 0, Folio 32, Section 8, Page M335707.
2) APPLICABLE LAWS
This privacy policy is based on current Spanish and European regulations regarding the protection of personal data on the Internet. Specifically, it complies with the following regulations:
- Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
- Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
- Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE).
3) PRIVACY ISSUES
In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, we provide you with the following information regarding the processing of personal data you may provide us:
Data Controller
INHISPANIA INTLANCE, S.L.
Our contact details are at the top of this legal notice.
Registration of Personal Data
In compliance with the provisions of the GDPR and the LOPD-GDD, we inform you that the personal data collected by INHISPANIA INTLANCE, S.L. through the forms on its web pages will be incorporated into and processed in our file in order to facilitate, expedite, and fulfill the commitments established between INHISPANIA INTLANCE, S.L. and the User, or to maintain the relationship established in the forms the User fills out, or to address a request or inquiry. Likewise, in accordance with the GDPR and LOPD-GDD, unless the exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, according to their purposes, the processing activities carried out and other circumstances established in the GDPR.
Legal Basis for Processing
The legal basis for processing personal data is consent. INHISPANIA INTLANCE, S.L. undertakes to obtain the User’s express and verifiable consent for the processing of their personal data for one or more specific purposes.
The User has the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, withdrawal of consent will not condition the use of the Website.
When the User is required or able to provide their data through forms to make inquiries, request information, or for reasons related to the content of the Website, they will be informed if the completion of any of them is mandatory because they are essential for the proper development of the operation carried out.
Other Legal Bases:
- Compliance with legal obligations.
- Legitimate interest: sending own advertising.
Categories of Data
The categories of data processed by INHISPANIA INTLANCE, S.L. are only identification data. Under no circumstances are special categories of personal data processed as defined in Article 9 of the GDPR.
Source of Your Data
Data included in the website forms.
Retention Period of Personal Data
Personal data will be retained only for the minimum time necessary for the purposes of its processing and, in any case, only for the following period: Data will be kept as long as the user is a client of our services, and, with prior consent, wishes to receive information about our training courses and our school, or until the User requests their right to cancellation, opposition, or restriction of processing. However, certain identifying and traffic data will be retained for a maximum period of 2 years in case it is required by judges and courts or to initiate internal actions resulting from misuse of the website.
At the time personal data is obtained, the User will be informed about the period for which the personal data will be stored or, when that is not possible, the criteria used to determine this period.
Furthermore, our information retention policies comply with the periods set by various legal responsibilities for prescription purposes:
a) General Rule: Under Article 30 of the Commercial Code, and unless other criteria apply, all company documents and/or information will be kept for 6 years. This affects all accounting, tax, labor, or commercial documentation, including correspondence.
b) Specific Periods: Our company must also set minimum periods depending on the type of data and the various limitation periods, which each department must be aware of.
No decisions will be made based on automated processing that produce effects on your data.
Purposes of Processing
The purposes of the data processing carried out are detailed below:
CLIENT MANAGEMENT: To provide the contracted services within the natural activity of each company and to invoice them. The data provided will be kept as long as the commercial relationship is maintained or for the years necessary to comply with legal obligations.
BUDGET MANAGEMENT: To send potential clients quotes for services and/or products. The data provided will be kept until you request the cessation of such processing.
POTENTIAL CLIENT MANAGEMENT: To send people with legitimate interest information related to our products and services by any available means, and to invite them to events of interest. The data provided will be kept until you request the cessation of such processing and will be collected with prior express consent.
EVENT ORGANIZATION: To organize events (courses, talks, contests, and other outreach activities) by any of the Data Controllers. The data provided will be kept until you request the cessation of the activity or for the years necessary to justify the activity.
TRAINING ACTIVITIES: As services provided to clients, these include courses, talks, and other training activities that require specific management. The data provided will be kept for the years necessary to comply with legal obligations and to justify the training provided. Where necessary, they will be transferred to the relevant Public Administration.
Data Recipients
The User’s personal data will not be shared with third parties.
In any case, when personal data is obtained, the User will be informed about the recipients or categories of recipients of the personal data.
Personal Data of Minors
In accordance with Articles 8 of the GDPR and 7 of Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, only persons over 14 years old may lawfully give their consent for the processing of their personal data by INHISPANIA INTLANCE, S.L. If the person is under 14 years old, the consent of parents or guardians will be required for processing, and it will only be considered lawful to the extent that they have authorized it. Otherwise, the legal representative must inform us as soon as possible.
Rights Arising from the Processing of Personal Data
The User may exercise the following rights before the Data Controller, as recognized in the GDPR and Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights:
Right of Access: The right of the User to obtain confirmation as to whether INHISPANIA INTLANCE, S.L. is processing their personal data, and, if so, to obtain information about their specific personal data and the processing carried out or to be carried out by INHISPANIA INTLANCE, S.L., as well as, among other things, information available about the origin of such data and the recipients of the communications made or planned for them.
Right to Rectification: The right of the User to have their personal data amended if it is found to be inaccurate or, considering the purposes of the processing, incomplete.
Right to Erasure (“Right to be Forgotten”): The right of the User, provided that current legislation does not provide otherwise, to obtain the erasure of their personal data when it is no longer necessary for the purposes for which it was collected or processed; the User has withdrawn their consent and there is no other legal basis; the User objects to the processing and there is no other legitimate reason to continue; the personal data has been processed unlawfully; the personal data must be erased to comply with a legal obligation; or the personal data has been obtained as a result of a direct offer of information society services to a minor under 14 years of age. In addition to erasing the data, the Data Controller, considering available technology and the cost of implementation, must take reasonable steps to inform controllers processing the personal data of the data subject’s request to erase any links to such personal data.
Right to Restriction of Processing: The right of the User to restrict the processing of their personal data. The User has the right to obtain restriction of processing when they contest the accuracy of their personal data; the processing is unlawful; the Data Controller no longer needs the personal data, but the User needs it to make claims; and when the User has objected to the processing.
Right to Data Portability: Where processing is carried out by automated means, the User has the right to receive their personal data from the Data Controller in a structured, commonly used, and machine-readable format, and to transmit it to another data controller. Where technically feasible, the Data Controller will transmit the data directly to that other controller.
Right to Object: The right of the User to object to the processing of their personal data or to have INHISPANIA INTLANCE, S.L. cease processing them.
Right not to be subject to a decision based solely on automated processing, including profiling: The right of the User not to be subject to an individualized decision based solely on automated processing of their personal data, including profiling, unless current legislation provides otherwise.
Finally, data subjects have the right to lodge a complaint with the competent Supervisory Authority (AEPD) if the User considers that there is a problem or breach of current regulations in the way their personal data is being processed.
You can exercise the above rights by sending us a written request, enclosing a copy of a document that identifies you, to our address or email (provided at the beginning of this text).
4) PRINCIPLES APPLICABLE TO THE PROCESSING OF PERSONAL DATA
The processing of the user’s personal data will be subject to the following principles as set out in Article 5 of the GDPR and Article 4 and following of the LOPDGDD:
- Principle of lawfulness, fairness, and transparency: User consent will be required at all times, following fully transparent information about the purposes for which personal data are collected.
- Principle of purpose limitation: Personal data will be collected for specified, explicit, and legitimate purposes.
- Principle of data minimization: Only strictly necessary personal data will be collected in relation to the purposes for which they are processed.
- Principle of accuracy: Personal data must be accurate and always kept up to date.
- Principle of storage limitation: Personal data will only be kept in a form that permits identification of the user for as long as necessary for the purposes of processing.
- Principle of integrity and confidentiality: Personal data will be processed in a manner that ensures their security and confidentiality.
- Principle of proactive responsibility: The Website Controller will maintain and regulate the necessary technical and logistical means to ensure that all applicable principles of processing are met.
5) WHAT SECURITY MEASURES DO WE APPLY?
We apply the security measures established in Article 32 of the GDPR; therefore, we have adopted the necessary security measures to ensure an adequate level of security to the risk of the data processing we perform, with mechanisms that allow us to guarantee the confidentiality, integrity, availability, and permanent resilience of processing systems and services.
Some of these measures are:
- Informing staff about data processing policies.
- Regular backups.
- Access control to data.
- Regular verification, evaluation, and assessment processes.
6) CONFIDENTIALITY AND SECURITY OF PERSONAL DATA
INHISPANIA INTLANCE, S.L. undertakes to adopt the necessary technical and organizational measures, according to the appropriate level of security to the risk of the data collected, to ensure the security of personal data and to avoid the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or unauthorized communication or access to such data.
The Website has an SSL certificate (Secure Socket Layer), which ensures that personal data is transmitted securely and confidentially, as the transmission of data between the server and the User, and in feedback, is fully encrypted.
However, since INHISPANIA INTLANCE, S.L. cannot guarantee the invulnerability of the Internet nor the total absence of hackers or others who may fraudulently access personal data, the Data Controller undertakes to promptly notify the User when a personal data security breach occurs that is likely to result in a high risk to the rights and freedoms of natural persons. As defined in Article 4 of the GDPR, a personal data security breach is any breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed.
Personal data will be treated as confidential by the Data Controller, who undertakes to inform and ensure, by legal or contractual obligation, that such confidentiality is respected by employees, associates, and any person to whom the information is made accessible.
7) LINKS TO THIRD-PARTY WEBSITES
The Website may include hyperlinks or links that allow access to third-party websites not operated by INHISPANIA INTLANCE, S.L. The owners of such websites will have their own data protection policies and are themselves responsible for their own files and privacy practices.
8) ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
It is necessary that the User has read and agrees with the conditions regarding the protection of personal data contained in this Privacy Policy, as well as accepts the processing of their personal data so that the Data Controller can proceed in the manner, during the periods, and for the purposes indicated. The use of the Website will imply acceptance of its Privacy Policy.
INHISPANIA INTLANCE, S.L. reserves the right to modify its Privacy Policy, according to its own criteria, or due to a legislative, jurisprudential, or doctrinal change by the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. Users are recommended to consult this page periodically to be aware of the latest changes or updates.
Last updated: 02/06/25