PRIVACY POLICY

1. -Introduction: Our commitment with privacy

At Inner Discovery Society, we have always considered the privacy and confidentiality of our clients to be of utmost importance. Protecting your personal data has been a core commitment since the moment you placed your trust in us.

We strive to ensure that respect for your fundamental right to data protection remains a priority. Our goal is to give you control over your own information.

The Privacy Policy detailed below will help you better understand how we use your personal data. We explain in detail the types of personal data we collect, how we collect them, the purposes for which we may use them, and with whom we may share them.

For this reason, and given the importance we place on your privacy, the implementation of the new Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (commonly known as GDPR) does not represent merely a set of obligations and restrictions for us. Instead, it reaffirms the increasing relevance of privacy in today’s world—a time marked by technological advancements that, while beneficial when used correctly, can also pose risks to individual privacy.

Therefore, we outline the fundamental principles governing how we handle personal data, ensuring its protection and exclusive use for the intended purposes, while always granting you—the data owner—the ultimate decision-making power.

If you prefer not to read our full privacy policy, have already done so, or have specific questions, our Data Protection Officer (DPO) is available to assist you at [email protected].

Scope of This Privacy Policy

This Privacy Policy applies to the official Inner Discovery Society website (https://innerevolutionschool.com/contact/), as well as to any other products and services you may contract with us.

Our goal is to transparently explain:

• What data we collect

• Why we collect your data

• How we use your data

• Your options regarding access, updates, and management of your data

In short, we want to ensure that you are fully informed about how we handle your personal information and our unwavering commitment to its security.

Additionally, we provide a “Definitions” section—a helpful tool to clarify any technical terms or specific concepts in the simplest way possible.

At Inner Discovery Society, we view this Privacy Policy as a living document that will undergo modifications and updates as needed to reflect the latest privacy developments in the best possible way for you. If you would like to receive updates on any changes, you can consent to notifications through the following link: https://innerevolutionschool.com/contact/.

Inner Discovery Society
NIF: G75774596
Address:
Avda Carrilet, No. 3
Bloque D, Planta 2
08902 Hospitalet de Llobregat, Spain

2.- Who is responsible for your personal data?

Although you will find the official definition of “data controller” in the Definitions section according to Regulation (EU) 2016/679, we prefer to explain it to you in a simpler way.

Inner Discovery Society is responsible for any personal data you provide and that we process.

We are responsible for safeguarding your data, ensuring its proper use, and protecting it with the necessary measures to prevent misuse.

At this point, it is important to recognize the broad meaning of the term “personal data.”

Gone are the days when personal data was limited to a person’s name, surname, postal address, and landline phone number. Today, personal data refers to any information that allows the identification of a person or makes them identifiable. Therefore, while a name is obviously considered personal data, so is a computer’s IP address or a vehicle license plate number.

Given the vast amount of personal data that can now be collected, Inner Discovery Society is committed to strictly following the principle of data minimization. This means we only collect and use the minimum necessary personal data, handled by the fewest people possible, and used as infrequently as possible.

3.- When do we collect your personal data?

At Inner Discovery Society, we collect personal data whenever you engage with us, whether through our services, visiting our website, or interacting with us electronically.

We will never collect your data for purposes unrelated to the core mission of Inner Discovery Society, which is the development of our professional activities—the very reason you reached out to us.

For example, we may collect your data when you attend a retreat with us, participate in one of our programs through our website, and so on.

4.- ¿Con que finalidad tratamos sus datos?

We process your data to provide you with services that support your inner evolution as a human being. This may include inner evolution retreats, conferences, workshops that foster personal growth, or journeys to the Amazon rainforest.

On the Inner Discovery Society website, you can find more details about our services. Each section provides specific information about our professional activities, all of which are interconnected and aligned with our core mission.

We emphasize once again: we will never collect your data for purposes beyond our professional activities, which are solely dedicated to personal and inner development.

It is important to highlight that your data is collected exclusively for specific, explicit, and legitimate purposes, and will not be processed in ways incompatible with those purposes.

In other words, we will never use your data for any purpose other than what is outlined here, always ensuring that you retain control over your personal information.

Data Retention Period

We will keep your data for as long as the contractual or commercial relationship remains active. Once that period ends, your data will be blocked and stored only as required by legal or industry regulations.

No Automated Decision-Making

Finally, we assure you that Inner Discovery Society will never use automated decision-making with your personal data. Every data processing activity in our organization involves human oversight and intervention.

5.- What data do we process and from what source do we obtain it?

As part of your relationship with us, we may process the following categories of personal data (to be adjusted based on the client’s specific case):

a) Identifying information – This may include your signature, a photograph, health card, social security number, or mutual insurance number.

b) Health-related data – In some cases, personal characteristics or social circumstances may be included, but only if necessary for the service provided.

c) Financial or transactional data – Such as payments, income, transfers, or debits.

These data may originate from you directly, your representative, or a third party.

6.- What is the legitimacy for the processing of your data?

The Regulation, in its effort to prevent the arbitrary processing of personal data, establishes specific requirements for its use.
 
In other words, the Regulation defines the legal grounds under which personal data may be processed, and it is the responsibility of the data controller to justify the processing based on the options outlined in the legislation.
 
As a general rule, these conditions are set out in Article 6, while Article 9 addresses cases involving the processing of particularly sensitive data.
 
Legal Basis for Processing Your Personal Data
 
In our case, the legitimate basis for processing your personal data includes:
•Your consent, if you have provided it.
•The provision of services, when a service relationship exists.
•The company’s legitimate interest, which is solely focused on ensuring the best possible service for you.
 
We also want to remind you that in order to properly manage your personal data, it is essential that your information remains up to date. If you become aware that your data needs to be updated and have not yet had the opportunity to do so, we kindly ask you to contact our Data Protection Officer (DPO) to make any necessary updates.
 
Keeping your data accurate is a top priority.

7.- Minors​

Both national regulations and the European Regulation impose restrictions on the processing of personal data belonging to a minor.

For this reason, at Inner Discovery Society, and in line with the age recommendation established in the Regulation, any processing of data for a minor under the age of 16 must have the explicit authorization of their parent or legal guardian. This authorization will be duly verified in accordance with the applicable legal framework.

To ensure compliance, we will implement all necessary and reasonable measures to effectively verify the minor’s age before processing their data.

8.- Will we communicate your personal data? To whom?

At Inner Discovery Society, we do not share your personal data with third parties, except in the following cases:
•When it is necessary to provide you with the contracted service.
•When legally required by applicable regulations.
•When you have explicitly given us your consent to do so.
 
We provide a list of categories of third parties with whom we share your data in the section Third Parties. (This section should specify the types of data transfers carried out and the categories of data processors we work with.)
 
Data Transfers and Their Justifications
•(a) Necessary for Service Provision
In some cases, to provide you with the best possible service and manage our relationship with you, certain partner companies may need to process your data. These companies act as service providers directly involved in delivering the contracted service.
In such cases, all relationships are governed by a data protection agreement. This contract ensures confidentiality and regulatory compliance in line with Regulation (EU) 2016/679 of the European Parliament.
•(b) Legal Obligation
There are instances where we are legally required to transfer your data, such as when reporting to tax authorities or other regulatory bodies.
•(c) Data Transfers Based on Your Consent
In situations where your explicit consent is required, we will always request it beforehand. Your consent will be properly managed to keep you informed, and if you ever wish to withdraw your consent, you will be able to do so without any difficulty.
 
We emphasize that you are the owner of your data, and our commitment is to give you control over your personal information.
 
What Happens If You Do Not Consent?
 
You are under no obligation to provide your consent. However, without it, you may miss out on information regarding our products, services, and other activities that, while not directly related to your contractual relationship with us, could be beneficial in keeping you informed about updates, news, and offers from our organization.
 
Non-Payment and Financial Data
 
It is important to note—though we hope this situation does not arise—that if a legal or contractual relationship exists and an outstanding debt remains unpaid, your debt-related data may be reported to financial solvency and credit reporting agencies responsible for tracking compliance or non-compliance with financial obligations.

9.- International Data Transfers

Before addressing the Control Authority’s guidelines on international data transfers, Inner Discovery Society wants to assure you that we will not carry out any international data transfer without your explicit consent. Once again, we emphasize that you retain control over your personal information.
 
What Are International Data Transfers?
 
According to the Spanish Data Protection Agency (AEPD), international data transfers involve the movement of personal data from Spain to recipients located in countries outside the European Economic Area (EEA), which includes the European Union (EU), Liechtenstein, Iceland, and Norway.
 
Data controllers and processors may carry out international data transfers without needing prior authorization from the AEPD, as long as the processing complies with the European Regulation (GDPR) and meets at least one of the following conditions:
 
Countries with an Adequate Level of Security
 
The European Commission has recognized certain countries as having an adequate level of data protection, meaning they are considered safe for international data transfers and equivalent to EU standards.
 
(As of June 2018, the following countries are recognized as adequate under various EU Commission decisions:)
•Canada (limited to entities covered by its data protection law)
•Isle of Man
•Faroe Islands
•New Zealand
•United States (limited to entities certified under the EU-U.S. Privacy Shield, Decision (EU) 2016/1250, July 12, 2016)
 
What If a Country Is Not Recognized as Adequate?
 
If a recipient country is not on the above list, international data transfers may still be allowed if at least one of the following safeguards is in place:
1.A legally binding and enforceable agreement between public authorities or bodies.
2.Binding Corporate Rules (BCRs) – internal data protection policies within multinational companies.
3.Standard contractual clauses (SCCs) – pre-approved data protection clauses adopted by the European Commission.
4.Approved codes of conduct with legally binding commitments.
5.Certification mechanisms with enforceable commitments to data protection.
 
Exceptions for International Transfers Without Adequate Protection
 
If none of the above safeguards apply, data transfers may still take place only in specific cases, such as:
•You have given explicit consent for the transfer.
•The transfer is necessary for the execution of a contract between you and the data controller.
•The transfer is required for public interest reasons.
•The transfer is necessary for legal claims or defense in court.
•The transfer is essential to protect the vital interests of an individual who is physically or legally unable to give consent.
•The data originates from a publicly accessible register.
 
Special Cases: Non-Repetitive and Limited Transfers
 
If none of the above exceptions apply, a transfer may still be permitted if it:
•Is not repetitive
•Affects only a limited number of data subjects
•Is necessary for the compelling legitimate interests of the data controller, provided that these interests do not override the rights and freedoms of the individual
 
In such cases, the data controller must notify the relevant supervisory authority and inform the data subject about:
1.The transfer
2.The compelling legitimate interests pursued
 
Binding Corporate Rules (BCRs)
 
Binding Corporate Rules (BCRs) are internal data protection policies adopted by a multinational group of companies. They allow intra-group international data transfers to countries without an adequacy decision, ensuring GDPR compliance.
 
BCRs must be approved by a supervisory authority under the consistency mechanism in Article 63 of the GDPR.
 
Final Commitment
 
At Inner Discovery Society, we remain committed to protecting your data and ensuring that any international transfer complies with the strictest legal and security standards. If you have any questions or concerns, please do not hesitate to contact our Data Protection Officer (DPO) at [email protected].

11.- ¿Cuáles son sus derechos?

Your Rights Under Data Protection Regulations
 
As the owner of your personal data, you have fundamental data protection rights, which have been strengthened under the General Data Protection Regulation (GDPR).
 
The recognized rights include: ACCESS, RECTIFICATION, ERASURE (RIGHT TO BE FORGOTTEN), RESTRICTION, DATA PORTABILITY, and OBJECTION.
 
Exercising these rights is free of charge.
 
How to Exercise Your Rights
 
To exercise your rights, you may submit a written request along with a copy of a valid identification document to:
 
📍 Postal Address:
Avda Carrilet, No. 3
Bloque D, Planta 2
08902
Hospitalet de Llobregat
 
📧 Email: [email protected]
 
At Inner Discovery Society, we align with European regulations by ensuring that you fully understand and can exercise your rights. Our Privacy Policy and Data Protection Officer (DPO) are available to provide assistance and guidance.
 
Your Data Protection Rights in Detail
 
1. Right of Access (Article 15 GDPR)
 
You have the right to obtain confirmation of whether or not we are processing your personal data and, if so, to access the following details:
•The purpose of data processing.
•The categories of personal data being processed.
•Who receives your data (third parties or organizations, including international transfers).
•The expected duration of data retention or the criteria used to determine this period.
•Your right to request rectification, erasure, restriction, or objection to processing.
•Your right to file a complaint with a data protection authority.
•The source of your data, if not provided directly by you.
•The existence of automated decision-making, including profiling, and its potential impact on you.
•Safeguards applied in cases of international data transfers.
 
You can also request a copy of your personal data being processed. If additional copies are requested, a reasonable administrative fee may be applied.
 
💡 Simply put: This right ensures that you can see what personal data we have about you and how it is being used.
 
2. Right to Rectification (Article 16 GDPR)
 
You have the right to request the correction of inaccurate personal data and to complete any incomplete information related to you.
 
💡 In other words: You can demand that your data is correct and kept up to date.
 
3. Right to Erasure (Right to Be Forgotten) (Article 17 GDPR)
 
You have the right to request that we delete your personal data without undue delay when:
•The data is no longer needed for the purposes for which it was collected.
•You withdraw your consent, and there is no other legal basis for processing.
•You object to processing, and there are no overriding legitimate grounds.
•Your data has been processed unlawfully.
•Your data must be deleted to comply with a legal obligation.
•The data was collected as part of online services directed at children.
 
Exceptions:
This right does not apply when data processing is necessary for:
•Freedom of expression and information.
•Compliance with a legal obligation.
•Public interest in public health, research, or statistics.
•Legal claims or defense in court.
 
💡 In simple terms: If your data is no longer needed or you withdraw your consent, you have the right to request its deletion.
 
4. Right to Restriction of Processing (Article 18 GDPR)
 
You can request that we limit the processing of your data in the following cases:
•If you challenge the accuracy of your data, while we verify it.
•If processing is unlawful, but you prefer restriction instead of erasure.
•If we no longer need your data, but you need it for legal claims.
•If you have objected to processing, while we determine if our legitimate interests override yours.
 
During the restriction period, your data will only be stored and not further processed unless you provide consent or it is necessary for legal claims.
 
💡 In short: You can request that your data is “frozen” and not used in certain circumstances.
 
5. Right to Data Portability (Article 20 GDPR)
 
You have the right to:
•Receive your personal data in a structured, commonly used, and machine-readable format.
•Transfer your data to another service provider without interference.
•Have your data transferred directly from one provider to another, where technically possible.
 
This applies when:
•Processing is based on your consent or a contract.
•Processing is automated.
 
💡 In simple terms: You can request a copy of your data in a format that allows you to transfer it to another service easily.
 
6. Right to Object (Article 21 GDPR)
 
You have the right to object to the processing of your data when:
•Processing is based on legitimate interest or public interest, and your situation overrides those interests.
•Your data is used for direct marketing, including profiling.
•Your data is processed for scientific, historical, or statistical research, unless it is necessary for public interest.
 
Once you object, we will stop processing your data unless compelling legal grounds exist.
 
💡 Simply put: You can refuse certain types of data processing based on your personal situation.
 
Withdrawing Consent
 
You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on prior consent.
 
Final Commitment
 
At Inner Discovery Society, we are committed to ensuring your data rights are respected. If you wish to exercise any of your rights, please contact our Data Protection Officer (DPO) at [email protected].

12.- Before which Control Authority can you file claims?

Filing a Complaint with the Data Protection Authority

To protect your rights as the data owner, the Regulation provides a formal recourse in cases where you do not receive a response or are unsatisfied with the outcome when exercising your data protection rights.

If this occurs, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD), which serves as the supervisory authority for data protection matters in Spain.

📍 Address:
C/ Jorge Juan, 6, Madrid (28001), Spain

🌐 Website: agpd.es

13.- When will we send you commercial communications?

Commercial Communications and Your Consent

When we collect data directly from you, we may ask whether you wish to receive commercial communications from us.

If these communications relate to products, services, or updates directly connected to your relationship with us, we may send them based on our legitimate interest in keeping you informed.

However, if the communications do not have a direct connection to our existing relationship or originate from third-party companies, they will only be sent with your explicit consent.

You always have the right to withdraw your consent at any time if you no longer wish to receive these communications.

14.- Social Media

Social Media Presence and Data Processing
 
Inner Discovery Society maintains profiles on several major social media platforms and is responsible for processing data related to:
•Information published on our official profiles.
•Messages or inquiries sent privately by users through direct messaging.
 
Purpose and Legal Basis
 
Data processing within each social media platform will be limited to the maximum extent permitted by the platform’s corporate policies.
 
Thus, Inner Discovery Society may use its social media profiles to:
•Share information about events, offers, and updates, provided that the law allows it.
•Provide personalized customer support and assistance.
 
Data Extraction
 
Under no circumstances will we extract or store data from social media platforms unless the user has provided explicit consent.
 
Your Rights
 
Due to the nature of social media platforms, exercising data protection rights (such as access, rectification, or erasure) may require coordination with the respective platform.
 
If you need assistance regarding your data protection rights on social media, our Data Protection Officer (DPO) is available to advise and guide you on the best course of action.
 
📧 DPO Contact: [email protected]

15.- Data security

Data Security and Protection Measures
 
At Inner Discovery Society, when we become responsible for processing your personal data, we implement organizational and security measures to ensure:
•Integrity – Data remains accurate and unaltered.
•Confidentiality – Only authorized individuals can access your data.
•Availability – Data is accessible when needed.
•Resilience and Security – Protection against unauthorized access, loss, or misuse.
 
All measures comply with Regulation (EU) 2016/679 (GDPR) and any applicable national data protection laws.
 
Security Measures Implemented
 
To safeguard your personal data, we may:
•Block access when necessary for security reasons.
•Encrypt data when additional protection is required.
•Anonymize data to enhance privacy and prevent identification.
 
We have also reviewed and reinforced our policies on data collection, storage, and processing, including physical security measures to prevent unauthorized access to our systems.
 
Data Minimization and Confidentiality
 
In line with the principle of data minimization, we:
•Restrict access to personal data strictly to those who need it for processing.
•Ensure compliance with contractual confidentiality obligations for all individuals involved in data handling.
 
Consequences of Non-Compliance
 
Failure to adhere to these security and confidentiality obligations will result in disciplinary action, which may include:
•Sanctions,
•Contract termination, or
•Employment dismissal, depending on the severity of the violation.
 
At Inner Discovery Society, our top priority is ensuring the proper protection, confidentiality, and ethical use of your personal data.

16.- Cookies

Confirmation with IT Department: Cookie and Tracking Policy
 
A cookie is a small data file containing a string of characters that is sent to your device when you visit a website. When you return to the same website, the cookie allows it to recognize your browser.
 
The duration of a cookie on your computer or mobile device depends on whether it is a session cookie or a persistent cookie.
 
At Inner Discovery Society, we use both types of cookies:
•Session cookies remain on your device only while you are browsing.
•Persistent cookies stay on your computer or mobile device until they expire or are deleted.
 
Types of Cookies We Use
1.Strictly Necessary Cookies
•Essential for navigating our website and using its features.
•Without these cookies, certain functionalities will not be available.
2.Performance Cookies
•Collect information about how users interact with our website.
•This data helps us optimize the website and improve usability.
3.Functional Cookies
•Remember user preferences and settings to personalize the browsing experience.
4.Third-Party Cookies
•Enabled by external services or third-party websites (e.g., Facebook, Google).
•May be used to enhance services, personalize ads, or improve user experience.
•Governed by the privacy policies of third-party providers, such as Facebook’s Data Use Policy.
5.Analytical Cookies
•Used for website performance tracking, such as Google Analytics.
•Help measure:
•Time spent on the website
•Most visited pages
•How visitors arrive at our website
 
How to Control Cookie Settings
 
Most web browsers allow you to manage cookie preferences through their settings. However, limiting cookies may impact your overall user experience.
 
Some browsers also offer a “Do Not Track” (DNT) signal, allowing users to express their tracking preferences across different websites.
 
Pixels and Tracking Technologies
 
In addition to cookies, we sometimes use small graphic images called “pixels” (also known as web beacons, clear GIFs, or pixel tags).
•Email Pixels
•Used in email communications to determine if a message has been opened.
•Advertising Pixels
•We use third-party pixels (e.g., Google, Facebook) to deliver interest-based ads.
 
This policy should be confirmed with the IT department to ensure technical accuracy, compliance with regulations, and alignment with the website’s actual implementation of cookies and tracking technologies.

17.- Definitions

Glossary of Data Protection Terms
 
At Inner Discovery Society, we want to make it as easy as possible for you to understand the key concepts related to your fundamental right to data protection.
 
Below, we provide definitions of essential terms for clarification. Each defined term is linked for easy reference.
 
If you have any doubts or need further clarification, our Data Protection Officer (DPO) is available to assist you at [email protected].
 
Key Definitions
•Personal Data
Any information about an identified or identifiable individual, such as a name, ID number, location data, online identifier, or any attribute related to physical, genetic, mental, economic, cultural, or social identity.
•Processing
Any operation performed on personal data, whether automated or not, including collection, storage, modification, consultation, use, disclosure, restriction, deletion, or destruction.
•Data Processing Limitation
Marking stored personal data to restrict its future processing.
•Profiling
Automated processing of personal data to evaluate aspects of a person, such as predicting their work performance, financial status, health, preferences, interests, or location.
•Pseudonymization
Processing personal data in a way that it cannot be attributed to an individual without additional, separately stored information.
•File
A structured set of personal data, whether centralized, decentralized, or dispersed across multiple locations.
•Data Controller
The person or organization that determines the purposes and means of data processing.
•Data Processor
The person or organization that processes personal data on behalf of the controller.
•Recipient
Any entity to whom personal data is disclosed, except authorities acting under legal investigation.
•Third Party
A person, company, or entity other than the data subject, controller, or processor, authorized to process data under their direct authority.
•Consent of the Data Subject
A freely given, specific, informed, and unambiguous indication of agreement to data processing.
•Personal Data Breach
A security violation that results in unauthorized access, loss, alteration, or disclosure of personal data.
•Genetic Data
Personal data related to inherited or acquired genetic characteristics that provide unique information about a person’s physiology or health.
•Biometric Data
Data obtained from specific technical processing, related to physical, physiological, or behavioral characteristics that confirm unique identification, such as facial images or fingerprints.
•Health Data
Personal data related to a person’s physical or mental health, including information on medical treatments or healthcare services received.
•Main Establishment
•For controllers: The central administration location in the EU.
•For processors: The main activity location in the EU where processing decisions are made.
•Representative
A legal or natural person appointed to act on behalf of a controller or processor regarding GDPR obligations.
•Company
Any legal or natural person engaged in economic activity, regardless of legal form.
•Corporate Group
A group of companies where one exercises control over the others.
•Binding Corporate Rules (BCRs)
Internal data protection policies adopted by companies transferring personal data internationally within a corporate group.
•Supervisory Authority
The independent public authority established by a Member State to monitor GDPR compliance.
•Relevant Supervisory Authority
A supervisory authority affected by a cross-border data processing activity.
•Cross-Border Processing
Processing personal data in multiple EU states or affecting individuals in multiple EU states.
•Reasoned and Relevant Objection
A formal objection to a proposed data processing decision that poses risks to fundamental rights.
•Information Society Service
Any online service under EU Directive 2015/1535.
•International Organization
A public entity or group created under an agreement between multiple countries.
•Cookie
A small data file sent from a website to a user’s device, storing browsing preferences and patterns.
•IP Address
A numerical identifier assigned to a device on a network using the Internet Protocol (IP).
•Web Counter
A tool that tracks the number of visits to a website.
•Browser
A software application used to access the internet (e.g., Chrome, Firefox).
•Automated Decision-Making
A process where decisions are made without human intervention, such as AI-driven credit approvals.
 
Principles of Data Protection
 
Under the General Data Protection Regulation (GDPR), personal data must be:
 
a) Lawfully, fairly, and transparently processed.
b) Collected for specified, explicit, and legitimate purposes.
c) Adequate, relevant, and limited to what is necessary (data minimization).
d) Accurate and up to date.
e) Stored no longer than necessary, except for legal, research, or statistical purposes.
f) Processed securely to protect against unauthorized access, loss, or damage.
 
The data controller is responsible for ensuring compliance and demonstrating adherence to these principles (accountability).
 
Navigation and Accessibility
 
To enhance usability, each term in this glossary should be hyperlinked to its respective definition within this section.
 
This ensures that users can easily access relevant information without unnecessary scrolling or searching.
 
For any additional questions, please contact our DPO at [email protected].

18.- Wifi for visitors

Use of Wi-Fi Network at Inner Discovery Society
 
Any individual wishing to access the Wi-Fi network at Inner Discovery Society may do so with the understanding that only device connection data is stored, not browsing activity.
 
Wi-Fi Access for Visitors
 
A dedicated SSID is available for clients and visitors, allowing free Internet access within our facilities.
 
Stored Information
 
For security purposes, the following device-related data is recorded upon connection:
•Device name
•MAC address
•IP address
•Connection method (Wi-Fi or Ethernet)
•Time of connection
 
🚫 No browsing activity is monitored or stored.
 
Purpose and Legal Basis
 
The storage of this information is a necessary security measure to:
•Identify connected devices within the company’s network.
•Prevent unauthorized access by restricting or blocking unapproved connections.
 
This practice aligns with data security regulations and ensures the protection of our network infrastructure.

19.- Changes in the Privacy Policy

EVOLUCIÓN INTERIOR S.L. pretende que su política de privacidad sea un elemento vivo que se actualice tantas veces como sea necesario, al que se incorporen nuevos aspectos de actualidad y se supriman aquellos que por la evolución tecnológica o por cualquier otra circunstancia gocen de menor popularidad o importancia.

Por ello, EVOLUCIÓN INTERIOR S.L. puede modificar o actualizar esta “política” cuando sea necesario.

Consúltela con frecuencia. Le servirá como elemento para valorar las buenas prácticas que se llevamos a cabo.

Cuando actualicemos esta “política”, modificaremos la fecha de última actualización que aparece al principio de la misma.

Privacy Policy Updates
 
At Inner Discovery Society, we view our Privacy Policy as a living document, which will be updated whenever necessary to reflect:
•New legal requirements
•Technological advancements
•Best practices in data protection
 
We may modify or update this policy as needed. We encourage you to review it regularly to stay informed about how we handle and protect your personal data.
 
How We Notify You About Changes
•The “Last Updated” date at the beginning of this policy will be revised accordingly.
•If significant changes are made to the policy or how we use your personal data, we will:
•Post a notice informing you of the changes before they take effect.
•Send you a direct notification, if you have provided consent for such updates.
 
Your continued use of our services after these changes constitutes acceptance of the updated policy. If you have any questions, please contact our Data Protection Officer (DPO) at [email protected].
Scroll to Top

Module 1

Lorem ipsum dolor sit amet, consectetur adipisicing elit. Perferendis at necessitatibus hic ratione voluptatem laborum fugit quia, ex a culpa qui cupiditate, ut ab commodi ea.
 
A animi doloremque itaque tempora quae, quam doloribus. Facere accusamus iure, sunt esse beatae minima. Sed pariatur quod enim vitae labore aperiam quia sapiente iure? Accusamus nulla sed illum vitae quaerat culpa reiciendis voluptatum fugiat blanditiis tempora sit nobis voluptatem doloremque unde suscipit quasi perspiciatis, dolor magnam iusto expedita nisi.
 
Repellendus, iste reiciendis. Voluptates necessitatibus id deserunt exercitationem corporis itaque, quos perspiciatis placeat odit officiis qui repudiandae. Repudiandae modi ducimus fugiat nihil, consequuntur delectus.