Privacy policy

1. Data controller

FUNDACIÓN INLEA is the controller of your personal data, which will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December (LOPDGDD).

• Entity: FUNDACIÓN INLEA
• Tax ID (NIF): G64555378
• Address: Rambla de Catalunya, 86, 2º 1ª — 08008 Barcelona (España)
• Contact email: info@inlea.com
• Email for exercising your rights: legal@inlea.com

2. Data we process

Through the contact form we only collect the data you provide: your name, email address and the content of your message, together with your browsing language and the date and time of submission and of acceptance of this policy.

We do not collect browsing data for analytics or advertising purposes. See the Cookie policy for more information.

3. Purposes of processing

• To handle and respond to enquiries, collaboration proposals or information requests sent through the contact form or by email.
• To manage, where applicable, any institutional collaboration arising from your request.
• To comply with the legal obligations applicable to the Foundation.

4. Legal basis

• Consent of the data subject (art. 6.1.a GDPR), given by ticking the acceptance box on the contact form.
• Legitimate interest of the Foundation (art. 6.1.f GDPR) in handling the requests received and maintaining contact with collaborating entities.
• Compliance with legal obligations (art. 6.1.c GDPR).

5. Retention period

Data collected through the contact form will be kept for as long as necessary to handle your request and for a maximum of 12 months from receipt, unless a collaboration arises from the request, in which case the data will be kept for the duration of that relationship and the applicable statutory limitation periods.

Once the period has elapsed, the data will be deleted with appropriate security measures to ensure its destruction or anonymisation.

6. Recipients

Your data will not be disclosed to third parties, except where required by law. The Foundation's web hosting, database and email providers may access the data as data processors under contract, solely to provide the service.

7. International transfers

Some of our technology providers may be located outside the European Economic Area. In such cases, we ensure that the transfer is covered by an adequacy decision of the European Commission or by the Standard Contractual Clauses approved by it, or another mechanism recognised under the GDPR.

8. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to legal@inlea.com or by post to the address above, enclosing a copy of a document proving your identity. We will respond within one month at the latest.

If you believe that the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Security measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction, including encrypted communications (HTTPS), access controls and data minimisation.

10. Mandatory information

All fields in the contact form are required in order to handle your request. You guarantee that the data provided is accurate and undertake to inform us of any changes.