Privacy policy

Who processes your data

The data controller is the owner of this website, whose identification details appear on the data protection page.

You can contact us through any of the published channels for anything relating to your personal data.

What we collect

Only what you give us when you fill in a form on this site — contact, meeting request or newsletter sign-up. We use no analytics or advertising tools, so we do not build profiles or track your browsing.

Depending on the form you use, we may collect:

• Your name, surname, email address and telephone number.
• If you subscribe to the newsletter: your email address and, if you choose to give it, your name.
• The organisation you belong to, where the form asks for it.
• The message you write and the service or procedure you are asking about.
• If you write as an individual: your age, your nationality and the country where you live; and, if you wish to provide it, your national ID, NIE or passport number, which is optional.
• If you request a meeting, additionally: your country of origin and, if you have lived in Spain, the autonomous community.
• If you go on to book the meeting: the day and time you choose and who on our team it is booked with.
• If you write on behalf of a company: your role and your sector.
• If you write on behalf of an institution: your role, the type of organisation, the country and the type of agreement you are looking for.
• Any documents you attach, where the form allows it.
• The IP address the form was sent from, and the site language you used.

The national ID, NIE or passport is requested because it identifies your file before the authorities, and it is used for nothing else; providing it is optional and not providing it does not prevent us from replying. Age is requested because some mobility and training procedures have age limits, and knowing it avoids pointing you towards one that does not apply to you. Nationality and residence are requested because they determine which mobility procedure applies to you: the process is not the same for someone who holds the nationality of a European Union country as for someone who does not, nor for someone already living in Spain as for someone coming from abroad. The IP address is kept for security: it lets us detect automated submissions and misuse of the form. None of this is used for any other purpose, or to build profiles.

We neither ask for nor process the special categories of data listed in Article 9 of the Regulation: no health, political opinions, religion, or racial or ethnic origin. Nationality is an administrative detail of your file and is not used as anything else.

What we use it for, and on what legal basis

We use your data to answer your enquiry, get in touch with you and give you the information you asked for. That is the only purpose.

If what you are asking for is a meeting, we also use it to review your request, decide whether we can help you and, once approved, send you a personal link so you can choose a day and time. The time you choose is held in your name and assigned to the person on our team who will see you.

The legal basis is the taking of steps at your request prior to entering into a contract, under Article 6(1)(b) of the General Data Protection Regulation: you write to us because you want information about our services, and we process your data to give it to you.

The newsletter is a separate purpose with its own basis: your consent, Article 6(1)(a). It is asked for with its own checkbox, it is not part of the contact form, and writing to us does not sign you up. It also has to be confirmed from the link we send to the address, so that nobody can sign up somebody else.

For the IP address specifically, the basis is our legitimate interest in protecting the form against automated submissions, under Article 6(1)(f). For a newsletter sign-up it is also kept as evidence of when and from where consent was given.

We do not send marketing communications to anyone who has not expressly asked for them. You can withdraw your newsletter consent whenever you like, from the unsubscribe link in every email, and withdrawing it does not affect anything above.

How long we keep it

We keep the data from your enquiry for 24 months from the last contact, and then delete it. The same applies to a meeting request, whether or not it ends up taking place.

Newsletter data is kept for as long as you stay subscribed. When you unsubscribe we stop writing to you and keep the date of the unsubscription, which is what lets us show that you asked for it and avoid signing you up again by mistake.

If your enquiry leads to a contractual relationship, the data needed for that relationship is kept for as long as it lasts and, once ended, for the periods required by tax and commercial law.

Who else can see it

We do not sell or transfer your data to third parties for commercial purposes.

It is accessed only by the people in our organisation who need to in order to help you, and by the providers of our technical services — hosting and email — who act as processors and are bound by contract to the same confidentiality.

Where your enquiry concerns a programme delivered by a specific centre, we may share with that centre the data strictly needed to handle it. We will tell you before we do.

Where it is stored

The data is hosted on servers located in the Unión Europea.

When this site loads, your browser connects to external services that provide its fonts and icons. Those services receive your IP address simply by virtue of the connection, without setting cookies or collecting anything else. They are listed in the cookie policy.

Your rights

You may exercise the rights granted to you by the General Data Protection Regulation at any time:

• Access: find out what data of yours we hold and what we do with it.
• Rectification: correct anything inaccurate or incomplete.
• Erasure: ask us to delete it when it is no longer needed.
• Objection: object to our processing on grounds relating to your particular situation.
• Restriction: ask us to keep it but stop using it while a claim is resolved.
• Portability: receive the data you gave us in a commonly used format.

To exercise them, write to our contact address stating which right you wish to exercise. We may ask you to prove your identity, so that we do not disclose your data to someone else.

We will reply within one month. If the request is particularly complex, we may extend that by two further months, telling you beforehand.

If you are not satisfied

If you believe we have not handled your request properly, you can lodge a complaint with the Agencia Española de Protección de Datos, the supervisory authority in Spain.

Agencia Española de Protección de Datos — C/ Jorge Juan, 6, 28001 Madrid, Spain — www.aepd.es

Before going that far, we would appreciate you writing to us: almost everything is resolved sooner.

Changes to this policy

If we change the way we process your data, we will update this page and change the date shown at the top.