Privacy Policy

Last updated: 27 July 2026

INSTITUTO IEAE (IEAE DESDE 2002 SL · CIF B-72754955), Calle Guardia Civil 21, local 7B, 46020 Valencia, Spain. Contact: institutoieae@gmail.com · +34 961 243 239 · +34 689 85 16 66. This policy explains how we collect, use, retain and protect the personal data of users, applicants and students, in accordance with the GDPR and the Spanish LOPDGDD.

1. Legal Information

IEAE DESDE 2002 SL, trading as INSTITUTO IEAE (hereinafter “IEAE”, “we” or “us”), a company incorporated under the laws of Spain, with tax identification number CIF B-72754955 and registered office at Calle Guardia Civil 21, local 7B, 46020 Valencia, Spain, is the owner and operator of the website www.ieae.es (hereinafter, the “Website”).

IEAE is entered in the Register of Vocational Training Centres and Institutions for Employment of the Valencian Community (LABORA) and in the State Public Employment Service (SEPE) under registration number 4600002463.

Data controller: IEAE DESDE 2002 SL — Calle Guardia Civil 21, local 7B, 46020 Valencia, Spain. Contact e-mail: institutoieae@gmail.com. Telephone: +34 961 243 239 / +34 689 85 16 66.

2. Responsibility for Data Processing

IEAE informs the users of the Website about its policy regarding the processing and protection of the personal data of users, applicants and students which may be collected while browsing the Website or requesting information through it.

IEAE guarantees compliance with the applicable data protection legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the “GDPR”), and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (“LOPDGDD”). IEAE has implemented the technical and organisational security measures necessary to ensure and protect the confidentiality, integrity and availability of the data provided.

Browsing this Website implies full acceptance of the following provisions and conditions of use, including the use of cookies. If you do not agree with them, please send an e-mail to institutoieae@gmail.com.

The updated version of this privacy policy is the only one applicable during the use of the Website until a new version replaces it.

3. Collection, Purpose and Processing of Personal Data

3.1. What personal data we process

Personal data means any information relating to an identified or identifiable natural person (data subject). An identifiable person is a person who can be identified, directly or indirectly, in particular by reference to:

identity data: name and surname, identification number (DNI, NIE, NIF, passport), date of birth, nationality and country of residence;
contact data: postal address, e-mail address, telephone number, social network or messaging accounts;
academic and administrative data: previous education, enrolment details, attendance, assessment and learning outcomes, certificates and diplomas issued;
technical data: username, IP address, browser and device information, data collected through cookies and similar technologies;
preference data: courses of interest, preferred schedule and training modality, language of instruction;
billing and payment data: bank account number and payment details;
where strictly necessary for the delivery of training and the safety of students, data relating to health status (for example, allergies or accessibility requirements).

3.2. How we collect personal data

IEAE collects personal data directly from the data subject, in person or online (when contacting our administration, enrolling in a course, or submitting information in writing). IEAE may also collect personal data:

through cookies and similar technologies placed on your device, where this feature is enabled;
from business partners, including local agents and representatives promoting our courses in your country of residence;
from public authorities and public registers, in particular LABORA, SEPE and other bodies competent for vocational training for employment;
from joint marketing partners such as marketing agencies, software providers and digital marketing automation and analytics services;
from social media and messaging platforms, including but not limited to Facebook, Instagram, WhatsApp and Facebook Messenger.

3.3. Purposes of processing

IEAE processes personal data for the following purposes:

to process enrolment requests and to provide the training services requested by the user;
to manage the administrative, academic and customer service relationship with students and applicants;
to perform the contract concluded between the user and IEAE, including invoicing and payment collection;
to comply with the obligations arising from IEAE’s status as a registered training centre before LABORA, SEPE and other competent authorities, including the reporting of training actions and the issuance of official documentation;
to respond to enquiries and requests received through the Website, by e-mail or by telephone, and to include the contact in our address book;
to send notifications, updates and information about courses, services, news and events of interest, by any available electronic means (Website, e-mail, telephone and/or messaging);
to enable participation in messages, chats, profile pages, blogs and other services that allow users to post information and materials;
for statistical purposes, to analyse and improve our offering by identifying usage trends and evaluating the effectiveness of our promotional campaigns.

Processing of personal data means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, storage, modification, consultation, use, disclosure, restriction, erasure or destruction.

The data marked as required are necessary to identify the user and to access and use the services and functionalities made available by IEAE. Failure to provide them may prevent IEAE from processing the enrolment or providing the requested service.

3.4. Legal basis for processing

The legal bases on which IEAE relies are:

the performance of a contract to which the data subject is party, or the taking of steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR);
compliance with a legal obligation to which IEAE is subject, in particular in the fields of education, vocational training for employment, taxation and accounting (Article 6(1)(c) GDPR);
the legitimate interests pursued by IEAE, in particular the improvement of its services, the security of its facilities and systems, and the direct promotion of its own similar training services (Article 6(1)(f) GDPR);
the consent of the data subject, where required, in particular for commercial communications, non-essential cookies and the processing of images (Article 6(1)(a) GDPR).

Where special categories of data are processed (such as health data), IEAE relies on the explicit consent of the data subject or on the applicable exceptions provided for in Article 9 GDPR.

4. Communication of Information to Third Parties

IEAE guarantees the confidentiality of the data provided through this Website and ensures that under no circumstances will it be transferred to third parties for purposes unrelated to those described in this policy without the user’s authorisation, except where such disclosure is required by law or is necessary for the provision of the service.

Personal data may be communicated to:

public authorities and bodies competent in matters of education and vocational training for employment, in particular LABORA, SEPE, the Valencian Regional Government (Generalitat Valenciana) and the Spanish Tax Agency, where required by law;
commercial partners involved in the educational activity, and, where applicable, accommodation, transport or travel insurance providers arranging services related to your training stay;
service providers acting as data processors, such as IT systems providers (customer relationship management, payments, class scheduling, storage of learning outcomes) and providers of digital marketing automation and analytics software;
banking and payment institutions, for the purpose of collecting course fees;
professional advisers, including accountants, auditors and lawyers, bound by professional secrecy.

IEAE may also disclose personal data where it believes in good faith that it is required to do so by applicable law; in order to comply with legal proceedings where the user has acted unlawfully or in breach of the legal notice; to respond to requests from public or governmental authorities, including authorities outside your country of residence; to enforce its terms and conditions or a contract; or to protect the rights, privacy, safety, security and property of IEAE, of the user or of third parties, and to limit damages.

Where IEAE engages third parties as data processors, it enters into the data processing agreements required by Article 28 GDPR. Should any transfer of personal data outside the European Economic Area be necessary, IEAE will ensure that it is carried out on the basis of an adequacy decision of the European Commission or of appropriate safeguards, such as the Standard Contractual Clauses.

In accordance with legal requirements, IEAE has adopted the security levels necessary for the protection of personal data and has implemented all the technical and organisational means at its disposal in order to prevent the alteration, loss, unauthorised processing of or access to the data.

5. Data Retention

Personal data will be kept for as long as the commercial or academic relationship is maintained and, thereafter, for the periods necessary to comply with legal obligations and to address any liabilities that may arise from the processing or from the contractual relationship.

Enrolment, academic and certification records: for the period required by the regulations applicable to registered vocational training centres and, where applicable, for the duration required by LABORA and SEPE.
Accounting, tax and invoicing records: as a general rule, for the periods provided for in Spanish commercial and tax legislation.
Data processed on the basis of consent (for example, commercial communications): until consent is withdrawn.
Data collected through enquiries that do not result in enrolment: for a reasonable period after the last contact, after which the data will be deleted or anonymised.

6. User Rights

Data subjects are informed of the possibility of exercising, free of charge, the following rights:

right of access to their personal data;
right to rectification of inaccurate or incomplete data;
right to erasure of the data transmitted to the controller (“right to be forgotten”);
right to restriction of processing;
right to object to processing, including to profiling and direct marketing;
right to data portability;
right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal;
right not to be subject to decisions based solely on automated processing which produce legal effects or similarly significantly affect the data subject.

These rights may be exercised by sending a written and signed request to Calle Guardia Civil 21, local 7B, 46020 Valencia, Spain, enclosing a copy of your identity document or equivalent, or by e-mail to institutoieae@gmail.com.

Requests will be dealt with within one month, which may be extended by a further two months where the complexity or the number of requests so requires. This is without prejudice to the duty to retain certain data under the applicable legal terms.

Unless the user objects, by sending an e-mail to institutoieae@gmail.com, their data may be used, where appropriate and where legally permitted, to send commercial information relating to IEAE’s own training services.

Right to lodge a complaint. Users who consider that their data protection rights have not been satisfactorily addressed may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain — www.aepd.es.

In addition to the above, and in accordance with Spanish data protection legislation, users who so request have the possibility of organising the destination of their data after their death.

7. Accuracy of the Information Provided

The user is responsible for the accuracy of the information provided through this Website and undertakes to keep it up to date so that it reflects their actual situation. The user shall be liable for any false or inaccurate information provided and for any damage, inconvenience or problems that this may cause to IEAE or to third parties.

This information will be kept and managed with due confidentiality, applying the security measures necessary to prevent unauthorised access to or misuse of the data, as well as its manipulation, deterioration or loss.

However, the user must bear in mind that the security of computer systems is never absolute. When personal data is transmitted over the Internet, such information may be collected and processed by unauthorised third parties without the user’s consent. IEAE declines any responsibility for the consequences of such acts where the user has voluntarily published the information.

8. Cookies

The Website uses cookies and similar technologies. Technical cookies necessary for the functioning of the Website are installed on the basis of IEAE’s legitimate interest. Analytical, personalisation and advertising cookies are installed only with the prior consent of the user, which may be granted, refused or withdrawn at any time through the cookie banner or the browser settings.

9. Minors

As a general rule, the services offered through the Website are addressed to persons over the age of 14. Where a course is addressed to minors, or where the data subject is under 14 years of age, the processing of their personal data will require the consent of the holder of parental responsibility or guardianship, who must provide the corresponding documentation.

10. Image Processing

Within the context of the courses, students may be portrayed and/or filmed in images, photographs and recordings during lessons and academic activities organised as part of the programme. IEAE may use such material in brochures, documents, its Website, social media profiles and other informational media within the framework of its activity as a training institution.

This processing is based on the consent of the data subject, which may be withdrawn at any time by written notice to institutoieae@gmail.com, without affecting material already published or reproduced prior to the withdrawal.

11. Changes to this Policy

IEAE reserves the right to amend this privacy policy in order to adapt it to legislative or case-law developments, or to changes in its services and business practices. Any amendment will be published on the Website and will take effect from the date of its publication.

If you have any questions regarding this privacy policy, please contact us at institutoieae@gmail.com.

INSTITUTO IEAE — IEAE DESDE 2002 SL · CIF B-72754955 · Calle Guardia Civil 21, local 7B, 46020 Valencia (España) · LABORA / SEPE reg. no. 4600002463.