Privacy Policy

Data protection

Privacy policy

Last updated: April 2026

This privacy policy explains how Barral Institute España (the “Controller”) processes personal data collected through this website, in accordance with the EU General Data Protection Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD).

Data controller

  • Business name: Barral Institute España
  • Address: Madrid, Spain
  • Email: info@barralinstitute.es
  • Phone: +34 611 601 612

Data we collect and why

We process personal data you provide voluntarily via forms on this website, email or phone. The specific purposes are:

  • Course enrollment: your name, professional credentials, email, phone and relevant clinical background, in order to verify prerequisites and manage your registration.
  • General enquiries: name, email and the content of your message, to respond to you.
  • Newsletter: email and optionally your specialty, to send you updates on new courses, schedules and educational content.

Legal basis

The processing is based on (a) your explicit consent given when you submit a form, (b) the performance of the contract or pre-contractual steps for course enrollment, and (c) our legitimate interest in responding to professional enquiries. You may withdraw consent at any time.

Retention

Enrollment data is kept for the duration of the training relationship and for the legally required period thereafter (accounting, tax and certification records). Newsletter data is retained until you unsubscribe. Enquiry data is kept only as long as necessary to manage your request.

Data recipients and transfers

We share your data only with service providers strictly necessary to deliver our services: hosting (OVHcloud, located in the EU), email provider, form and CRM processors. These providers act as data processors under contract with us and in compliance with the GDPR. We do not transfer personal data outside the European Economic Area without adequate safeguards.

For certification purposes, your credentials may be shared with Barral Institute International (USA) under the appropriate international transfer safeguards required by the GDPR.

Your rights

You may exercise the following rights at any time by writing to info@barralinstitute.es:

  • Access to your data
  • Rectification of inaccurate data
  • Erasure (right to be forgotten)
  • Restriction and objection to processing
  • Portability of your data
  • Withdrawal of consent

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, aepd.es) if you believe your rights have been violated.

Security

We apply appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS), access controls, and regular backups. We follow industry-standard best practices for WordPress security.

Changes

This policy may be updated from time to time. Significant changes will be notified by email where appropriate. The latest version is always available on this page.

This English version is provided for reader convenience. In case of any discrepancy between the Spanish and English versions, the Spanish text shall prevail for legal purposes.