Your privacy is important to us. We are therefore concerned that the personal data collected about you is stored and handled in a safe and secure manner, and in accordance with data protection legislation (GDPR, General Data Protection Regulation). Instituto IDeIA (Diálogos e Indagación Apreciativa) is responsible for managing data and we ensure that your personal information is processed in accordance with the law.
We ensure transparent data processing
When we ask for personal data, we inform you about what data we process and for what purpose.
Processing of personal data
We process the following personal data:
– common personal data such as name, email, etc.
– in some cases, sensitive personal information, such as information about your phone number, postal address etc. if you are participating in a training.
We collect and keep your information in order to:
– accommodate your request for services: eg confirming participation in events, workshops and trainings.
– adapt our communication to you: eg e-mailing newsletters and invitations to events, workshops, meditation, retreats and trainings.
We only process necessary personal information
We collect, manage and keep only the personal information necessary in relation to the purpose for which it is being collected. Some information is required by law, to be collected and stored, in order to run the activites facilitated by Miriam Subirana. Other information is necessary to fulfil contracts or legal commitments.
We update your personal information
As our service is dependent on having correct information, please let us know about relevant changes to your data.
We delete your personal information when it is no longer necessary
We delete your personal information, when it is no longer necessary in relation to the purpose for which it was collected.
We ask for your consent before we process your personal information
We ask for your consent before we handle your personal information, such as upon application to a programme or e-mail. Your consent is voluntary and you can terminate it at any time by contacting us or by unsuscribing to our newsletter.
We will not pass your personal information on to third parties
We have internal rules on information security, that contain instructions and actions that protect your personal data against being modified and against access to or disclosure by third parties.
You are entitled at any time to receive information about what data we have about you, what we use it for and how long we keep it. You are entitled to have incorrect personal data changed or deleted.
If you find that your information is no longer necessary in relation to the purpose for which it was originally collected, you may wish to have it removed. However, there will be times when we can only remove your data after our obligations to public authorities have been completed. For instance, if you have payed for a training, or we have invoiced you as a provider, your name will be visible in our accounts system for 5 years. After 5 years, it will be shredded.
When you contact us with a request to change or delete your personal information, we will make changes or delete the data as soon as possible.