Privacy and Data Protection Policy
Last updated: [10/11/2025]
Data Controller
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD), users are informed that any personal data provided through this website will be processed by:
Controller: InnerPath S.L.
Tax ID (NIF): B23918063
Registered Address: C/ Almirante Lobo 2, 2nd Floor, 41001, Seville, Spain
Contact Email: [email protected]
Commercial Brand: InnerCyber
Data Protection Officer (DPO): Not applicable
Purposes of Processing
The personal data collected through this website’s forms, as well as data sent via email or other communication channels, will be processed for the following purposes:
- To manage requests for information, contact, or quotations.
- To send newsletters, updates, or content related to our services.
- To formalize, deliver, and manage contracted services.
- To comply with applicable legal, accounting, and tax obligations.
- To prevent or detect unlawful, abusive, or non-compliant activities.
No automated decisions or profiling will be carried out without the user’s explicit consent.
Legal Basis for Processing
The processing of personal data is based on the following legal grounds:
Legitimate interest of the company (Art. 6.1.f GDPR), to maintain website security, prevent fraud, or improve service quality, provided such interests do not override the rights of the data subject.
Explicit consent of the data subject (Art. 6.1.a GDPR), for sending communications, managing inquiries, or including the user in our contact database.
Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR), when the processing is necessary to deliver our services.
Compliance with a legal obligation (Art. 6.1.c GDPR), such as tax or accounting duties.
Data Retention
No personal data will be disclosed to third parties except when required by law or necessary for the proper provision of contracted services (e.g., technology, hosting, marketing, or cybersecurity providers), all under agreements ensuring GDPR compliance.
No international data transfers outside the European Economic Area (EEA) will occur without adequate protection guarantees as defined in Articles 44 and following of the GDPR.
Recipients and International Transfers
Data will not be transferred to third parties unless legally required or necessary to provide the service (e.g., providers of other cybersecurity services, CRM services, or marketing tools, all under contracts that guarantee compliance with the GDPR).
International data transfers outside the European Economic Area are not carried out without adequate safeguards.
Data Subject Rights
You may exercise the following rights at any time:
- Access: Obtain confirmation as to whether we process your data and access such data.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your data when it is no longer necessary or when consent is withdrawn.
- Objection: Object to data processing in certain situations.
- Restriction: Request limitation of data processing under specific conditions.
- Portability: Receive your data in a structured, commonly used, and machine-readable format, and transmit it to another controller.
To exercise these rights, please send a written request to [email protected], attaching a copy of a valid ID document.
If you believe your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es
Data Security
InnerPath S.L., operating under its commercial brand InnerCyber, implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in compliance with Article 32 of the GDPR. These measures ensure the confidentiality, integrity, availability, and resilience of information systems and processing services.
Changes to the Privacy Policy
InnerPath S.L. reserves the right to modify this Privacy Policy to reflect legal, regulatory, or operational changes. Updates will be published on this page and will take effect upon publication.