Skip to main content
Logo Symbol Inner Flow
→ Log in
Join Now
Logo Inner Flow
Logo Symbol Inner Flow

Privacy policy

This privacy policy establishes the basis on which innerFlow Studio S.L. (hereinafter, “innerFlow”) processes the personal data it obtains, uses, or otherwise processes during navigation through the website www.innerflow.es (hereinafter, “the Website”) or in any of innerFlow’s Internet environments.

The proper treatment and protection of personal data is of vital importance to us, and we believe that proper treatment of this data based on transparency with our customers generates trust and peace of mind.

Remember that whenever you browse, purchase our services or products, or use the services and functionalities of the Website, and you are asked to provide personal data or it is necessary for us to access them, this Privacy Policy applies to you. Users accept the inclusion and processing of the data they provide in a personal data processing, of which innerFlow is the owner, being able to exercise the pertinent rights as set out in the following clauses.

All legal texts are available to users and/or interested parties on the corresponding website. These texts may be modified and/or updated according to the needs and activities carried out by innerFlow. Review it periodically in case of any changes.

WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

In compliance with the provisions of the current regulations on the protection of personal data (GDPR / LOPDGDD), as well as in compliance with the duty of information provided for in Article 10 of the current Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce, we inform you that the Data Controller (responsible for the collection and processing of your personal data in relation to the services provided and the information collected through this website) and the content manager of the website where you can download different applications and/or information is INNER FLOW STUDIO S.L. (also referred to as “innerFlow”, “we” or “our”) with NIF B13649181 and postal address at calle Bailén 194, Bajos, Puerta 2 (08037) Barcelona.

Identifying data:

  • Trade name: innerFlow.
  • NIF: B13649181.
  • Phone: 934872122.
  • Data Protection Officer (DPO) contact: dpo@innerFlow.es.

WHAT PERSONAL DATA DO WE PROCESS?

Personal data are those that identify or make a person identifiable. In this sense, on this website, directly or indirectly, depending on the actions taken by the user, we may collect and process the following categories of personal data: name, surname, email, phone, bank details, IP address, gender, date of birth, weight, height, language, habits (sleep, diet, consumption, physical activity, progress, shopping habits, etc.), body mass, image, health data (cholesterol, blood, etc.), third-party contact details (emergency contacts) as well as any content that the user may generate.

FOR WHAT PURPOSE(S) DO WE COLLECT AND PROCESS YOUR DATA?

In accordance with the provisions of the current regulations on the protection of personal data, innerFlow only collects the data strictly necessary to offer the services derived from its activity and other provisions, management, and activities attributed by law:

  • Registration: management of the user’s registration in any of the modalities or services offered by innerFlow.
  • Fee collection/payment: management of any activity related to the collection/payment of the fee derived from the contracted service or modality.
  • Creation and management of the user account: the creation and management of the user account includes various processes such as: downloading invitations, registering for activities, sending and receiving the corresponding documentation, delivering the necessary material (e.g., access wristband), managing the loyalty program, managing the user profile, activity calendar and user-specific, work plans and progress, participation in the community (posting comments, interacting with other users, blog, social networks), nutrition. Participation in contests.
  • Commercial profiling: we may collect and analyze your personal data to assess certain personal aspects, especially to analyze or predict aspects related to your personal preferences, interests, economic situation, behavior, location, or relationships with other users (we will never use this profile to make decisions based solely on the automated processing of your data that have legal effects on you or significantly affect you in a similar way (e.g., denying you access to networks without any human intervention).
  • Satisfaction surveys: in order to better understand the needs and expectations of users and improve our customer service, services, and products, we may send you satisfaction and quality surveys, as well as conduct statistics (these will allow us to know, for example, users’ reactions to our advertising campaigns).
  • Provision of certain exclusive services: innerFlow may use the data provided by users to offer exclusive services. For example, conducting blood tests, contracting treatments, specific work plans, or dietary plans.
  • Sending commercial communications: innerFlow may carry out the sending of commercial communications in several cases: i) when the user has subscribed to receive them and ii) based on the commercial profiling carried out, personalized communications of our services and products. Contact for these purposes may be made through any existing communication channel, mainly through email, phone calls, messaging services (including SMS and push notifications in the application), social networks, and postal mail. These commercial actions may include contacting you by phone during the online registration process and showing you ads and online content on social networks.
  • Personnel selection processes: in the event that, through the enabled email address, you send us your CV, we inform you that the personal data provided will be processed for the purpose of analyzing your candidacy and profile to evaluate your participation in current or future selection processes for hiring.
  • Contact (customer service): responding to inquiries, information requests, complaints, and suggestions that may be made to us through the Website, which may be related to any of our services, products, prices, promotions, among others.
  • Online store: in cases where users make a purchase of any of the products/services that innerFlow offers through the online store on its website, the data will be used for the management and processing of the purchase and/or order.

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?

Depending on the purpose for which your personal data are processed, we use one or another legal basis:

  • The contractual/pre-contractual relationship (execution of the contract/pre-contract): for registration, fee collection/payment, creation and management of user accounts, provision of contracted services (including purchases made through the online store), attention to those customers with whom there is a contractual relationship, sending satisfaction surveys, or certain phases of personnel selection processes.
  • Explicit consent: for sending commercial and/or informational communications.
  • Legitimate interest: for the preparation of commercial profiling of users.

In addition, in cases where there is a legal obligation, the data will be used to comply with it.

HOW LONG DO WE KEEP YOUR DATA?

The personal data provided will be kept according to the following criteria:

  • Legally established and/or recommended periods.
  • Prescription periods of actions that may arise in relation to the processing.
  • Exercise of opposition/deletion rights by the interested parties in those treatments that are subject to them.

TO WHOM ARE YOUR DATA COMMUNICATED?

Your data may be communicated in the following cases:

  • Third parties (suppliers and/or collaborators) who help us provide our services: platform providers, hosting services, maintenance and IT support, courier companies, banking entities, advertising companies, physical activity professionals, laboratories, etc. innerFlow will collaborate to ensure that third parties comply with current legislation.
  • In cases where a legal obligation determines it.

The website may contain links, applications, or functionalities shared with third parties, such as social networks or online communication systems. innerFlow is not responsible for the information collected in these applications, functionalities, or social networks owned by third parties as it has no management or control capacity over them, therefore the legal notices and privacy policies that may be included on the websites or similar of the third parties apply.

INTERNATIONAL DATA TRANSFERS

Your personal data may be processed or stored in countries outside the European Economic Area (EEA), depending on the location of our service providers. Data will only be transferred outside the EEA if comparable guarantees are provided. Service providers located outside the EEA, such as Facebook, Inc. or Google, LLC, may have access to your personal data. These service providers are covered by the Data Privacy Framework and are therefore required to protect your personal data in accordance with a set of protection standards and safeguards defined by the European Union.

WHAT ARE YOUR RIGHTS REGARDING THE PROCESSING OF YOUR DATA?

Data protection regulations grant you certain rights so that you can have control over your data, which you can exercise at any time by contacting us via email at dpo@innerflow.es.

You have the following rights:

  • Right to information: Right to obtain clear, transparent, and easily understandable information about how we use your personal data and your rights. We provide this information in this Policy.
  • Right of access: Right to know if we are processing your personal data and, if so, the purposes for which they are processed, the categories of data, the recipients, the retention periods, and your rights, among others. An administrative fee may be charged for this.
  • Right to rectification: Right to have your personal data rectified when they are inaccurate, no longer valid, or incomplete.
  • Right to erasure (right to be forgotten): Right to have your personal data deleted or erased. It should be noted that this is not an absolute right, as we may have legal or legitimate reasons to retain them.
  • Right to restriction of processing: Right to request the restriction of the processing of your data (we can store them, but not continue to use or process them) in certain circumstances provided for by the General Data Protection Regulation:
    • If you contest the accuracy of your personal data, during the period in which the data controller verifies their accuracy;
    • If the processing is unlawful and you oppose the erasure of the personal data and request instead the restriction of their use;
    • If the data controller no longer needs the personal data for the purposes of the processing, but you need them for the establishment, exercise, or defense of legal claims;
    • If you have objected to the processing pursuant to Article 21(1), pending verification of whether the legitimate grounds of the data controller override those of the data subject.
  • Right to data portability: Right to move, copy, or transfer data from our database to another. This right can only be exercised in relation to the data you have provided to us, when the processing is based on a contract or your consent, and the processing is carried out by automated means.
  • Right to object: Right to object to the processing of your data when it is based on legitimate interests, including profiling and direct marketing.
  • Right to Withdraw Consent: Right to withdraw any consent you have given for processing. The withdrawal of consent does not affect the legality of the processing based on the consent before its withdrawal.
  • Right to File a Complaint with the Supervisory Authority:If you believe that any of your rights and/or freedoms have been violated, you have the right to file a complaint with the competent supervisory authority.

    • HOW ARE YOUR DATA PROCESSED IN INNERFLOW’S SOCIAL MEDIA PROFILES?

    innerFlow is present on social media and may process the personal data of individuals who become followers of innerFlow on social media or take any action to connect through these platforms. You should be aware that any information you post through innerFlow’s social media profiles will become public information and will be available to visitors and the general public. This means that any user located anywhere in the world can access your information. In this regard, you should exercise special care and diligence when disclosing personal information on these platforms. Additionally, the privacy policy of the respective social network applies.

    Your personal data provided on the social media platforms managed by innerFlow will be processed for the following purposes: (i) to allow access and navigation through the content and services offered through these social media platforms; (ii) to allow and manage participation in contests, promotions, raffles, or any other initiative carried out by innerFlow, and to manage the promotion of winners and the delivery of possible prizes; (iii) to send information or commercial communications related to our services; (iv) to contact you in case of comments, complaints, or claims related to our services and to manage complaints received from third parties about abuses; (v) to moderate any use you may make on innerFlow’s social media.

    PROCESSING OF MINORS’ DATA

    The data collection forms on this website are not intended for individuals under 18 years of age. Legal guardians or parents of minors must authorize the processing of the minor’s data in advance.

    IF YOU ARE UNDER 18 YEARS OLD, YOU CANNOT PROVIDE YOUR PERSONAL DATA ON THIS WEBSITE. ASK YOUR PARENT OR GUARDIAN TO HELP YOU READ THIS INFORMATION AND EXPLAIN ANYTHING YOU DO NOT UNDERSTAND.

    innerFlow will make reasonable efforts to verify that the legal guardian or parent of the child has given their consent, taking into account the available technology. To this end, we may request a contact address for those to whom we can send correspondence. innerFlow may contact you at any time to verify that you are indeed the age you indicated on the corresponding registration form. innerFlow may request a copy of your identification, giving you a deadline to provide it. Failure to meet the deadline or failure to provide any proof required by innerFlow may result in the blocking of your account until you prove that you are over 18 years old.

    USER RESPONSIBILITY FOR USE AND CONTENT

    Both access to the websites and the use that may be made of the information and content included therein will be the sole responsibility of the person who performs it. Therefore, the use that may be made of the information, images, content, and/or products reviewed and accessible through it will be subject to the legality, whether national or international, applicable, as well as to the principles of good faith and lawful use by the Users, who will be entirely responsible for such access and proper use. Users are obliged to make reasonable use of the services or content, under the principle of good faith and with respect for current legality, morality, public order, good customs, the rights of third parties, or innerFlow itself, all according to the possibilities and purposes for which they are conceived. innerFlow does not assume any responsibility, whether direct or indirect, for consequential damage or lost profits, derived from the misuse of the services or content made by Users or third parties.

    UPDATES TO THIS PRIVACY POLICY

    We may modify this privacy policy. The “Effective Date” at the bottom of this policy indicates when it was last revised. Changes will take effect once the Privacy Policy is published.

    Last updated: January 29, 2025.