Skip to main content
Logo Symbol Inner Flow
→ Log in
Join Now
Logo Inner Flow
Logo Symbol Inner Flow

Privacy policy

This personal data protection policy establishes the basis on which Inner Flow Studio S.L. processes your personal data when you provide it to us during your experience through our website www.innerflow.es (hereinafter, “the Website”).

Protection of personal data is of vital importance to us, and we believe that proper treatment of this data based on transparency with our customers generates trust and peace of mind.

Please remember that whenever you browse, purchase our services or products, or use the services and features of the Website, and you are requested to provide personal data or it is necessary for us to access them, this Privacy Policy applies to you. Therefore, you should read it and confirm your agreement with it. Review it periodically in case any changes occur.

WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

Identity: INNER FLOW STUDIO S.L. (also referred to as “innerFlow,” “we,” or “our”).
Tax Identification Number (CIF): B13649181
Address: C/Bailen 194, Bajos, Puerta 2, 08037 Barcelona
Phone: 934872122

If you have any questions, requests, or concerns about the processing of your personal data, please contact our Data Protection Officer at hello@innerFlow.es.

WHAT PERSONAL DATA DO WE PROCESS?

When we mention that we will process your personal data, we refer to any information or data that allows us to identify you, either directly (e.g., your name and surname) or indirectly (e.g., your phone number). The personal data we collect through the Website can be obtained directly through forms, applications, devices, or social media pages, and may include data such as: name and surname, email, phone number, address, ID card number, date of birth, gender, banking or credit/debit card information (online sign-ups), whether you are a member or not, the goal of hiring certain services (losing weight, building muscle, etc.), availability schedule, or username. We also collect data indirectly, such as personal preferences and shopping habits, information about how you use the Website obtained through cookies, unique numerical identifiers like your computer’s IP address, or user-generated content.

FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

The data collected or received through the Website is processed for the following purposes:

  • User support: to respond to inquiries, requests for information, complaints, and suggestions that may be made to us through the Website, which may be related to any of our services, products, prices, promotions, among others.
  • Contractual relationship management: this includes managing online sign-ups as a customer, downloading an invitation, or registering for activities, courses, or events; contacting you to complete the online sign-up when you have initiated the process to assist you with any information you may need; sending the corresponding documentation; processing and monitoring the sign-up until you arrive at the center to complete the procedures (e.g., delivering the access bracelet); addressing your inquiries and managing any disputes related to these transactions; administering online sign-up payment; managing the customer loyalty program; allowing your participation in contests, posting comments and content on our blog and social media, as well as showing you the schedules of directed activities at the center (app). It may also include allowing you to register on the website, whether you are an innerFlow customer or not, and allowing the actions provided for in the private area (if available) of the Website (“Online Management”).
  • Commercial, promotional, and marketing activities: we may contact you for commercial follow-up and promotion of our services and products. Contact for these purposes may be made through any existing communication channel, mainly via email, phone calls, messaging services (including SMS and push notifications in the app), social media, and postal mail. These commercial actions may include contacting you by phone during the online sign-up process and showing you online ads and content on social media.
  • Creation of a commercial profile: we may collect and analyze your personal data to assess certain personal aspects, especially to analyze or predict aspects related to your personal preferences, interests, economic situation, behavior, location, or relationships with other users. Based on this analysis, we will send you tailored advertising communications or content. This treatment is also known as profiling and essentially involves categorizing a person based on their characteristics through automated processing of their personal data. It is commonly used in marketing actions and is practical for identifying consumer profiles or defining the target audience for an advertising campaign. We remind you that you have the right to object to the use of your data for the creation of a profile, as explained later in the section regarding your rights. We will never use this profile to make decisions based solely on the automated processing of your data that have legal effects on you or significantly affect you in a similar manner (e.g., denying you access to networks without any human intervention).
  • Analysis and improvement of services and products: in order to better understand the needs and expectations of users and improve our customer service, services, and products, we may send you satisfaction and quality surveys, as well as conduct statistics (these will allow us to know, for example, users’ reactions to our advertising campaigns). Likewise, to enable the proper functioning of the Website/applications and enhance the user experience (e.g., enabling proper display of content, remembering login, or preferred language), technical and functional cookies are used. These cookies collect data related to the use of the Website/applications, the referring website, registration details, pages, videos, or ads you have visited, products consulted, duration of the visit, location, and technical information (IP address, browser information, device identifier used for browsing, etc.).
  • Analysis of job applicants: in the event that you send us your CV through the designated section, please note that the personal data provided will be processed for the purpose of analyzing your candidacy and profile to evaluate your participation in current or future selection processes for hiring.
  • Compliance with legal obligations: there may be regulations that require the retention of personal data to fulfill certain legal obligations or to respond to liabilities. For example, the General Data Protection Regulation allows us to keep the personal data of those who have exercised their right to erasure during the period when liabilities may arise, in order to be able to formulate, exercise, or defend against claims. Your data may also be kept to prevent us from sending you commercial communications if you have requested not to receive them.

HOW LONG DO WE KEEP YOUR DATA?

The personal data provided will be retained for the time necessary to achieve the purpose for which your data is processed, to respond to your requests or needs, as well as to comply with our legal and regulatory obligations and defend our interests (e.g., for defense in court) or for statistical or historical purposes. The criteria for determining the retention period for your personal data are as follows:

  • Personal data obtained through online sign-up for our services: for the duration of our contractual relationship;
  • Personal data obtained when contacting us for an inquiry: for the time necessary to address your inquiry;
  • Personal data obtained when creating an online account (online management): for the duration of our contractual relationship if you are a customer or, in the case of non-subscribers, until you request deletion or after a period of inactivity (no active interaction with us), we may automatically delete it;
  • Personal data obtained when consenting to receive commercial communications: until you unsubscribe, request deletion, or after a period of inactivity (no active interaction with us);
  • Personal data of job applicants: for the duration of the selection process and for a maximum period of two years. After this period, if you wish to continue participating in selection processes, you must resubmit your CV;
  • Cookies installed on your computer: we keep them for the time necessary to achieve their purposes (e.g., during a session for shopping cart cookies or session identification cookies).

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?

The legal basis for the processing of your personal data may be:

  • Your consent (e.g., sending commercial communications or quality surveys);
  • Our legitimate interest, which may include:
  • Conducting statistics: to help us better understand your needs and expectations and, therefore, improve our customer service, websites/applications/devices, products, and brands.
  • Enabling the operation of our website/applications through technical and functional cookies: keeping our tools (websites/applications/devices) safe and secure, ensuring they work correctly, and continuously improving them.
  • Profiling. Providing you with our customer service. Performance of a contract: providing the services you request;
  • Compliance with legal obligations that require the processing of personal data (e.g., billing).

TO WHICH RECIPIENTS WILL YOUR DATA BE DISCLOSED? IS THERE INTERNATIONAL TRANSFER OF DATA?

Your data will not be disclosed to third parties with whom innerFlow has entered into any type of collaboration agreement to send you commercial information. Instead, the third party’s information will be included in the communications that innerFlow is already sending you (e.g., by including a banner in innerFlow’s newsletter).

Your personal data may be processed or stored in countries outside the European Economic Area (EEA), depending on the location of our service providers. Data will only be transferred outside the EEA if comparable guarantees are provided. Service providers located outside the EEA, such as Facebook, Inc. or Google, LLC, may have access to your personal data. These service providers are covered by the Privacy Shield and, therefore, are required to protect your personal data in accordance with a set of protection rules and safeguards defined by the European Union.

WHAT ARE YOUR RIGHTS REGARDING THE PROCESSING OF YOUR DATA?

Data protection regulations grant you certain rights so that you can have control over your data, which you can exercise at any time by contacting us via email at hello@innerflow.es.

You have the following rights:

INFORMATION RIGHT:

You have the right to obtain clear, transparent, and easy-to-understand information about how we use your personal data and your rights. We provide you with this information in this Policy.

ACCESS RIGHT: 

You have the right to know whether we are processing your personal data and, if so, the purposes for which they are processed, the categories of data, recipients, retention periods, and your rights, among others. An administrative fee may be charged for this.

RIGHT TO RECTIFICATION:

You have the right to have your personal data rectified when they are inaccurate, no longer valid, or incomplete.

RIGHT TO ERASURE (RIGHT TO BE FORGOTTEN)

In certain cases, you have the right to have your personal data erased or deleted. It should be noted that this is not an absolute right, as we may have legal or legitimate reasons to retain them.

RIGHT TO RESTRICT PROCESSING

You have the right to request the restriction of the processing of your data (we can store them but not continue to use or process them) in certain circumstances provided by the General Data Protection Regulation:

  • If you dispute the accuracy of your personal data, for the period during which the controller verifies their accuracy;
  • If the processing is unlawful, and you oppose the erasure of personal data and request the restriction of their use instead;
  • If the controller no longer needs the personal data for the purposes of the processing, but you need them for the establishment, exercise, or defense of legal claims;
  • If you have objected to processing under Article 21(1) while it is verified whether the legitimate grounds of the controller override those of the data subject.

RIGHT TO DATA PORTABILITY

You have the right to move, copy, or transfer data from our database to another. This right can only be exercised in relation to data you have provided, when processing is based on a contract or your consent, and processing is carried out by automated means.

RIGHT TO OBJECT TO PROCESSING

You have the right to object to the processing of your data when it is based on legitimate interests, including profiling and direct marketing.

RIGHT TO WITHDRAW CONSENT

You have the right to withdraw any consent you may have given for processing. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

You have the right to lodge a complaint with the Spanish Data Protection Agency if you believe your rights regarding the protection of personal data have been violated (www.agpd.es).

HOW ARE YOUR DATA PROCESSED IN INNERFLOW’S SOCIAL MEDIA PROFILES?

innerFlow is present on social media and may process the personal data of people who become followers of innerFlow on social media or take any connecting action through these platforms. You should be aware that any information you post through innerFlow’s social media profiles will become public information and will be available to visitors and the general public. This means that any user located anywhere in the world can access your information. In this regard, you should exercise special care and diligence when disclosing personal information on these platforms. Additionally, the privacy policy of the corresponding social network applies to you.

Your personal data provided on social media platforms managed by innerFlow will be processed for the following purposes: (i) enabling access and navigation of the content and services offered through these social media platforms; (ii) enabling and managing participation in contests, promotions, sweepstakes, or any other initiatives carried out by innerFlow, and managing the promotion of winners and the delivery of potential prizes; (iii) sending information or commercial communications related to our services; (iv) contacting you in case of any comments, complaints, or claims regarding our services and managing reports received from third parties about abuse; (v) moderating any uses you may make on innerFlow’s social media.

DATA PROCESSING OF MINORS

The data collection forms on this website are not intended for individuals under 18 years of age. The legal guardians or parents of minors must authorize the processing of the child’s data.

IF YOU ARE UNDER 18 YEARS OF AGE, YOU CANNOT PROVIDE YOUR PERSONAL DATA ON THIS WEBSITE. ASK YOUR FATHER OR MOTHER TO HELP YOU READ THIS INFORMATION AND EXPLAIN ANYTHING YOU DO NOT UNDERSTAND.

innerFlow will make reasonable efforts to verify that consent has been given by the legal guardian or parent of the child, taking into account the available technology. To this end, we may request a contact address for those to whom we can send correspondence. innerFlow may contact you at any time to verify that you are indeed the age you stated in the corresponding registration form. innerFlow may request a copy of your ID, giving you a deadline to provide it. Failure to meet the deadline or failure to provide any evidence required by innerFlow may result in the blocking of your account until you prove that you are over 18 years of age.

UPDATES TO THIS PRIVACY POLICY

We may modify this privacy policy. The “Effective Date” at the bottom of this policy indicates when it was last revised. Changes will take effect once the Privacy Policy is published.

Effective Date: October 1, 2023.