Legal
Privacy Policy
How we handle personal data on barralinstitute.eu, in compliance with the EU General Data Protection Regulation (GDPR) and Spanish LOPDGDD.
Last updated: 9 May 2026
1. Data controller
The data controller responsible for the processing of personal data on this website is Barral Institute España, the operator of the Barral Institute training centre in Madrid, Spain.
- Trading name: Barral Institute España
- Address: Madrid, Spain
- Email: info@barralinstitute.es
- Website: https://barralinstitute.eu
Tax ID and full registration details available on request from the email above.
2. What personal data we collect
We collect only the data you choose to provide to us:
- Contact form: name, email, country, message.
- Chat assistant (Alba): any details you decide to share in conversation, plus name, phone and email if you complete the lead form inside the chat.
- Direct email: any details you include when writing to
info@barralinstitute.es.
We do not use behavioural advertising trackers, third-party pixels (Meta, LinkedIn, TikTok, etc.) or fingerprinting.
3. Purposes and legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Replying to your enquiry and providing information about our courses | Consent (6.1.a) and pre-contractual measures (6.1.b) |
| Sending course updates only if you request them | Consent (6.1.a) |
| Internal records of communications and applications | Legitimate interest (6.1.f) and legal obligations (6.1.c) |
4. Recipients
Your data is processed by Barral Institute España. We use the following processors, all bound by GDPR-compliant data processing agreements:
- Hostinger (web hosting, EU servers)
- OVH (email service for
info@barralinstitute.es, EU) - Self-hosted n8n (workflow automation, EU)
- Self-hosted NocoDB (lead storage, EU)
We do not transfer personal data outside the European Economic Area.
5. Retention
Contact-form messages are kept for the time strictly needed to reply to you, plus up to 24 months for follow-up unless you ask us to delete them earlier. Records linked to course applications and invoices are kept as long as Spanish tax law requires (6 years from the date of the operation).
6. Your rights
Under GDPR you have the right to:
- Access your data
- Have inaccurate data corrected
- Have your data erased ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise any of these rights, write to info@barralinstitute.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).
7. Cookies
This website uses only technical cookies necessary for navigation. We embed Google Fonts, which may set cookies on the fonts.googleapis.com domain. We do not use analytics, advertising or tracking cookies. See our Cookies Policy.
8. Changes to this policy
This policy may be updated. The date at the top reflects the latest revision.