Privacy Policy

Last updated: 17 October 2026

This is an English translation provided for convenience. The Spanish version of this document is the reference version.

This policy explains how we process personal data related to the website iterspain.com and the services of Iter Spain Education.

1. Data controller

• Controller: ---, trade name Iter Spain Education
• Tax ID (NIF): ---
• Address: ---
• Contact email: info@iterspain.com

2. Which data we process

• Identification and contact: first name, last name, email and, if you provide it, phone number.
• Data about your enquiry: programme of interest, country of residence, comments, the approximate country inferred from your IP address when you submit the form, and the communications we exchange.
• Data to manage a possible admission: academic information and documents you choose to send us, which may include identity documents when a specific procedure requires it.
• Communications and meetings: messages by email, WhatsApp or Telegram and, in some meetings, notes and text transcripts.
• Technical data: IP address and browsing data processed by the active technical or analytics services (analytics only if you accept it).

Please do not use the form to send identity documents or especially sensitive data. When they are needed for a procedure we will tell you how to send them.

3. Purposes and legal bases

4. How the form works and which providers are involved

When you submit the contact form, your data (first name, last name, email, optional phone number with its dial code, country of residence, programme of interest, comments and approximate country) is sent to:

• Web3Forms, which forwards the message to our mailbox info@iterspain.com.
• Make, an automation tool that records your data as a contact and opportunity in our CRM.
• HubSpot, the CRM where we manage enquiries and their follow-up.
• A script of our own website that sends you a confirmation email through Brevo, an email delivery service.

The mailbox info@iterspain.com and the website hosting are with Hostalia. To obtain your approximate country, your browser queries ipapi.co with your IP address, only at the moment you submit the form.

We also use other services to support our work: Fireflies (meeting transcription, see section 6), Google calendar and document storage tools, and artificial intelligence assistants connected to our work tools. We will keep this list up to date if the services change. If you write to us on WhatsApp or Telegram, those platforms also process your messages under their own terms.

5. Academic and identity documents

When a specific application requires it, you may send us academic or identity documents. We will process them only for the purpose we explain to you in each case and will share them only with universities, legal advisers or other recipients needed for the procedure you ask us to carry out. Before sharing documents we check who the recipient is and send only what is necessary. We avoid keeping duplicate or unnecessary copies.

6. Meetings and transcripts

In some video-call meetings we use Fireflies to generate text transcripts and summaries. We inform participants at the start of the meeting. If you prefer it not to be used in your meeting, tell whoever is leading it or write to us at info@iterspain.com; you can also ask us to delete the transcript.

7. Recipients and international transfers

Your data may be processed by the technology providers listed above (hosting, email, email delivery, automation, CRM, analytics, approximate country detection and transcription). We may also disclose it to universities, legal professionals or other service providers when necessary for the procedure you have asked us to carry out.

Some of these providers may process data outside the European Economic Area. In those cases, the transfer relies on the safeguards provided by the GDPR, such as an adequacy decision or standard contractual clauses. You can ask us for more information at info@iterspain.com.

8. Retention periods

• Enquiries that do not become clients: up to 12 months from the last meaningful interaction.
• Clients and files: for as long as the service lasts and, afterwards, for the periods required by legal obligations and the time needed to bring or defend claims.
• Identity documents and academic documentation: only for the time needed for the specific procedure, unless there is a legal obligation.
• Commercial communications: until you withdraw your consent or object.
• Cookies: according to the duration stated in the Cookie Policy.

9. Minors

Our services may be of interest to students who are minors. If you fill in the form with another person's data, you declare that you are authorised to do so. When the person concerned is a minor, we will need the involvement of their parent or legal guardian before processing their data beyond answering the enquiry.

10. Your rights

You can request access, rectification, erasure, objection, restriction of processing and portability of your data, and withdraw at any time any consent you have given. Write to us at info@iterspain.com. If necessary, we will ask you for reasonable information to verify your identity.

If you consider that we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

11. Security

We apply technical and organisational measures appropriate to the risk: we limit access, use multi-step authentication where available, avoid public links for identity documents, review providers' permissions and delete copies that are no longer necessary.

12. Changes to this policy

We will update this policy when the services, purposes, providers or regulations change. The date of the last update appears at the top.