PRIVACY POLICY

https://www.ikinaia.com

I. PRIVACY POLICY AND DATA PROTECTION

In compliance with current legislation, IKINAIA SL (hereinafter also referred to as the “Website”) is committed to adopting the necessary technical and organizational measures, appropriate to the level of security required, in order to safeguard the personal data collected.

Laws incorporated into this Privacy Policy

This Privacy Policy is adapted to the current Spanish and European regulations on the protection of personal data on the Internet. In particular, it complies with the following:

Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 (General Data Protection Regulation, GDPR).
Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
Royal Decree 1720/2007, of December 21, approving the Regulation for the development of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

The data controller of the personal data collected on IKINAIA is:

Entity: IKINAIA, S.L.
Tax ID (NIF/CIF): B19383355
Registry: Commercial and Movable Property Registry of Las Palmas de Gran Canaria
Registration details: Volume and page 1000433209553, sheet 1000433209553
Representative: M. Dgez. (hereinafter, the “Data Controller”)

Contact details:

Address: Calle Diego de Alcalá 49, Vecindario 35110, 35280 Santa Lucía de Tirajana (Las Palmas), Spain
Email: mario@ikinaia.com

Registration of Personal Data

In compliance with the GDPR and the LOPD-GDD, we inform you that the personal data collected by IKINAIA through forms on its pages will be incorporated into our filing system for the purpose of facilitating, expediting, and fulfilling the commitments established between IKINAIA and the User, or to maintain the relationship established in the forms completed, or to respond to a request or inquiry.

In accordance with the GDPR and LOPD-GDD, except where Article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying the processing activities carried out according to their purposes and other circumstances established in the GDPR.

Principles applicable to the processing of personal data

The processing of the User’s personal data will be subject to the following principles, as set out in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018:

Lawfulness, fairness, and transparency – User consent will always be required after transparent information on the purposes of data collection.
Purpose limitation – Personal data will be collected for specified, explicit, and legitimate purposes.
Data minimization – Only strictly necessary data will be collected.
Accuracy – Data must be accurate and kept up to date.
Storage limitation – Data will only be kept as long as necessary.
Integrity and confidentiality – Data will be processed securely and confidentially.
Accountability – The Controller is responsible for compliance.

Categories of personal data

Only identifying data are processed on IKINAIA. No special categories of data (Article 9 GDPR) are processed.

Legal basis for processing

The legal basis for data processing is consent. IKINAIA undertakes to obtain the User’s express and verifiable consent for the processing of personal data for one or more specific purposes.

The User has the right to withdraw consent at any time, with the same ease as it was granted. Withdrawal does not condition the use of the Website.

Where the User is asked to provide data via forms (for inquiries, requests, or related matters), the User will be informed if completion is mandatory because the data are necessary for the proper execution of the requested operation.

Purpose of processing personal data

Personal data are collected and managed by IKINAIA for the purpose of facilitating, expediting, and fulfilling commitments established between the Website and the User, or to maintain relationships in forms completed, or to respond to a request or inquiry.

Data may also be used for commercial purposes, personalization, operational and statistical purposes, and for activities related to IKINAIA’s corporate purpose, including data extraction, storage, and marketing studies to adapt Website content and improve its quality, functionality, and navigation.

At the time of collection, the User will be informed of the specific purpose(s) of processing.

Retention period of personal data

Personal data will only be retained for the minimum necessary period according to processing purposes, or until the User requests erasure.

At the time of collection, Users will be informed of the retention period, or the criteria for determining it if exact duration is not possible.

Recipients of personal data

User data may be shared with:

Kajabi, LLC, 880 Newport Center Dr, Suite 100, Newport Beach, CA 92660, USA.
Kajabi, LLC participates in the EU–U.S. Data Privacy Framework, thereby ensuring an adequate level of protection for personal data processing in compliance with applicable European data protection law.

If data transfers to third countries or international organizations are intended, Users will be informed at the time of collection, including whether an adequacy decision by the European Commission exists.

Minors’ personal data

In compliance with Articles 8 GDPR and 7 of Organic Law 3/2018, only Users over 14 years old may lawfully consent to the processing of their personal data by IKINAIA. For children under 14, parental or guardian consent is required.

Confidentiality and security of personal data

IKINAIA undertakes to adopt the technical and organizational measures necessary to ensure the security of personal data, avoiding accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

The Website has an SSL (Secure Socket Layer) certificate to ensure that data are transmitted securely and confidentially.

However, IKINAIA cannot guarantee the absolute security of the Internet or the complete absence of hackers. In the event of a personal data security breach likely to pose a high risk to the rights and freedoms of individuals, the Controller undertakes to notify the User without undue delay.

Data will be treated as confidential, and confidentiality will be contractually or legally guaranteed with employees, partners, or anyone granted access to the information.

User rights

The User has the following rights under the GDPR and Organic Law 3/2018:

Right of access – to obtain confirmation and information on data being processed.
Right to rectification – to correct inaccurate or incomplete data.
Right to erasure (“right to be forgotten”) – to request deletion of data under certain circumstances.
Right to restriction of processing – to limit processing in certain cases.
Right to data portability – to receive data in a structured, commonly used, machine-readable format and transfer it to another controller.
Right to object – to oppose data processing.
Right not to be subject to automated decision-making, including profiling.

Users may exercise these rights by written communication addressed to the Controller with the reference “GDPR – https://www.ikinaia.com”, specifying:

Name, surname(s), and a copy of the User’s ID. Representation must be proven if exercised through a representative.
The specific request and reasons.
Address for notifications.
Date and signature.
Supporting documents, if applicable.

Requests may be sent to:

Postal address: Calle Diego De Alcalá 49, Vecindario 35110. 35280, Santa Lucía de Tirajana (Las Palmas), Spain
Email: mario@ikinaia.com

Links to third-party websites

The Website may include links to third-party websites not operated by IKINAIA. Such websites have their own privacy policies and practices, for which they are solely responsible.

Complaints before the supervisory authority

If the User believes there is a problem or violation in the handling of their data, they have the right to judicial protection and to lodge a complaint with the relevant supervisory authority.

In Spain, the competent authority is the Spanish Data Protection Agency (AEPD): https://www.aepd.es/.

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The User must have read and agreed to the conditions regarding personal data protection contained in this Privacy Policy, as well as consent to processing of their personal data for the stated purposes.

Use of the Website implies acceptance of this Privacy Policy.

IKINAIA reserves the right to modify this Privacy Policy at its discretion, or due to legislative, case-law, or regulatory updates by the Spanish Data Protection Agency.

Changes or updates will not be explicitly notified to the User, so periodic consultation of this page is recommended.

This Privacy Policy was last updated on September 24, 2025.