Privacy Policy

PRIVACY POLICY

Last updated: 18 October 2026

1. Data Controller

This Privacy Policy explains how personal data is collected and processed by EURO-ASIA TOURISM SCHOOL OF BUSINESS, S.L., operating commercially under the brand WIM & CO.

Data Controller: EURO-ASIA TOURISM SCHOOL OF BUSINESS, S.L.
CIF: B21893516
Trading name: WIM & CO.
Address: Calle Julián Romea 11, Semisótano 1, 28003 Madrid, Spain
Email: info@wimco.es
Website: https://www.wimco.es

For the purposes of Regulation (EU) 2016/679 ("GDPR") and applicable Spanish data-protection legislation, including Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights ("LOPDGDD"), EURO-ASIA TOURISM SCHOOL OF BUSINESS, S.L. is the Data Controller responsible for the processing of personal data described in this Privacy Policy.

2. Purpose and Scope

This Privacy Policy applies to personal data collected and processed through:

  • the WIM & CO. website;
  • contact and enquiry forms;
  • email communications;
  • communications with prospective and existing clients;
  • administrative and procedural services provided by WIM & CO.;
  • documentation voluntarily provided by clients;
  • business and administrative relationships with clients, suppliers and professional contacts.

We process personal data in accordance with applicable data-protection legislation and the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality.

3. Personal Data We May Collect

Depending on the service requested and the nature of our relationship with you, we may process the following categories of personal data.

Identification information

  • Full name
  • Date of birth
  • Nationality
  • Passport or identification information
  • NIE or other identification numbers where necessary

Contact information

  • Email address
  • Telephone number
  • Postal address
  • Other contact information provided by you

Professional and business information

Where necessary for a requested service:

  • Employer information
  • Professional position
  • Professional activity
  • Employment information
  • Business information
  • Self-employment or autónomo information
  • Company information

Administrative and procedural information

Where necessary to provide an administrative service, we may process information contained in documents relating to:

  • residence procedures;
  • International Teleworker / Digital Nomad applications;
  • family or dependent applications;
  • government registrations;
  • government applications;
  • supporting documentation;
  • administrative appointments;
  • communications with public authorities.

Communication information

We may process information contained in communications between you and WIM & CO., including emails, enquiries, messages and service-related correspondence.

Technical information

When you use our website, certain technical information may be processed automatically, depending on the website configuration and technologies in use, such as:

  • IP address;
  • browser type;
  • device information;
  • operating system;
  • technical identifiers;
  • date and time of access;
  • pages visited;
  • security and technical logs.

4. Purposes of Processing

We may process personal data for the following purposes.

4.1 Responding to enquiries

To:

  • respond to enquiries;
  • provide information about WIM & CO. services;
  • communicate with prospective clients;
  • arrange consultations or communications;
  • evaluate requests for assistance.

4.2 Providing administrative services

Where you engage WIM & CO., we may process personal data to:

  • organize documentation;
  • prepare administrative forms;
  • assist with government procedures;
  • prepare applications;
  • submit applications where authorized;
  • communicate with competent administrative authorities;
  • monitor procedural status;
  • provide administrative follow-up;
  • assist with government appointments;
  • respond to administrative requests.

4.3 Client relationship management

To:

  • manage client relationships;
  • maintain service records;
  • communicate with clients;
  • manage appointments;
  • administer agreements;
  • provide customer support.

4.4 Billing and accounting

To:

  • issue invoices;
  • process payments;
  • maintain accounting records;
  • comply with tax and accounting obligations;
  • manage financial and contractual records.

4.5 Website operation and security

To:

  • operate and maintain our website;
  • protect the website and systems;
  • detect and prevent fraud, abuse and unauthorized access;
  • troubleshoot technical problems;
  • maintain website security.

4.6 Legal and regulatory compliance

To:

  • comply with legal obligations;
  • respond to lawful requests from competent authorities;
  • establish, exercise or defend legal claims;
  • maintain records required by law.

5. Legal Bases for Processing

Depending on the particular processing activity, we rely on one or more of the following legal bases under Article 6 GDPR.

Performance of a contract

Processing may be necessary to provide services requested by you or to take steps at your request before entering into a contract.

Compliance with a legal obligation

Processing may be necessary to comply with legal, accounting, tax or regulatory requirements.

Legitimate interests

Processing may be necessary for our legitimate business interests, provided that those interests do not override your fundamental rights and freedoms.

Examples may include:

  • maintaining business records;
  • managing professional communications;
  • protecting our website and systems;
  • preventing fraud or misuse;
  • protecting our legal interests.

Consent

Where consent is the appropriate legal basis, we will request it separately and clearly.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

A general acceptance of this Privacy Policy is not automatically treated as consent to every possible processing activity. Where consent is legally required, it will be requested separately. This distinction is specifically recommended by the AEPD. AEPD

6. Administrative and Government Procedures

WIM & CO. provides administrative and procedural assistance in connection with Spanish administrative processes.

Where you instruct us to assist with a government procedure, the personal information you provide may be used to:

  • prepare administrative documentation;
  • complete forms;
  • organize supporting documents;
  • submit applications where authorized;
  • communicate with competent authorities;
  • monitor applications;
  • respond to administrative requests;
  • provide procedural follow-up.

Where WIM & CO. acts on your behalf, the actions we may undertake will be determined by the authorization or representation granted to us.

Important professional-services limitation

WIM & CO. is a brand operated by EURO-ASIA TOURISM SCHOOL OF BUSINESS, S.L. and provides administrative and procedural assistance. It is not a law firm and does not provide legal advice, legal opinions or legal representation.

Where a matter requires professional legal advice or legal representation, clients may be referred to appropriately qualified legal professionals.

Government applications and administrative procedures are ultimately decided by the competent authorities. WIM & CO. does not guarantee approval or a particular administrative outcome.

7. Information Relating to Other Individuals

If you provide personal information concerning another person, such as:

  • a spouse;
  • family member;
  • dependent;
  • employee;
  • business partner;
  • other applicant,

you should ensure that you are authorized to provide that information and that the relevant person has been appropriately informed where required by law.

8. Special Categories of Personal Data

Certain administrative procedures may involve documents containing information that falls within special categories of personal data under Article 9 GDPR.

Where such information is processed, we will only process it where an appropriate legal basis and applicable condition under data-protection law exists and where the processing is necessary for the relevant purpose.

Clients should not provide unnecessary sensitive information through general website contact forms.

Where explicit consent is required by law, it will be requested separately.

9. Recipients of Personal Data

Personal data may be disclosed where necessary for the purposes described in this Privacy Policy.

Depending on the service, recipients may include:

  • Spanish public administrations;
  • competent government authorities;
  • courts or other competent authorities where legally required;
  • professional advisers;
  • qualified legal professionals where appropriate;
  • accountants and financial advisers;
  • IT and technology providers;
  • website hosting providers;
  • communications providers;
  • payment service providers;
  • other service providers acting on our behalf.

We do not sell personal data to third parties.

Where a third-party service provider processes personal data on our behalf, appropriate contractual and organizational measures will be implemented where required by applicable data-protection legislation.

10. International Transfers

Some technology or service providers used by WIM & CO. may process personal data outside the European Economic Area ("EEA").

Where personal data is transferred outside the EEA, we will ensure that an appropriate legal transfer mechanism is used where required, which may include:

  • an European Commission adequacy decision;
  • Standard Contractual Clauses;
  • another legally recognized transfer mechanism.

The specific safeguards applicable to a particular transfer will depend on the service provider and processing activity.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods may depend on:

  • the nature of the service;
  • the duration of the client relationship;
  • legal and regulatory requirements;
  • accounting and tax obligations;
  • administrative requirements;
  • potential legal claims or disputes.

When personal data is no longer required, it will be deleted, anonymized or securely disposed of where appropriate.

Where a specific period cannot be determined in advance, we use appropriate criteria to determine how long the information should be retained.

12. Your Data Protection Rights

Under applicable data-protection legislation, you may have the right to:

  • Access your personal data;
  • Rectify inaccurate or incomplete personal data;
  • Request erasure of your personal data where legally applicable;
  • Request restriction of processing in certain circumstances;
  • Object to certain processing;
  • Request data portability, where applicable;
  • Withdraw consent where processing is based on consent.

You may also have rights concerning automated decision-making and profiling where the requirements of Article 22 GDPR apply.

These rights are subject to applicable legal limitations and exceptions.

The GDPR specifically requires information about these rights to be provided to data subjects. Eur-Lex

13. How to Exercise Your Rights

You may exercise your data-protection rights by contacting:

EURO-ASIA TOURISM SCHOOL OF BUSINESS, S.L.
Email: info@wimco.es

Please include:

  • your full name;
  • the right you wish to exercise;
  • sufficient information to identify your request;
  • any information reasonably necessary to verify your identity.

We may request additional information where reasonably necessary to verify the identity of the requester.

We will respond within the applicable legal period.

14. Right to Lodge a Complaint

If you believe that your personal data has been processed unlawfully or that your data-protection rights have not been adequately respected, you may lodge a complaint with the competent supervisory authority.

In Spain, the supervisory authority is:

Agencia Española de Protección de Datos (AEPD)

The AEPD provides information concerning data-protection rights and complaint procedures. AEPD

15. Cookies and Similar Technologies

The WIM & CO. website may use cookies and similar technologies.

Depending on their purpose, these may include:

  • strictly necessary cookies;
  • functionality cookies;
  • analytics cookies;
  • security cookies;
  • other technologies required for website operation.

Where consent is legally required, non-essential cookies will not be activated until the appropriate consent has been obtained.

For detailed information about the cookies actually used on our website, please refer to our:

Cookie Policy

The Cookie Policy should reflect the actual cookies and third-party technologies installed on the website, rather than generic services that WIM & CO. does not use.

16. Data Security

EURO-ASIA TOURISM SCHOOL OF BUSINESS, S.L. implements appropriate technical and organizational measures designed to protect personal data against:

  • unauthorized access;
  • unlawful processing;
  • accidental loss;
  • destruction;
  • alteration;
  • unauthorized disclosure.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

17. Third-Party Websites

The WIM & CO. website may contain links to third-party websites or services.

We are not responsible for the privacy practices, content or security of third-party websites.

We recommend reviewing the privacy policies of those websites before providing personal information.

18. Children's Data

The WIM & CO. website and services are primarily directed toward adults.

We do not intentionally collect personal data from children through general website forms where such collection is not appropriate or legally permitted.

Where a service legitimately involves a minor or dependent, information may be processed where necessary for the relevant administrative procedure and in accordance with applicable law.

19. Automated Decision-Making and Profiling

WIM & CO. does not intend to make decisions producing legal or similarly significant effects on individuals based solely on automated processing or profiling through this website.

Where this changes, the applicable privacy information will be updated as required by law.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to our services;
  • changes to our website;
  • changes in technology;
  • changes in applicable legislation;
  • changes in our data-processing activities.

The latest version will always be published on this page together with the corresponding Last Updated date.

21. Contact

For questions regarding this Privacy Policy or the processing of your personal data, please contact:

EURO-ASIA TOURISM SCHOOL OF BUSINESS, S.L.
Trading name: WIM & CO.
CIF: B21893516
Address: Calle Julián Romea 11, Semisótano 1, 28003 Madrid, Spain
Email: info@wimco.es
Website: https://www.wimco.es

Information icon

Necesitamos su consentimiento para cargar las traducciones

Utilizamos un servicio de terceros para traducir el contenido del sitio web que puede recopilar datos sobre su actividad. Por favor revise los detalles en la política de privacidad y acepte el servicio para ver las traducciones.