Privacy Policy (GDPR)

Last updated: March 2026.

This document has been drafted in accordance with the following regulations:

Regulation (EU) 2016/679 (GDPR) on the protection of natural persons with regard to the processing of personal data.
Organic Law 3/2018 (Spain) on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
Law 34/2002 (LSSI-CE) on Information Society Services and Electronic Commerce.

Depending on the requested services, INTERPOLYS may process:

Identification Data: First name, last name, official identification document data (DNI, NIE, passport), and date of birth to verify legal age.
Contact Information: Email address, phone number, and city of residence.
Service Provision Details: Location and date of examination, number of participants, information from preliminary questionnaires, and the general purpose of the test.
Examination Data: Psychophysiological indicators (respiration, heart rate, skin conductivity), test results, and the final expert report.
Payment Information: Transaction data (processed through secure systems without storing full card details on company servers).
Technical Data: IP address, browser parameters, time spent on the site, and cookies.

Purpose of Processing	Legal Basis (GDPR)
Booking management and conduct of the test	Performance of a contract (Art. 6.1.b)
Identity and age verification	Performance of a contract and legal obligation (Art. 6.1.c)
Communication (confirmations, reminders)	Performance of a contract (Art. 6.1.b)
Financial accounting and invoicing	Legal obligation (Art. 6.1.c)
Preparation and issuance of the expert report	Performance of a contract (Art. 6.1.b)
Information newsletters (subject to consent)	Consent of the data subject (Art. 6.1.a)
Service and website quality improvement	Legitimate interest (Art. 6.1.f)