Privacy policy

1. Who is the data controller for your data?

Industria de Diseño Textil, S.A. (Inditex, S.A.), with registered office at Avda. de la Diputación, Edificio Inditex, 15143, Arteixo (A Coruña), España. We process your personal data as data controller. This means that we are responsible for how we use and protect your data. You may contact our Data Protection Officer by sending an email to: dataprotection@inditex.com

2. What do we use your data for?

We will process your personal data for the following purposes:

• To manage your registration and identification as a user (hereinafter, the “User" or the “Users", as applicable) of the Innovation Platform - Open Innovation Hub (OIH) (hereinafter, the “Platform") and assess your application, we need to process your personal data in order to manage your access to the Platform and your participation in the challenges published on the Platform.
• To develop, comply with and perform the terms of use (hereinafter, the “Conditions") of the Platform. This means that you can use the various functionalities offered by the Platform, including submitting proposals, participating in the evaluation and selection process, and accessing the information offered on the Platform.
• To communicate with you through the Platform or via the email inbox made available for this purpose, including sending notifications relating to the challenges and proposals received.
• To execute NDAs (confidentiality agreements) and, where applicable, the collaboration agreement for those proposals that have been selected in the context of the innovation processes managed through the Platform.

In all the cases detailed above, processing your personal data is necessary for the proper performance of the Conditions of the Platform and, where applicable, of the agreements and contracts entered into in the context of the innovation processes (Art. 6.1.b) GDPR).

• To conduct an aggregate analysis of the proposals received for analytical purposes.

Likewise, this processing may be based on Inditex’s legitimate interest (Art. 6.1.f) GDPR) in the management, evaluation and improvement of the Program.

For the purposes described above, we will process the following personal data: identification and contact details of the contact person of the participating entity (first name, surname, national identity document number, business email address, role and business telephone number), and, where applicable, identification and contact details of representatives, employees or collaborators of the Participants that are necessary for the proper management of the Program.

Likewise, we may access other personal data if you decide to share it through the Platform itself or via the email inbox made available for this purpose. In any event, you should only provide the personal data that is necessary to use the Platform and, where applicable, to enter into the NDA or collaboration agreement.

3. How long will we retain your data?

We will process your data for as long as necessary for you to access the Platform and while the Platform is in use, as well as for managing any proposals you may submit. Regardless of the fact that we process your data for the period strictly necessary to fulfill the aforementioned purpose, we will retain it thereafter, duly stored and protected, for as long as liabilities arising from the processing may arise, in compliance with the legislation in force from time to time. Once any potential legal actions in each case become time-barred, we will delete the personal data.

4. Who will we share your data with?

We will share your data with service providers that help us or provide technological support, whether they are companies within Grupo Inditex or external collaborators with whom we have entered into an agreement.

In particular, we may share your data with:

• Third-party partners specializing in innovation, entrepreneurship or technological development that participate in the operational management of the Program.
• Electronic signature service providers for the management and execution of confidentiality agreements (or "NDA").
• Internal or external experts who are part of the Program’s evaluation committee, to the extent necessary to assess the applications.
• Entities within Grupo Inditex that participate in the design, implementation and monitoring of the various innovation initiatives developed within the framework of the Program.

5. What are your rights?

You have the right to access, rectify or erase your personal data. In some cases, you also have other rights, such as the right to object to our use of your data, the right to restrict its processing, or the right to data portability. You may exercise your rights by emailing us at dataprotection@inditex.com, stating the reason for your request and the right you wish to exercise.

Finally, we inform you of your right to lodge a complaint with the relevant data protection supervisory authority, in particular, with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) (https://www.aepd.es/).

Last updated: 08-10-2026