Privacy policy

1. Who is responsible for your data

The controller of your personal data is Gestión Académica Elena, S.L., CIF B26775684, with registered office at Paseo Sierra de las Nieves, 19, portal 3, bajo C, 29740 Vélez-Málaga (Málaga), Spain. For anything related to your data, write to hola@gestionacademicaelena.es.

2. What we collect and why

Reading the website

You can read every page without giving us any data and without any cookie from us. Like any website, our server receives the technical data your browser sends with each request (IP address, browser type, the page requested).

Buying a course

At checkout we ask for your first name, surname, email address and billing address (country, street, postcode, city, province). Company name and tax ID are optional. We collect these data ourselves, on our own website, and pass them to our payment service provider so that it can process the payment and calculate the taxes that apply to your purchase.

Your card details are entered only on the payment service provider's own page. We never see or store them.

We also save an order file on our server with the courses you bought, your details and the status of the payment. It is used to show your personal order page (the page you reach after paying) and to send you your access details.

Contact form

When you use the contact form, your name, email and message are sent to our mailbox so we can answer you.

Chat

If you open the chat and write, we keep on our server the messages of the conversation, any files you attach, the page you were on and, if you choose to give it, your email address. The email is optional; we use it only to answer you if you have left the page.

"Remember my details"

At checkout you can choose to have your details remembered for your next purchase. Only if you tick that option, your checkout details are stored in a cookie in your own browser. See the cookie policy.

3. Purposes and legal bases

You are not obliged to give us your data, but without the checkout details we cannot sell you a course, and without an email address we cannot answer you outside the chat.

4. Who receives your data

We do not sell your data and we do not share it for advertising. Your data reach only these categories of recipients:

• Our payment service provider, which acts as merchant of record for the payment. It receives the checkout details listed above and processes them to take the payment, prevent fraud, calculate taxes and meet its own legal obligations, as an independent controller under its own privacy notice, which is available on its payment page.
• Our hosting provider, which stores the website, the order files and the chat on our behalf, as a processor.
• Our email provider, which handles our mailbox and the emails we send you, as a processor.
• Public authorities, such as the tax authorities, only when the law requires it.

5. External requests that see your IP address

To display the pages, your browser loads some files directly from third-party servers. These requests do not set any cookie from us, but, like every request on the internet, they send your IP address and basic browser information to the server that answers:

• Fonts: fonts.googleapis.com and fonts.gstatic.com (Google Fonts), for the typefaces of the site.
• Photos: images.pexels.com, the stock-photo library the pictures on the site come from.
• Payment icons: cdn.jsdelivr.net, for the small card and wallet logos at the bottom of each page.

6. How long we keep your data

• Order data: for as long as your access lasts, and then for the periods Spanish commercial and tax law requires us to keep records of sales — six years for accounting records under article 30 of the Código de Comercio.
• Contact form, chat and email messages (including attached files and the optional email given in the chat): deleted 12 months after the last message of the conversation.
• "Remember my details" cookie: 180 days, or until you use "Forget my details" on the checkout page or delete it from your browser.

7. Transfers outside the European Economic Area

Some of our providers, or companies in their groups, may process data outside the European Economic Area. We only work with providers that offer appropriate safeguards for such transfers under the GDPR, such as an adequacy decision of the European Commission or the Commission's standard contractual clauses.

8. Your rights

You can ask us at any time for access to your personal data, and for rectification, erasure, restriction of processing, portability, or you can object to processing based on legitimate interest. Where processing is based on your consent, you can withdraw it at any time, without affecting what was done before.

To exercise any of these rights, write to hola@gestionacademicaelena.es. We may ask you to confirm your identity, and we answer within one month.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).

9. Automated decisions

We do not take decisions about you based solely on automated processing, and we do not build profiles of our visitors or customers.

10. Changes to this policy

If the way we handle data changes, we will update this page. The date at the top shows the last change.