This Privacy Policy describes how Coformación® (hereinafter, "we", "us", "our", or the "Academy") collects, uses, and protects the personal information of users who access this website and contract our training services.
This document has been updated to strictly comply with the General Data Protection Regulation (GDPR - EU 2016/679) and the Spanish Organic Law 3/2018 (LOPDGDD).
1. Data Controller
- Identity: Coformación Compliance SL
- Tax ID (C.I.F.): B27683317
- Postal Address: Francisco Silvela, 110. 28002 Madrid, Spain.
- Email: [email protected]
2. Purpose of Data Processing
We process personal data provided by the User for the following purposes:
- Academic Management: To process enrollment, conduct the assessment exam, and issue the official certificate of completion.
- Administrative Management: Billing for services and fulfillment of tax obligations.
- Student Support: Sending transactional emails necessary for the provision of the service (certificate download links, invoice copies, and responses to inquiries).
- Certificate Verification: Maintaining a secure registry to allow validation of certificates by competent authorities or the student in the future.
Important: We do not use your data for commercial communications (newsletters) or third-party advertising.
3. Legal Basis for Processing
The legal basis for processing your data is:
- Execution of a Contract: Necessary for the provision of the training service and the issuance of the certificate requested by the User.
- Legal Obligation: For issuing invoices and complying with tax and food safety regulations.
- Consent: For inquiries made through contact forms.
4. Data Retention Period
Personal data provided will be kept as long as the commercial relationship is maintained and, after its termination, for the time necessary to comply with legal obligations (e.g., 5 years for billing purposes).
However, data related to the certification obtained will be kept indefinitely in our database to allow the student to request duplicates or verify the validity of their title before health inspections at any time.
5. Recipients and Transfers
Your data will not be transferred to third parties, except by legal obligation or technical necessity for the provision of the service:
- Payment Providers: Financial data is managed directly by Stripe, PayPal, or RedSys (LaCaixa) depending on the chosen method. We do not store credit card numbers on our servers.
- Hosting: Our technological infrastructure is hosted within the European Union (Hetzner Online GmbH, Germany), complying with the security standards required by the GDPR.
6. User Rights
You have the right to obtain confirmation as to whether we are processing your personal data and, specifically, you may exercise the following rights:
- Access: To know what data we hold about you.
- Rectification: To correct inaccurate data.
- Erasure (Right to be Forgotten): To request the deletion of your data when it is no longer necessary (please note that this will invalidate the possibility of verifying your certificate in the future).
- Objection and Restriction: To object to processing or request that its use be restricted in specific circumstances.
- Portability: To receive your data in a structured electronic format.
To exercise these rights, you may send a written communication attaching a copy of your ID/Passport to [email protected].
7. Right to Complain to the Supervisory Authority
If you consider that the processing of your data violates the regulations, you have the right to file a claim with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
