1) Data controller
Controller: EU Campus Learning S.L. (hereinafter, the “Controller”)
Tax ID (NIF/DNI): B24814691
Registered office: Pasaje Frigiliana 6 3IZQ
Contact email (data protection): info@eucampus.com
Domain: www.eucampus.com
2) Data processed
- Identification and contact: first name, surname, email, telephone.
- Account/course: username, password (hashed), progress, test results, comments/support.
- Billing and payments: tax ID, address, payment method, amounts; card details are processed by the payment gateway — the Controller does not access the full card number.
- Communications: emails and messages sent.
- Technical/web usage: IP, logs, identifiers, browsing and events (cookies/similar technologies; see Cookie Policy).
3) Purposes and legal bases
- Provision of the service (registration, access, support): performance of a contract.
- Billing and legal compliance: legal obligation.
- Operational and security communications: legitimate interest.
- Our own commercial communications: consent (for existing customers, information about similar services may be sent, with the right to opt out).
- Analytics and service improvement / fraud prevention: legitimate interest.
- Advertising based on third-party cookies/IDs (Google/Meta, etc.): consent via the banner/panel.
4) Recipients and processors
- Suppliers (processors): hosting/LMS, transactional email, analytics, support, payment gateway, newsletters; under a data processing agreement (Art. 28 GDPR).
- Legal obligations: public administrations, authorities and law enforcement where applicable.
- International transfers: carried out with adequate safeguards (Standard Contractual Clauses, adequacy decisions or equivalent mechanisms).
You may request an up-to-date list of processors and destination countries by writing to the contact email.
5) Retention periods
- Account and training records: for the duration of the relationship and the periods required for liability purposes.
- Billing/accounting: 6 years (commercial law) and 4 years (tax law).
- Marketing/commercial: until you withdraw consent or object.
- Security/usage logs: reasonable periods (e.g. 12 months) except in the event of incidents.
6) Rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time. We will respond within one month (extendable by two months in complex cases). You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
How to exercise them: write to info@eucampus.com, stating “Exercise of GDPR rights” and, if necessary, attaching proof of identity.
7) Security
The Controller applies appropriate technical and organisational measures (encryption in transit, access control, backups, least privilege, third-party verification, etc.) and reviews them periodically according to the risks and nature of the processing.
8) Minors
The website and courses are not aimed at children under 14. If we detect the registration of a child under 14 without the consent of their legal representatives, the account will be cancelled and the data reasonably erased.
9) Cookies
First-party and third-party cookies are used for technical, analytical and advertising purposes. Non-essential cookies are installed only with your consent via the banner/panel, where you can accept, reject or configure them by purpose and withdraw your consent later. See the Cookie Policy.
10) Commercial communications
All electronic commercial communications will identify their advertising nature and the sender, and will include free and simple unsubscribe mechanisms. For existing customers, we may send you information about similar services; you may object at any time.
11) Automated decisions and profiling
No decisions with legal effects are taken based solely on automated processing. Basic profiling may be carried out (segmentation by purchased course or progress) to tailor communications and content, based on legitimate interest or consent where advertising cookies are involved. You may object or withdraw your consent.
12) Changes to this Policy
The Controller may amend this Policy to reflect regulatory or processing changes. The version in force will be published together with its last update date.
Last updated: 15/12/2025