Privacy Policy
1. Data Controller
The data controller responsible for processing your personal data is:
Kredovento
Av. de Brasil, 29, Tetuán, 28020 Madrid, Spain
NIF: C58300171
Email: info@kredovento.com
Phone: +46 739 344 081
This Privacy Policy applies to all personal data processed through the website kredovento.com and through any communications you initiate with us.
2. Legal Framework
This policy is governed by and compliant with the following legislation:
- Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR)
- Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD)
- Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE)
3. Personal Data We Collect
We collect and process the following categories of personal data:
- Contact data: name, email address, and telephone number provided through our contact form.
- Communication data: the content of messages you send us, including information about your school and professional context.
- Technical data: IP address, browser type, operating system, pages visited, and time spent on pages, collected automatically when you visit our website.
- Cookie data: preferences and consent choices stored in accordance with our Cookie Policy.
We do not collect sensitive personal data (as defined in Article 9 GDPR) and we do not process data relating to minors directly. Our platform is directed at teachers and education professionals, not at students.
4. Purposes and Legal Bases for Processing
We process your personal data for the following purposes, each with the corresponding legal basis under Article 6 GDPR:
- Responding to enquiries (Art. 6.1.b): When you contact us through the contact form, we process your data to respond to your enquiry and to provide you with information about our curriculum materials. This processing is necessary for steps taken at your request prior to entering into a relationship with us.
- Website analytics (Art. 6.1.a): With your consent, we may use analytics tools to understand how visitors use our website. This helps us improve the content and functionality of the platform.
- Legal compliance (Art. 6.1.c): We may process your data where necessary to comply with a legal obligation, such as responding to lawful requests from public authorities.
- Legitimate interests (Art. 6.1.f): We process technical data for website security and to prevent fraud or abuse of our services.
5. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Contact form data is retained for a maximum of 24 months from the date of your enquiry, unless an ongoing relationship requires longer retention.
- Technical and analytics data is retained for a maximum of 26 months.
- Cookie preference data is retained for 12 months, after which your consent will be requested again.
After the applicable retention period, your data is securely deleted or anonymised.
6. Data Sharing and Third Parties
We do not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes.
We may share your data with the following categories of recipients:
- Service providers: We may use third-party service providers (such as email hosting or website analytics providers) who process data on our behalf as data processors under Article 28 GDPR. These providers are contractually bound to process data only on our instructions and to implement appropriate security measures.
- Legal authorities: We may disclose your data to competent authorities where required by law or by a court order.
Where data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place in accordance with Chapter V GDPR.
7. Your Rights
Under the GDPR and the LOPDGDD, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR): You may request confirmation of whether we process your personal data and obtain a copy of it.
- Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete personal data.
- Right to erasure (Art. 17 GDPR): You may request deletion of your personal data where there is no longer a lawful basis for processing.
- Right to restriction (Art. 18 GDPR): You may request that we restrict processing of your data in certain circumstances.
- Right to data portability (Art. 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
- Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests at any time.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, please contact us at info@kredovento.com. We will respond within one month of receiving your request. If you believe your rights have not been respected, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.
8. Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include encrypted data transmission (HTTPS), access controls, and regular security reviews.
No method of transmission over the internet or electronic storage is entirely secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.
9. Cookies
Our website uses cookies and similar technologies. For detailed information about the types of cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. We will indicate the date of the most recent update at the top of this page. We encourage you to review this policy periodically.
For any questions about this Privacy Policy or our data processing practices, please contact us at info@kredovento.com.