Privacy Policy

1. Data controller

• Name: Julien Jean Bellet Ribes
• Trading name: IA Escola
• Address: Banyeres del Penedès, 43711, Tarragona, Catalonia, Spain
• Email: hola@ia-escola.com

2. Data we collect

We only collect data needed to provide the requested service:

• Contact form: name, email, message, and (optionally) business type.
• Course registration: name, email, phone (optional), institution, and payment method.
• Newsletter: email address.
• Analytics cookies (optional, with consent only): anonymized IP, browser, pages visited.
• Communications: if you email us, we keep the conversation to provide continuity.

3. Purposes and legal basis

We process data with the following purposes and legal bases (GDPR art. 6):

• Respond to your inquiry or request (contract performance / pre-contractual measures — art. 6.1.b GDPR).
• Manage your course registration and invoicing (contract performance — art. 6.1.b GDPR).
• Send you information about courses and content (explicit consent — art. 6.1.a GDPR; you can withdraw it any time).
• Compliance with legal obligations (tax, accounting — art. 6.1.c GDPR).
• Aggregated analysis of website usage with cookies (explicit consent — art. 6.1.a GDPR).

4. Retention

We retain your data only for as long as necessary:

• Inquiry data: 1 year from last communication.
• Registration data: 5 years (tax and commercial obligations).
• Newsletter: until consent is withdrawn.
• Analytics cookies: max 30 minutes (Plausible) / 24 hours (Vercel Analytics).

5. Recipients and transfers

We do not sell or share your data. We share the minimum necessary with the providers that operate the service:

• Vercel Inc. (USA) — website hosting. Legal framework: SCC + DPF.
• Resend (USA) — transactional email. Legal framework: SCC + DPF.
• Stripe (USA) — payment processing. Legal framework: SCC + DPF.
• Plausible Analytics (EU) — web analytics without persistent cookies.
• Sentry (USA) — technical error logging. Legal framework: SCC + DPF.
• Anthropic (USA) — AI assistants in our services (only if you opt in). Legal framework: SCC.

6. Your rights

You have the right to:

• Access: know what data we hold about you.
• Rectification: correct inaccurate data.
• Erasure ("right to be forgotten"): request deletion.
• Restriction: limit processing in certain cases.
• Portability: receive your data in a structured format.
• Object: object to processing on legitimate grounds.
• Withdraw consent at any time without affecting prior lawful processing.
• Lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe your rights have not been respected.

7. How to exercise your rights

Email hola@ia-escola.com clearly indicating the right you wish to exercise and attaching a copy of an ID (to verify identity). We will respond within one month.

8. Security

We apply reasonable technical and organizational measures to protect your data: HTTPS encryption site-wide, role-based access, strong passwords, access logging, regular backups, and periodic provider review.

9. Minors

We do not offer our services directly to minors under 14. If a company contracts training for minors, it is responsible for obtaining legal guardians' consent.

10. Changes to this policy

We may update this policy to reflect legal or operational changes. The date of the last update appears at the top. If changes are substantial, we will notify you by email (if you have an account) or with a prominent notice on the site.