Real Estate Academy Spain ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at www.realestateacademyspain.com, purchase our Products, or interact with us in any way.

This policy is written in compliance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection law (Ley Orgánica 3/2018, LOPDGDD). If you have any questions, please contact us at info@realestateacademyspain.com.

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

Real Estate Academy Spain

Website: www.realestateacademyspain.com

Email: info@realestateacademyspain.com

As data controller, we determine the purposes and means by which your personal data is processed. We do not appoint a formal Data Protection Officer (DPO) as we do not meet the thresholds requiring one, but all privacy matters can be directed to the contact details above.

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Identity and contact data: Full name, email address, and billing address when you make a purchase.

• Payment data: Credit/debit card details or payment method information, processed securely through our third-party payment provider. We do not store card details on our servers.

• Account data: Login credentials (username and password) for your course account on our learning platform.

• Usage and learning data: Course progress, assignment submissions, quiz results, and completion status.

• Technical and browsing data: IP address, browser type, device type, pages visited, and time spent on our website, collected via cookies and analytics tools.

• Communications data: Any information you provide when contacting us by email or through our contact form.

3. How We Collect Your Data

We collect personal data through the following means:

• Direct interactions: When you purchase a Product, create an account, or complete checkout on our website.

• Automated technologies: Via cookies, pixels, and similar tracking technologies when you browse our website. Please see our Cookie section (section 9) for more details.

• Third-party providers: From payment processors (such as Stripe or PayPal) when you complete a transaction.

• Communications: When you email us, fill in a contact form, or respond to a survey.

4. Legal Basis for Processing

Under GDPR, we process your personal data on the following legal grounds:

• Performance of a contract: Processing your payment, delivering your Product, and managing your account.

• Legal obligation: Where required by law, such as issuing invoices and maintaining financial records.

• Legitimate interests: To improve our website, Products, and services, and to protect against fraud — where these interests are not overridden by your rights.

• Consent: For marketing communications and non-essential cookies, where you have given us your explicit consent. You may withdraw consent at any time.

5. How We Use Your Personal Data

We use your personal data for the following purposes:

• To process your purchase and deliver access to your Products.

• To manage your account and provide customer support.

• To track your learning progress and issue your certificate of completion.

• To send you transactional emails related to your purchase (receipts, access confirmation, updates).

• To send you marketing emails about new courses, resources, or offers, where you have opted in.

• To improve our website and Products through analytics.

• To comply with our legal and financial obligations.

6. Who We Share Your Data With

We do not sell your personal data. We may share your data with the following trusted third parties who assist us in operating our business, strictly for the purposes described in this policy:

• Payment processors: To securely process payments (e.g. Stripe, PayPal).

• Learning management platform: To host and deliver our online course (e.g. TrainerCentral or equivalent LMS).

• Email service provider: To send transactional and marketing emails (e.g. Mailchimp or equivalent).

• Analytics providers: To analyse website traffic and usage (e.g. Google Analytics).

All third-party processors are required to handle your data securely and in accordance with GDPR. Where processors are located outside the EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

7. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes set out in this policy:

• Account and purchase data is retained for the duration of your access and for up to 7 years thereafter to comply with tax and financial record-keeping obligations.

• Marketing data is retained until you unsubscribe or withdraw consent.

• Website analytics data is retained in accordance with the settings of the analytics tool used (typically 14 to 26 months).

After the applicable retention period, your data is securely deleted or anonymised.

8. Your Rights Under GDPR

Under GDPR, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at info@realestateacademyspain.com.

• Right of access: To obtain a copy of the personal data we hold about you.

• Right to rectification: To correct inaccurate or incomplete personal data.

• Right to erasure: To request deletion of your personal data, subject to legal retention obligations.

• Right to restriction of processing: To request that we limit how we use your data in certain circumstances.

• Right to data portability: To receive your data in a structured, machine-readable format.

• Right to object: To object to processing based on legitimate interests or for direct marketing.

• Right to withdraw consent: To withdraw your consent at any time where processing is based on consent.

You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es.

9. Cookies

Our website uses cookies and similar tracking technologies to enhance your experience and analyse how our site is used. Cookies are small text files stored on your device.

We use the following types of cookies:

• Strictly necessary cookies: Essential for the website to function correctly (e.g. session cookies, login state). These cannot be disabled.

• Analytics cookies: Help us understand how visitors interact with our website (e.g. Google Analytics). These are only set with your consent.

• Marketing cookies: Used to deliver relevant advertising or track campaign performance. These are only set with your consent.

You can manage your cookie preferences via the cookie banner when you first visit our website, or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include secure HTTPS connections, encrypted payment processing, and access controls on our systems.

While we take all reasonable steps to safeguard your data, no method of transmission over the internet is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals without undue delay.

11. Children's Privacy

Our Products and website are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at info@realestateacademyspain.com and we will take steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated policy will be posted on our website with a revised effective date. Where changes are material, we will notify you by email or by a prominent notice on our website. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

Real Estate Academy Spain

Email: info@realestateacademyspain.com

Website: www.realestateacademyspain.com