Privacy Policy

In accordance with Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter, “GDPR”), and Articles 6 and 11 of the Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and guarantee of digital rights (hereinafter, “LOPDGDD”), which regulate the right to information in data collection, we inform you as follows:

1. Data Controller

The entity responsible for processing personal data collected through this website is:

Europass Academy Spain SL
Address: RAMBLA CATALUÑA 15 2º 2ª, 08007 BARCELONA
Email (Data Protection Officer): alessandropumpo@europassnetwork.eu

2. Personal Data We Collect

The personal data we may collect includes:

  • Full name
  • Company name
  • Email address
  • National ID (DNI)
  • Shipping address
  • Phone number
  • Bank account or card details (via Redsýs)

3. Purpose of Data Processing

Europass Academy Spain SL may process your personal data for the following purposes:

  • Cookies: We collect anonymous data through cookies to ensure proper website functionality. For more information, see our Cookie Policy.

4. Legal Basis for Processing

We process your data based on the following legal grounds:

  • Contract performance (Art. 6.1.b GDPR): Your data is used to execute purchases of music, cinema, games, apparel, and other leisure products.
  • Consent (Art. 6.1.a GDPR): Your data is used for product delivery and certain cookies, only with your consent.
  • Legitimate interest (Art. 6.1.f GDPR): For existing customers, we may send informational or promotional communications based on legitimate interest. Certain necessary cookies are used on this basis without consent.
  • Legal obligation (Art. 6.1.c GDPR): Data may also be processed to comply with legal obligations, such as fraud prevention or communication with public authorities.

5. Data Retention

Personal data will be retained only as long as necessary to fulfill its purpose, comply with legal obligations, defend potential claims, or as permitted by applicable law. Europass Academy Spain SL will cease processing and properly block personal data after this period.

6. Data Sharing with Third Parties

Generally, personal data will not be shared with third parties except where legally required or for outsourced services necessary for business or website operations.

Third-party service providers are required to maintain confidentiality and implement appropriate data protection measures. Data may also be disclosed to public authorities if legally required, limited to the necessary information.

Potential third-party recipients include:

7. Your Rights

You may exercise your rights by contacting us via email. These rights include:

  • Access: Request information on your personal data we hold.
  • Rectification: Request corrections to your data.
  • Erasure (“Right to be Forgotten”): Request deletion after prior data blocking.
  • Restriction: Request limitation of processing.
  • Objection: Withdraw consent or object to further processing.

Requests may be denied if deletion affects legal obligations or identity is not verified. Complaints may be filed with the relevant data protection authority.

8. Children’s Data

Our services are generally not directed at minors. If we process minors’ data, parental or legal guardian consent will be required for data collection or automated processing.

9. Security Measures

We implement legally required data protection measures and strive to adopt additional technical safeguards to prevent loss, misuse, alteration, unauthorized access, and theft of personal data.

Website connections are encrypted via HTTPS and TLS certificates.

10. Updates to the Privacy Policy

We recommend reviewing this Privacy Policy periodically, as it may be updated.

Back to top