Privacy Policy
Last updated: 17 de September de 2026
Privacy Policy — SpanishAura
Last updated: September 2026
1. Data Controller
- Owner: Aurora Caballero Calvo
- Tax ID (NIF): 45944367G
- Contact email: info@spanishaura.com
- Website: spanishaura.com
- Activity: Teaching Spanish as a Foreign Language online.
For any question regarding the processing of your personal data, you can contact us directly at the email address above.
2. What data do we collect?
Depending on how you interact with SpanishAura, we may collect the following data:
- Contact details: name, surname, email address, phone number (if provided).
- Course account data: username, course progress, purchase history (via WooCommerce/Tutor LMS).
- Payment data: processed directly by Stripe, our payment provider. SpanishAura does not store your full card details.
- Class-related data: scheduling and communication information via Microsoft Teams and/or Calendly for organizing 1:1 sessions.
- Browsing data: IP address, browser type, pages visited, through cookies and similar technologies (see our separate Cookie Policy).
- Communications: any information you share with us by email, contact form, or social media.
We do not collect special categories of data (health, ethnic origin, etc.) unless you voluntarily provide them yourself (for example, in a comment).
3. Why do we process your data?
| Purpose | Legal basis |
|---|---|
| Managing your enrolment and access to the “From Zero to Spanish” course | Performance of a contract (Art. 6(1)(b) GDPR) |
| Organizing and delivering 1:1 classes | Performance of a contract (Art. 6(1)(b) GDPR) |
| Processing payments via Stripe | Performance of a contract (Art. 6(1)(b) GDPR) |
| Responding to your inquiries and messages | Legitimate interest in addressing your request (Art. 6(1)(f) GDPR) |
| Sending you newsletters, updates, and promotional offers | Explicit consent (Art. 6(1)(a) GDPR) — you can withdraw it at any time |
| Analyzing website usage for statistical purposes | Consent via the cookie banner (Art. 6(1)(a) GDPR) |
| Complying with tax and accounting obligations | Legal obligation (Art. 6(1)(c) GDPR) |
4. How long do we keep your data?
- Data linked to a contractual relationship (course, classes) is kept for the duration of that relationship and, afterward, for the periods legally required for tax and accounting purposes (generally 4–6 years, depending on applicable regulations).
- Data processed for sending commercial communications is kept until you unsubscribe.
- Browsing/cookie data is kept according to the retention periods indicated in the Cookie Policy.
5. Who do we share your data with?
We do not sell or transfer your data to third parties, except in the following cases, where they act as data processors or where disclosure is required by law:
- Stripe (payment processing)
- Microsoft (Teams) (delivery of online classes)
- WordPress.com (website hosting)
- Mailchimp (sending newsletters and commercial communications, if you have given your consent). Should we change email marketing providers in the future, this policy will be updated accordingly.
- Analytics and/or marketing tools (e.g. Google Analytics, Meta Pixel): we currently do not use any. If we adopt one in the future, it will be disclosed here and in the Cookie Policy before activation, and your consent will be requested via the cookie banner where applicable.
- Public authorities, where required by law (e.g. the Spanish Tax Agency, AEAT)
6. International data transfers
Some of the providers mentioned above (such as Stripe, Microsoft, or Mailchimp) may be located outside the European Economic Area (EEA), or may transfer data to servers outside it (for example, in the United States). In such cases, we ensure that the transfer is subject to appropriate safeguards, such as:
- An adequacy decision by the European Commission, or
- Standard Contractual Clauses (SCCs) approved by the European Commission, or
- Adherence to the EU-US Data Privacy Framework, where applicable.
7. Your rights
You have the right to:
- Access your personal data.
- Rectify inaccurate data.
- Erase your data when it is no longer necessary.
- Restrict processing in certain circumstances.
- Object to processing, including direct marketing.
- Portability: receive your data in a structured, commonly used format.
- Withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
You can exercise these rights by writing to info@spanishaura.com, specifying the right you wish to exercise and attaching a copy of a document proving your identity.
If you believe your request has not been properly handled, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es.
8. Minors
SpanishAura’s services are intended for adults. We do not knowingly collect data from minors under 16 without the consent of a parent or legal guardian.
9. Data security
We apply reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration, including the use of encrypted connections (SSL/HTTPS) on our website.
10. Changes to this policy
We may update this Privacy Policy to reflect legal developments or changes to our services. We recommend reviewing it periodically. The date of the last update appears at the top of this document.
11. Cookie Policy
The use of cookies on this website is governed by a separate document: please see our Cookie Policy for more information on which cookies we use, their purpose, and how you can manage them.