Privacy Policy

Version dated 08/08/2025

In accordance with the General Data Protection Regulation (GDPR – EU 2016/679), I am committed to protecting my students' personal data and using it in a transparent, limited, and secure manner.

1. Identity of the Data Controller

The data controller is:
Café de Kiko
Language training organization
Email: cafedekiko@gmail.com

2. Data Collected

The following data is collected only for students enrolled in courses or premium community members:

  • Last name
  • First name
  • Email address
  • Payment history (date, amount, purpose)
  • Information related to courses taken

No personal data is collected from casual visitors to the site.

3. Purposes of Processing

The data is used for:

  • Tracking registrations and purchased courses
  • Administrative management (invoicing, communications)
  • Internal statistics
  • Continuous improvement of services offered

No automated decisions are made based on this data.

4. Legal Basis for Processing

  • Contract execution: to provide purchased services
  • Legitimate interest: to improve my services through internal statistics

5. Data Recipients

Access to data is strictly limited to:

  • Myself (responsible instructor)
  • My direct collaborators involved in managing the activity

Data is never sold, shared, or transmitted to unauthorized third parties.

6. Analytics

This site uses Umami, a privacy-focused analytics tool. Umami does not collect any personal data, does not use cookies, and does not track visitors across sites. Only anonymous and aggregated statistics are collected (pages visited, country of origin, device used).

To learn more about Umami: umami.is

7. External Service Providers

Payments are processed by PayPal (Europe) and Stripe, both GDPR-compliant providers. Only information strictly necessary for the transaction is transmitted to these services.

8. Data Retention Period

  • Payment data: 6 years (accounting obligation)
  • Other data: during the educational relationship, then archived or deleted

9. Your Rights

You may exercise your rights at any time:

  • Right to access your data
  • Right to rectification
  • Right to erasure (except for legal obligations)
  • Right to object or restrict processing

To do so, contact me at: cafedekiko@gmail.com

10. Data Security

Your data is stored on secure media, protected by passwords and restricted access. Measures are in place to ensure the confidentiality and integrity of information.

11. Changes

This policy may be updated. You will be informed of any significant changes.