In accordance with the General Data Protection Regulation (GDPR – EU 2016/679), I am committed to protecting my students' personal data and using it in a transparent, limited, and secure manner.
1. Identity of the Data Controller
The data controller is:
Café de Kiko
Language training organization
Email: cafedekiko@gmail.com
2. Data Collected
The following data is collected only for students enrolled in courses or premium community members:
- Last name
- First name
- Email address
- Payment history (date, amount, purpose)
- Information related to courses taken
No personal data is collected from casual visitors to the site (except analytics cookies if accepted).
3. Purposes of Processing
The data is used for:
- Tracking registrations and purchased courses
- Administrative management (invoicing, communications)
- Internal statistics
- Continuous improvement of services offered
No automated decisions are made based on this data.
4. Legal Basis for Processing
- Contract execution: to provide purchased services
- Legitimate interest: to improve my services through internal statistics
5. Data Recipients
Access to data is strictly limited to:
- Myself (responsible instructor)
- My direct collaborators involved in managing the activity
Data is never sold, shared, or transmitted to unauthorized third parties.
6. Cookies and Analytics
This site uses Google Analytics to analyze traffic and improve user experience. Google Analytics uses cookies to collect anonymous information about your browsing (pages visited, visit duration, device used, etc.).
Cookies used:
_ga: unique identifier to distinguish users (duration: 2 years)_ga_*: used to maintain session state (duration: 2 years)
On your first visit, a banner allows you to accept or refuse these cookies. If you refuse, no analytics cookies will be set and Google Analytics will not load. You can change your choice at any time by deleting cookies from your browser.
To learn more about Google's privacy policy: policies.google.com/privacy
7. External Service Providers
Payments are processed by PayPal (Europe) and Stripe, both GDPR-compliant providers. Only information strictly necessary for the transaction is transmitted to these services.
8. Data Retention Period
- Payment data: 6 years (accounting obligation)
- Other data: during the educational relationship, then archived or deleted
9. Your Rights
You may exercise your rights at any time:
- Right to access your data
- Right to rectification
- Right to erasure (except for legal obligations)
- Right to object or restrict processing
To do so, contact me at: cafedekiko@gmail.com
10. Data Security
Your data is stored on secure media, protected by passwords and restricted access. Measures are in place to ensure the confidentiality and integrity of information.
11. Changes
This policy may be updated. You will be informed of any significant changes.