PRIVACY POLICY


INFORMATION FOR THE USER

1. Data Controller and Purpose of Processing

Aaron Zébida Rodríguez, hereinafter the RESPONSIBLE PARTY, is the data controller of the User’s personal data and informs that these data will be processed in accordance with applicable personal data protection laws, including Regulation (EU) 2016/679 of April 27, 2016 (GDPR) relating to the protection of natural persons in relation to the processing of personal data and free movement of such data, and Spanish Organic Law 15/1999 of December 13 (LOPD) on personal data protection. The following information is provided regarding the processing:

1.1 Purpose of processing: To maintain a commercial relationship with the User. The operations planned for the processing are:

  • Sending commercial advertising communications via email, fax, SMS, MMS, social communities or any other electronic or physical means, present or future, that enable commercial communications. These communications will be sent by the RESPONSIBLE PARTY and relate to their products and services or those of their collaborators or suppliers with whom they have promotional agreements. In this case, third parties will never have access to personal data.

  • Conducting statistical studies.

  • Processing orders, requests, or any type of petition made by the user through any available contact method.

  • Sending the website newsletter.

1.2 Data retention criteria: Data will be retained as long as mutual interest exists to maintain the purpose of processing, and once no longer necessary, data will be deleted using appropriate security measures ensuring pseudonymization or total destruction.

1.3 Data sharing: Data will not be shared with third parties except when legally required.


2. Rights of the User

The User has the following rights:

  • Right to withdraw consent at any time.

  • Right to access, rectify, port, and delete their data, and to limit or object to its processing.

  • Right to lodge a complaint with the supervisory authority (agpd.es) if they believe processing does not comply with current legislation.

2.1 Contact information to exercise rights:


3. Mandatory or Optional Nature of the Information Provided by the User

Users, by ticking the relevant boxes and entering data in fields marked with an asterisk (*) in contact or download forms, expressly and unequivocally accept that their data are necessary to process their request by the service provider. Including data in other fields is voluntary. Users guarantee the accuracy of the data provided and are responsible for notifying any changes.

The RESPONSIBLE PARTY guarantees that personal data will never be transferred to third parties without explicit, informed, and unequivocal prior consent. All data requested via the website are mandatory for optimal service provision. Failure to provide all data may prevent full adjustment of services and information to user needs.


4. Security Measures

In compliance with current personal data protection laws, the RESPONSIBLE PARTY adheres to all GDPR and LOPD provisions for personal data processing, respecting the principles in Article 5 of the GDPR and Article 4 of the LOPD, ensuring lawful, fair, transparent, adequate, relevant, and limited processing.

The RESPONSIBLE PARTY guarantees that appropriate technical and organizational measures are in place to meet security requirements and protect Users’ rights, informing Users adequately to enable exercising those rights.


5. Privacy Policy

Our Privacy Policy is designed in accordance with Organic Law 3/2018 on personal data protection and digital rights, and the EU General Data Protection Regulation 2016/679 of April 27, 2016.

By providing your data, you declare to have read and understood this Privacy Policy and give your explicit and unequivocal consent to the processing of your personal data according to the purposes and terms stated.

The Company may update this Policy to comply with legal or interpretative changes and may complement it with Legal Notices, Cookies Policy, and General Conditions applicable to certain products or services.


6. Data Controller Details

  • Business name: Aaron Zébida Rodríguez

  • Tax ID (CIF): 31012116C

  • Registered address: C/ Céspedes, 6. 14003 Córdoba

  • Phone: 744 70 87 89

  • Email: info@laesquinitadelajuderia.com


7. Purpose and Use of Data

7.1 Potential Clients

  • Provide information requested via any means including electronic (email, website, etc.)

  • Prepare quotes for products and services and subsequent commercial follow-up.

Data processed: Identification data (address, tax ID or national ID, full name, phone, signature), professional data (job position).

7.2 Clients

  • Provision of requested services.

  • Billing for products and services.

  • Administrative and commercial management.

  • Compliance with legal obligations.

  • Conduct satisfaction surveys.

Data processed: Identification data, professional data, economic data (bank details, tax deductions, goods/services supplied), quality questionnaires.

7.3 Marketing

  • Manage data to send discounts, promotions, and information via electronic means.

Data processed: Identification data (name, surname, email, mobile).

7.4 Suppliers

  • Manage contractual relationships.

  • Comply with legal obligations.

Data processed: Identification, academic, professional, and economic data as appropriate.

7.5 Training

  • Execute requested training actions.

  • Manage communications with public administrations to apply for grants.

  • Conduct satisfaction surveys.

Data processed: Detailed identification, personal characteristics, professional, academic, non-economic payroll data, special categories (health, violence or terrorism status) for State Foundation communication, quality questionnaires.

For tutors/teachers: Identification, academic, professional, economic data.


8. Respect for Data Subject Rights

Facilitate the exercise of rights under Chapter III of the GDPR, complying with principles in Article 5.

Data processed: Identification and related data.

Aaron Zébida Rodríguez processes data lawfully, fairly, transparently, adequately, pertinently, limited, accurate, and updated. It commits to timely correction or deletion of inaccurate data.


9. Legal Basis and Retention Period

9.1 Consent
GDPR 6.1.a) Consent for specific purposes such as sending commercial communications (if not a client). Users can withdraw consent at any time.

Retention: Until deletion requested.

9.2 Contract Execution
GDPR 6.1.b) Necessary for contract performance or pre-contractual measures.

Retention: For the time needed for purpose and liability determination.

9.3 Legal Obligation
GDPR 6.1.c) Necessary to comply with legal obligations (invoices, tax filings, rights requests, training laws).

Retention: As required by law and liability needs.

9.4 Legitimate Interest
GDPR 6.1.f) Necessary for legitimate interests such as professional contact data processing, security (video surveillance), commercial communications.

Retention: While no objection is filed, except overriding legitimate reasons or claims.

Video surveillance images kept maximum 1 month unless required by authorities.


10. Automated Decisions and Profiling

No automated decisions or profiling will be made.


11. Data Sharing

Data may be shared with:

  • Related entities as Data Processors (accounting, security, data protection officer, providers).

  • Public administrations and authorities (Tax Agency, banks, security forces, courts, Spanish Data Protection Agency, FUNDAE).

International Transfers:

  • Google Ireland Ltd. (cloud services) under Privacy Shield or standard contractual clauses.

  • The Rocket Science Group LLC (Mailchimp), under EU-US Privacy Shield.

More info: https://policies.google.com/privacy?hl=es


12. Rights

Users have the following rights:

  • Access personal data.

  • Rectify inaccurate/incomplete data.

  • Erasure under conditions.

  • Restrict processing.

  • Data portability.

  • Object to processing; processing will cease except for overriding reasons or claims.

  • Withdraw consent anytime without affecting prior lawful processing.

To exercise rights, send a request with a copy of ID to:

If rights are violated or unresolved, complaints can be filed with the competent Data Protection Authority online.


13. Changes to the Privacy Policy

Aaron Zébida Rodríguez reserves the right to modify this Privacy Policy without prior notice, with publication on this website deemed sufficient notification.

Last update: July 31, 2025