Privacy Policy

1. Who We Are

This privacy policy is issued by Bodhi Production SL, a Spanish company registered under CIF B22760565, operating under the commercial name Cyber Academy. Our registered office is located at:

Avenida de Moya 6

35100 San Bartolomé de Tirajana, Las Palmas, Spain

For any privacy-related concerns or requests, please contact us at:

📧 support@cyberacademy.fr

We provide consulting and training services in IT, cybersecurity, and information security.

2. Why This Policy Exists

We are committed to protecting your personal data. This privacy policy explains:

• What personal data we collect

• Why we collect it

• How we process, share, or retain it

• What rights you have under the General Data Protection Regulation (GDPR) and Spanish law

3. Your Consent

By using our website, subscribing to our services, or submitting your data through forms, you agree to the terms of this Privacy Policy. Consent is obtained explicitly (via opt-in forms, checkboxes, or signature). You can withdraw your consent at any time by contacting us, although this may affect the availability of certain services.

4. What Personal Data We Collect

Depending on your interaction with us, we may collect the following types of data:

• Technical Data: IP address, browser type, operating system, visited pages, and access times

• Identity & Contact Data: Name, email address, country of residence, company name

• Communication Data: Newsletters subscriptions, training registrations, support requests

• Voluntary Data: Any information you submit via forms, surveys, or contact methods

We do not collect sensitive personal data (e.g. health, political, biometric, or financial identifiers) unless explicitly required and legally justified.

5. Why We Process Your Data

We use your data to:

• Register you as a client or trainee

• Deliver services and digital products

• Process payments and issue invoices

• Send newsletters or important notifications (with consent)

• Analyze site usage (anonymized statistics)

• Respond to legal obligations or user inquiries

The legal basis for processing your data may be:

• Your consent (Art. 6.1.a GDPR)

• The performance of a contract (Art. 6.1.b GDPR)

• Our legitimate interest in operating the business efficiently (Art. 6.1.f GDPR)

• Compliance with legal obligations (Art. 6.1.c GDPR)

6. We Don’t Sell Your Data

We never sell or rent your personal information to third parties. Ever.

7. How We Protect Your Data

We apply technical and organizational safeguards to protect your personal data from unauthorized access, loss, or destruction. These include:

• Encrypted communication (HTTPS)

• Access control and authentication

• Regular backups and system updates

• Confidentiality agreements with employees and contractors

8. Transparency and Communication

We always inform you:

• Why your data is needed

• The legal basis for its use

• How you can exercise your rights

• Who to contact in case of concern

This Privacy Policy is available at all times and reflects the most recent version.

9. Data Retention

We retain personal data only as long as necessary to fulfil our purposes, including legal, contractual, or tax obligations. Once the data is no longer needed, we securely delete or anonymize it.

10. When We Share Your Data

We only share your data with:

• Trusted subprocessors within the EU or under GDPR-approved safeguards (see Cookie & Subprocessor Policy)

• Legal or regulatory authorities if required by law or official request

We ensure all third parties process your data lawfully and securely.

11. Use of Subcontractors

We may engage third-party providers (e.g. for hosting, CRM, email, or analytics). These providers act as data processors under signed Data Processing Agreements (DPAs). They are only authorized to process your data for the specific tasks we assign and must comply with GDPR.

A list of subprocessors is available upon request.

12. Your Rights

You have the right to:

• Access your personal data

• Rectify incorrect or outdated information

• Delete your data (“right to be forgotten”)

• Object to or restrict certain processing

• Withdraw consent at any time

• Request data portability to another provider

• Refuse automated decision-making, if applicable

To exercise your rights, send a request to:

📧 support@cyberacademy.fr

You may be asked to provide proof of identity for verification.

13. Your Right to File a Complaint

If you believe your data has not been handled correctly, you can file a complaint with the Agencia Española de Protección de Datos (AEPD):

Spanish Data Protection Agency

Calle Jorge Juan, 6

28001 Madrid, Spain

📞 +34 901 100 099 / +34 91 266 35 17

🌐 www.aepd.es

✉️ informacion@aepd.es

14. Minors and External Sites

• If you are under 14 years old, you must have permission from a parent or guardian before submitting personal data. We do not knowingly collect data from minors without such consent.

• Our website may contain links to third-party websites. We are not responsible for their content or their data practices.

15. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical, or business changes. We encourage you to check this page periodically. Any changes will be communicated clearly, and your continued use of our services implies your acceptance.

16. Governing Law

This Privacy Policy is governed by Spanish law. Any disputes arising from it shall be subject to the exclusive jurisdiction of the courts in Las Palmas, Spain.