Home Courses About Cactus Contact Cart

Privacy Policy

At Cactus Academia we take the protection of your personal data very seriously. This policy explains how we collect, use and protect the information you provide us through this website, in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights Guarantee (LOPDGDD) and the Law 34/1988 on Information Society Services and Electronic Commerce (LSSI-CE).

1. Data Controller

Controller: Cactus Academia
Owner: Maria Ester Soler Berenguel
Contact Email: infocactusacademia@gmail.com
Jurisdiction: Spain

2. Personal Data We Collect

We collect only personal data that you voluntarily provide us through various forms available on the website:

  • Name and surname.
  • Email address.
  • Phone number (optional).
  • Spanish level and languages you speak (optional).
  • Country of residence (optional).
  • Subject and content of messages (in contact forms).
  • Information about interest in specific courses.
  • Additional comments (optional).

3. Purpose of Data Processing

The personal data collected will be used for the following purposes:

  • Respond to inquiries, information requests, and contact messages.
  • Manage free class and course reservations.
  • Process orders and shopping cart payments.
  • Communicate with you about the status of your order or enrollment.
  • Send order confirmations and information about contracted services.
  • Improve the quality of our services.
  • Comply with legal obligations.

4. Legal Basis for Processing

The legal basis for processing your personal data is:

  • Express Consent: By accepting the privacy policy through a checkbox and voluntarily submitting your data through the website forms.
  • Contract Execution: When you make a purchase or enroll in a course, we need your data to execute the transaction.
  • Legal Obligation: To comply with applicable tax and legal requirements.

5. Data Retention

Personal data will be retained according to the following periods:

  • Contact data and inquiries: 3 years from the last contact.
  • Free class enrollment data: 2 years from enrollment.
  • Order and purchase data: 6 years (due to Spanish tax obligations).
  • Educational/commercial relationship data: During the duration of the relationship plus 6 years applied in a blocked manner for evidentiary purposes.

After these periods, the data will be securely deleted from our systems.

6. Data Recipients

Personal data will not be disclosed to third parties, except in the following cases:

  • When there is a legal obligation or court order.
  • To technical service providers (hosting, email) under a data processing contract.
  • To public authorities when required by law.

We do not perform international data transfers outside the European Economic Area.

7. User Rights (ARCO Rights)

In accordance with the GDPR and LOPDGDD, as a data subject you have the following rights, which you can exercise free of charge:

  • Right of Access: Request what data we have about you.
  • Right of Rectification: Correct inaccurate or incomplete data.
  • Right of Erasure (Right to be Forgotten): Request deletion when no longer necessary.
  • Right to Restrict Processing: Restrict how we use your data.
  • Right to Data Portability: Receive your data in structured format.
  • Right of Objection: Object to processing for specific purposes.
  • Right Not to Be Subject to Automated Decision-Making: Not be subjected to automated decisions that legally affect you.
  • Right to Withdraw Consent: At any time.

To exercise these rights: Send a signed request to the email infocactusacademia@gmail.com, clearly stating:

  • Your full name and email.
  • The right you wish to exercise.
  • A copy of your identification (DNI, passport).

Response Period: We will respond within a maximum of 30 business days from receipt of your request, in accordance with the GDPR.

8. Security Measures

Cactus Academia adopts technical and organizational measures to ensure the security of personal data:

  • Data encryption in transit (HTTPS).
  • Restricted access to authorized personnel.
  • Validation and sanitization of all entered data.
  • Protection against injections, XSS, and other common attacks.
  • Regular data backups.
  • Compliance with industry security standards.

Despite these measures, no system is 100% secure. If a data breach is detected, we will notify affected users within 72 hours.

9. Use of Cookies and Tracking Technologies

This website uses the following cookies:

  • Technical Cookies (Required): Necessary for proper functioning (shopping cart session, CSRF). Duration: session.
  • Preference Cookies (Optional): To remember your preferences. Duration: 1 year.

We do not use analytics or third-party cookies. By using the website, you accept the use of technical cookies. Preference cookies are installed only with prior consent.

10. Consent in Forms

All our forms (contact, enrollment, shopping cart) include:

  • Explicit checkbox accepting the privacy policy.
  • Clear information about data processing.
  • Option to revoke consent at any time.

We do not collect data without prior express consent.

11. Supervisory Authority

If you believe that the processing of your personal data violates applicable regulations, you have the right to file a free complaint with:

You may also file a complaint with the data protection authority of another EU country where you reside.

12. Changes to Privacy Policy

Cactus Academia reserves the right to modify this privacy policy to adapt to legislative or jurisprudential changes. Significant changes will be communicated through the website. We recommend reviewing this page regularly.

13. Contact

For any questions about this privacy policy or your personal data, you can contact us at:

Email: infocactusacademia@gmail.com

Last Updated: March 7, 2026
This privacy policy is effective as of the above date and will be reviewed annually.