Privacy policy

Controller

Asturico Holdings 019 SL
Spanish tax ID (NIF): B74457292
Registered/tax address: Calle Jovellanos 14, bajo, 33003 Oviedo, Asturias, Spain
Privacy contact: info@carnetdepadres.org
Website: carnetdepadres.org

Data we may process

• Adult purchaser or participant name and email.
• Country, city or phone only when a relevant form or payment record provides them.
• Selected stage, access status and personal access code.
• PayPal transaction/order references, payment status, amount, currency and product identity. We do not receive or store full card or bank-account details.
• Final-test score, stage, completion-card code, public card name and issue date.
• Support communications and optional feedback.
• Separate choices about service email, marketing email, community or WhatsApp where offered.
• Limited technical, security, cookie and analytics data according to your consent settings and the cookie notice.

Why we use it

• Confirm payment and deliver the stage purchased.
• Validate access and resend a lost code.
• Record the final learning check and generate or verify a completion card.
• Send essential service messages and respond to support requests.
• Prevent duplicate payment processing, misuse, fraud and security incidents.
• Improve content and the user journey using aggregated or consented analytics.
• Send optional marketing or community invitations only when there is an appropriate permission or lawful basis.

Legal bases

Depending on the activity, processing is based on performing the purchase or service requested, complying with legal obligations, consent, and legitimate interests such as service security, essential administration and preventing duplicate or fraudulent processing. Optional WhatsApp/community invitations and non-essential cookies require the relevant choice where applicable.

Service providers and transfers

We use providers needed for website hosting, forms, PayPal payment processing, email delivery, workflow automation, private records, analytics and—only if separately chosen—WhatsApp/community communication. They process only the data needed for their role under their own terms or our instructions.

Some providers may process data outside the European Economic Area. Where European data-protection law applies, transfers must rely on an appropriate legal mechanism and safeguards. You can ask us for more information about the providers relevant to your data.

Retention and security

We keep data only as long as needed to provide access, maintain the verification record, resolve incidents and meet tax, accounting, consumer-protection or other legal obligations. Some records may then remain restricted for the limitation periods required to handle possible claims.

Access codes and payment events are subject to validation, rate limits, duplicate controls and restricted administrative access. No internet service can promise absolute security; report a suspected issue to info@carnetdepadres.org.

Your rights

Where applicable, you may request access, correction, deletion, restriction, objection, portability and withdrawal of consent. Contact info@carnetdepadres.org. We may need to verify the adult requester’s identity without collecting more information than necessary.

If European data-protection law applies, you may also complain to the Spanish Data Protection Agency (AEPD) or the supervisory authority in your habitual residence.

Children and young people

The buyer and account holder must be an adult. Do not register a minor, use a minor’s email or send identifying, photographic or sensitive information about a minor. Educational questions should be described in general, non-identifying terms.

Cookies and updates

Use the consent controls on the site to accept, reject or manage non-essential cookies. The detailed cookie notice remains available from the site footer. We will update this policy before materially changing the purposes, tools or types of data used.