Introduction

Below is the privacy policy of DAVID BARRA STUDIO SL, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter “GDPR”).

Data Controller

The data protection officer is responsible for ensuring compliance with data protection regulations; among their duties is the protection of the personal data provided to DAVID BARRA STUDIO SL. If you have any questions, inquiries, or requests regarding this matter, you can contact: david@davidbarra.com.

DAVID BARRA STUDIO SL is constituted in accordance with Law 7/1997, of June 18, on associations (DOG 2423, of July 1) and Organic Law 1/2002, of March 22, regulating the right of association (BOE no. 73, of March 26), and its statutes.

The websites and URLs derived from www.davidbarra.com (hereinafter, “websites”) are the responsibility of DAVID BARRA STUDIO SL, and any information that may be collected will be incorporated into its data processing systems.

Data Protection Officer

The data protection officer ensures compliance with the applicable data protection regulations and is in charge of protecting the personal data provided to DAVID BARRA STUDIO SL. For any questions, inquiries, or requests, please contact: david@davidbarra.com.

Limitation of Liability

DAVID BARRA STUDIO SL is responsible only for the information it obtains directly from users of its websites, and not for any other personal data that users may provide, transmit, or disclose through any other mechanism.

Transparency

DAVID BARRA STUDIO SL strives to provide transparent and concise information in clear and simple language regarding both the conditions of personal data processing and the responses to the exercise of user rights.

Processing and Storage of Personal Data

DAVID BARRA STUDIO SL aims to ensure client satisfaction with all services provided. Therefore, personal data submitted by users through the websites will be used solely to send information about the services offered by DAVID BARRA STUDIO SL.

The legal basis for the stated processing activities is legitimate interest: users are deemed to have consented to the processing of their personal data and the use of cookies by accessing DAVID BARRA STUDIO SL’s websites. This implies that:

Data will be stored for as long as user consent remains valid, unless DAVID BARRA STUDIO SL is legally required to retain it.

In accordance with current data protection regulations, users may contact the competent supervisory authority to file a complaint and exercise their rights of Access, Rectification, Erasure, and Objection (ARCO) regarding the processing of their personal data. When a user notifies DAVID BARRA STUDIO SL of their wish to be removed from its files, all data not strictly necessary for the administrative and academic management of the courses they are enrolled in will be deleted.

All data is stored on servers owned or contracted by DAVID BARRA STUDIO SL, located within Spanish territory.

Access to the websites and any of their content or services implies the unreserved acceptance of this privacy policy, which also applies prior to the possible contracting of any services offered by DAVID BARRA STUDIO SL. Therefore, it is mandatory to accept and comply with this policy before using the websites or contracting any service from DAVID BARRA STUDIO SL.

By browsing the websites, the user consents to the collection and processing of their data by DAVID BARRA STUDIO SL. To ensure the user is aware of what data will be collected, how it will be processed, and under what circumstances it may be shared, DAVID BARRA STUDIO SL undertakes to update this privacy policy and announce any changes in any manner it deems appropriate.

Data Disclosure to Third Parties

DAVID BARRA STUDIO SL will not disclose user personal data to third parties, except in cases of legal obligation or judicial requirement.

Information on Data Subject Rights and Information Security

In accordance with Article 32 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, DAVID BARRA STUDIO SL is committed to adopting the technical and organizational measures necessary to ensure the integrity, confidentiality, and availability of user data, taking into account the risks associated with their processing.

Additionally, if users enter their data into forms on third-party websites, those third parties—not DAVID BARRA STUDIO SL—will be considered the controllers of such data and must adopt the aforementioned technical measures.

ARCO Rights

According to Chapter 3 of the GDPR, all individuals have the right to Access, Rectify, Erase, and Object (ARCO) with respect to their personal data, and all entities are required to guarantee these rights. Accordingly, users may exercise any of the following rights in relation to DAVID BARRA STUDIO SL by contacting david@davidbarra.com (click to download request form):

• Right of Access: You may request information on your personal data stored in our files.
• Right of Rectification: You may ask us to correct your personal data if it is inaccurate.
• Right of Erasure (or Cancellation): You may request the deletion of your personal data from our files.
• Right to Object: You may object to the processing of your personal data by DAVID BARRA STUDIO SL, provided there is a legitimate and substantiated reason.

Users guarantee that the data provided is true, accurate, complete, and up-to-date, and are responsible for any direct or indirect damages or losses that may result from failing to comply with this obligation, both to DAVID BARRA STUDIO SL and to third parties.

Consent under the LSSI-CE

In compliance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), DAVID BARRA STUDIO SL will request the user’s explicit consent (and the user may grant it if they wish) in order to use their data to send information about the website and various related offers and promotions.

Each commercial communication from DAVID BARRA STUDIO SL will include a link allowing the user to revoke their consent at any time.

To guarantee the security and confidentiality of the user’s personal data, DAVID BARRA STUDIO SL has adopted the security levels required by data protection regulations and has implemented technical measures to prevent the loss, misuse, alteration, unauthorized access, or theft of personal data provided.