Privacy Policy

PRIVACY POLICY — EULE Institute Last updated: 10 June 2026 1. WHO WE ARE (DATA CONTROLLER) EULE Institute is operated by Design Excellent Group SL (NIF B02759603), Calle Blanquerna 53, 07003 Palma de Mallorca, Spain ("we", "us", "the Controller"). We are the data controller for the personal data processed through euleinstitute.com and its courses and learning paths. Contact: [email protected]. 2. WHAT THIS POLICY COVERS This policy explains how we collect, use and protect your personal data when you create an account, browse our courses and learning paths, purchase and access content, submit assignments, and contact us. It is provided in accordance with Articles 13–14 of the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679). 3. PERSONAL DATA WE COLLECT - Account data: first and last name, email address, and a password stored only in encrypted/hashed form by our authentication provider. - Learning data: the courses and learning paths you enrol in, your lesson progress and completion, quiz and assignment submissions and any files you upload, and certificates earned. - Payment data: your billing information and a record of purchases and installment plans. Card details are entered directly with our payment processor (Stripe) and are never stored on our servers. - Communications: messages you send us and our replies. - Technical / usage data: IP address, device and browser type, pages visited, dates and times of access, and similar log data collected automatically. - Optional analytics / marketing data: where you consent, identifiers and usage data collected by analytics and advertising tools (see "Cookies and tracking" below). 4. HOW AND WHY WE USE YOUR DATA (PURPOSES AND LEGAL BASES) - To provide the Service — create and manage your account, give access to purchased courses and paths, track progress, and review assignments. Legal basis: performance of a contract — Art. 6(1)(b). - To process payments and manage installment plans. Legal basis: contract and legal obligation (tax/accounting) — Art. 6(1)(b),(c). - To send transactional emails (sign-up, purchase confirmation, assignment results, important service notices). Legal basis: contract and legitimate interest — Art. 6(1)(b),(f). - To keep the Service secure, prevent fraud and abuse, and improve it. Legal basis: legitimate interest — Art. 6(1)(f). - To comply with legal obligations such as retaining invoices. Legal basis: legal obligation — Art. 6(1)(c). - For analytics and marketing, where used. Legal basis: your consent — Art. 6(1)(a), which you can withdraw at any time. 5. SERVICE PROVIDERS (PROCESSORS) WE RELY ON We share data only as necessary with trusted providers who process it on our behalf under data-processing agreements: - Supabase — database, authentication and file storage, hosted in the EU (Frankfurt, Germany). - Bunny.net — video streaming and content delivery (EU-based provider). - Stripe (Stripe Payments Europe, Ltd., Ireland) — payment processing; card data is handled directly by Stripe. - Emailit — transactional email delivery. - Eduspera — the platform that powers this academy and provides its technical infrastructure on our behalf. - Optional, only where enabled and with your consent: Google (Google Analytics / Google Ads), Meta (Facebook/Instagram Pixel) and TikTok — for audience measurement and advertising. 6. COOKIES AND TRACKING We use strictly necessary cookies to operate the site, keep you signed in and process payments — these do not require consent. Where enabled, analytics and advertising cookies (for example Google Analytics or the Meta Pixel) are used only after you give consent, which you can withdraw at any time through your browser settings or our cookie controls. You can also manage cookies in your browser and opt out of advertising personalization through the providers' own tools. 7. INTERNATIONAL TRANSFERS Some providers (for example Stripe, Google or Meta) may process data outside the European Economic Area. Where this happens, transfers are protected by an adequacy decision or by Standard Contractual Clauses approved by the European Commission. 8. HOW LONG WE KEEP YOUR DATA - Account and learning data: for as long as your account is active, and then deleted or anonymized on request. - Payment and invoicing records: retained for the period required by Spanish and EU accounting law (up to 6 years). - Analytics data: for the period set by the relevant tool, after which it is deleted or anonymized. 9. YOUR RIGHTS Under the GDPR you have the right to: access your data; rectify inaccurate data; erase your data; restrict or object to processing; data portability; and withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority (in Spain, the Agencia Española de Protección de Datos — AEPD, www.aepd.es). To exercise any right, contact us at [email protected]; we respond within one month. 10. CHILDREN Our courses are intended for users aged 16 and over (or the minimum age of digital consent in your country; in Spain, 14). We do not knowingly collect data from children below this age without parental consent. 11. CHANGES TO THIS POLICY We may update this policy; the "Last updated" date above shows the current version. Where changes affect processing based on consent, we will ask for renewed consent. 12. CONTACT Design Excellent Group SL — [email protected] — Calle Blanquerna 53 1C, 07003 Palma de Mallorca, Spain. This document is provided for transparency and does not constitute legal advice.