Privacy Policy

Last updated: April 25, 2025

This Privacy Policy describes how Antonio Castelló Avilleira collects, uses and safeguards personal data on the following websites https://castelloavilleira.com and https://cursos.castelloavilleira.comin compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD)..

1. Data Controller

  • Identity: Antonio Castelló Avilleira
  • VAT ID: 04187833-Q
  • Addressc/ Barrio de Arriba, 4, 45686 Calera y Chozas, Toledo, Spain
  • Email: soporte@castelloavilleira.com

2. Data collected and purposes

We collect the following personal data according to the functionalities of our websites:

2.1. Online courses (https://cursos.castelloavilleira.com)

  • Data: Name, surname, email, password, payment details (processed by Stripe or PayPal).
  • Purpose: Manage registration, course access, payment processing, invoice issuance, customer support, sending email notifications.
  • Legal basis:
    • Execution of a contract (purchase of courses, Art. 6.1.b GDPR).
    • Consent for commercial communications, if the corresponding box is checked (Art. 6.1.a RGPD).
    • Legal obligation for invoicing (Art. 6.1.c RGPD).
  • Retention: 5 years for billing data (tax obligations); until the user requests cancellation for subscription or registration data.

2.2. Comments in Course lessons (https://cursos.castelloavilleira.com)

  • Data: Name, email, IP address, user agent string, anonymous email hash (for Gravatar).
  • Purpose: Manage and moderate comments on course lessons, detect spam, display your profile picture (if you use Gravatar).
  • Legal Basis: Consent (Art. 6.1.a RGPD).
  • GravatarAn anonymous string (hash) created from your email address can be sent to the Gravatar service (operated by Automattic) to verify if you have an associated profile. If your comment is approved, your profile picture (if any) will be publicly visible next to the comment. See the Gravatar privacy policy: https://automattic.com/privacy/.
  • Retention: Indefinite, to approve successive comments automatically, unless a deletion request is made.

2.3. Embedded YouTube videos (https://cursos.castelloavilleira.com)

  • Data: IP address, browsing data (if YouTube cookies are enabled).
  • Purpose: To show videos embedded in the lessons of the courses, to analyze visualizations (if you consent to analytical cookies).
  • Legal basis: Consent for non-essential cookies (Art. 6.1.a RGPD).
  • Retention: According to the duration of YouTube cookies (see Cookies Policy [link]).

2.4. Contact and subscription forms

  • Data: Name, email.
  • Purpose: To answer queries, manage newsletter subscriptions.
  • Legal Basis: Consent (Art. 6.1.a RGPD).
  • Retention: Until the user requests cancellation or the query is resolved.

2.5. Cookies

  • Data: IP address, navigation data, user preferences.
  • Purpose: To improve the experience (technical cookies), analyze the use of the website (analytical cookies), process payments (payment cookies).
  • Legal basis: Consent for non-essential cookies (Art. 6.1.a RGPD); legitimate interest for technical cookies (Art. 6.1.f RGPD).
  • Retention: According to the duration of each cookie (see Cookies Policy: https://www.castelloavilleira.com/politica-de-cookies/).

3. Data recipients

We share data with:

  • Webempresa: Web hosting and mail service (mail.castelloavilleira.com), with servers in the EU.
  • LearnDash: Online course management platform.
  • Restrict Content Pro: Management of memberships and access to courses.
  • Stripe and PayPal: Payment processing.
  • Google: (Google Analytics, YouTube, Site Kit)Video browsing and visualization analysis.
  • Automattic (Gravatar): Management of avatars in lesson comments.
  • UpdraftPlus: Site backups.

We do not sell or transfer data to third parties unless legally required to do so.

4. International Transfers

Some tools (Google Analytics, YouTube, Site Kit, Stripe, PayPal, Gravatar) transfer data to the USA. Data Privacy Frameworkensuring an adequate level of protection according to the RGPD.

5. User rights

You may exercise the following rights:

  • Access, rectification, deletion, opposition, limitation of processing, portability.
  • Withdraw consent at any time (e.g. unsubscribe from commercial communications).

How to exercise them: Send an email to soporte@castelloavilleira.com or by mail to c/ Barrio de Arriba, 4, 45686 Calera y Chozas, Toledo, Spain. We will respond within a maximum period of 1 month. You can also file a complaint with the Spanish Data Protection Agency (AEPD).

6. Minors

Our services are intended for persons over 18 years of age. We do not intentionally collect data from minors.

7. Data security

We use technical and organizational measures to protect your data, such as SSL encryption on both websites, contracts with data processors (Art. 28 RGPD), and backups with UpdraftPlus.

8. Policy changes

Any changes will be posted on this page and, if significant, notified by email.

9. Contact

For any questions, please contact soporte@castelloavilleira.co

Powered by  GDPR Cookie Compliance
Privacy summary

This website uses cookies so that we can provide you with the best possible user experience. The information from the cookies is stored in your browser and performs functions such as recognizing you when you return to our website or helping our team understand which sections of the website you find most interesting and useful