COS Training Studio
Privacy policy
Last updated:
This policy explains what personal data we process when you use this website or write to us, what we use it for and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller
- Raúl Ramírez Rivas (COS Training Studio)
- equip@costrainingstudio.com
2. What data we process
Contact form
When you send us the form, we receive:
- Your name.
- Your phone number, your email address or both (one is enough).
- The reason for your enquiry (trying a free class, signing up or asking a question).
- Your message, if you choose to write one (it is optional).
- The language you are browsing the website in, so we can reply in the same language.
Your name and at least one way to contact you (phone or email) are required for us to reply: without them we cannot deal with your request.
To protect the form against automated submissions, your IP address is also processed: it is checked by Cloudflare Turnstile (see section 6), and our server stores a hashed version of it with the time of submission, only to limit how many messages can be sent in a short time.
Contact by phone, WhatsApp or email
If you call or write to us directly, we process the data you give us (name, phone number, email and the content of your message) in order to help you.
If you are under 14, you need the consent of your parent or guardian to send us your data.
3. What we use it for
- To answer your enquiry and, if you ask, arrange your trial class or sign-up.
- To protect the form and the website against spam and abuse.
We do not make automated decisions or build profiles with your data, and we do not use it to send you advertising.
4. Legal basis
- Your consent (art. 6.1.a GDPR), which you give by ticking the box on the form or by contacting us. You can withdraw it at any time, without affecting any processing carried out before.
- Taking steps at your request before entering into a contract (art. 6.1.b GDPR), when you ask us for a trial class or for information to sign up.
- Our legitimate interest in protecting the website against automated submissions (art. 6.1.f GDPR), for the anti-spam check and the submission limit.
5. How long we keep it
We keep your data for as long as we need to deal with your enquiry. If you do not become a client, we delete it no later than one year after our last contact. If you become a client, we keep it for as long as the relationship lasts and then for the periods required by law. The hashed IP address is only used to limit submissions and is deleted after one hour.
6. Recipients and processors
We do not share your data with third parties unless required by law. To run the website we work with the following providers, who may access it only to provide their service to us:
- Website hosting and email provider, with servers in Spain.
- Cloudflare, Inc. (Cloudflare Turnstile): anti-spam check on the form. It processes your IP address and technical information from your browser to check that you are not a robot. It is based in the United States; the international transfer is covered by the EU-US Data Privacy Framework. Turnstile privacy policy.
- Google LLC (Google Maps): only if you press the button to show the map. From that moment your browser connects to Google, which receives your IP address and browsing data and processes them under its own policy. It is based in the United States; the transfer is covered by the Data Privacy Framework. Google privacy policy.
Instagram and WhatsApp only appear as external links: the website does not load any of their content. If you visit them, their own privacy policies apply.
Fonts are hosted on our own server: the website makes no requests to Google Fonts. To find out which cookies are used, see the cookie policy.
7. Your rights
You can exercise the following rights at any time:
- Access: find out what data of yours we process.
- Rectification: correct inaccurate data.
- Erasure: ask us to delete it.
- Objection: object to a specific processing.
- Restriction: ask us to restrict its processing.
- Portability: receive your data in a structured format.
- Withdrawal of consent, at any time.
To exercise them, write to equip@costrainingstudio.com stating which right you want to exercise. If we have doubts about your identity, we may ask you to prove it. We will reply within one month.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply appropriate technical and organisational measures to protect your data. The website uses an encrypted connection (HTTPS).
9. Changes to this policy
We may update this policy to reflect legal changes or changes to the website. The date of the last update is shown at the top of the page.