Privacy policy

What we do with your data, in plain language.

Who is the data controller

  • Controller: AC Academy S.L. · Tax ID (NIF) B88424270
  • Address: Anabel Segura 10, 3rd floor · 28108 Alcobendas (Madrid), Spain
  • Contact: info@acoding.academy · +34 911 846 422

We aren’t required to appoint a data protection officer. For any question about your data, write to info@acoding.academy.

What data we process and why

  • If you write to us through the form or by email: your name, email, phone number if you give it and your message, to reply to you.
  • If you request a program’s curriculum: your name and email, to send it to you and let the academy know you asked for it. If you tick the box, also to send you occasional news; you can unsubscribe in every message.
  • If you book a conversation: the details you enter in the booking calendar, to organise the video call and send you afterwards what we agreed.
  • If you enrol in a program or your company books one: the data needed to manage the training, invoicing and, if the company asks, the FUNDAE funding paperwork.
  • If you are a supplier: the contact details needed for the business relationship.
  • If you send us your application: your CV, for the selection process.
  • When you browse the website: our servers log technical data (IP address, browser, requested page and time) to serve the website and protect it against abuse. We don’t use it to identify you or build profiles.
  • Handling your request and pre-contractual steps you ask for (Art. 6(1)(b) GDPR): replying to your message, the conversation and information about a program.
  • Performing a contract (Art. 6(1)(b) GDPR): students, client companies and suppliers.
  • Legal obligations (Art. 6(1)(c) GDPR): invoicing, accounting and tax obligations.
  • Legitimate interest (Art. 6(1)(f) GDPR): website security and the form’s anti-bot check.
  • Your consent (Art. 6(1)(a) GDPR): job applications, and marketing if you aren’t a client. We may tell existing students about similar programs, and they can unsubscribe in every message (Art. 21 LSSI).

We only ask for the data we need. You aren’t obliged to give it, but without it we may not be able to help you. If you are under 14, we need consent from your parent or guardian.

How long we keep it

  • Enquiries and conversations that don’t lead to enrolment: up to one year after the last contact.
  • Students and clients: for the duration of the relationship and then for the periods required by law (six years for commercial records and four for tax records).
  • Job applications: one year, unless you ask us to delete it sooner.
  • Server technical logs: a maximum of 30 days.

Who else processes your data

We don’t sell or share your data. To operate, we use providers that process it on our behalf, under contract and only for what we ask them to do:

  • Amazon Web Services: hosting and delivery of the website.
  • Cloudflare: sending the form and the anti-bot check (Turnstile), which analyses your IP address and technical data from your browser. Cloudflare also uses that technical data, as controller and on the basis of its legitimate interest, to improve its bot detection.
  • Resend: delivering form messages to the academy by email.
  • YouCanBook.me: the calendar for booking the conversation.
  • Our email and video-call providers, to communicate with you.
  • Banks and financing companies (for example, Banco Sabadell or seQura), only if you ask for financing.
  • The FUNDAE management company, only if your company asks us to introduce it to whoever files the funding.
  • Public authorities, when required by law.

International transfers

Some of these providers are based in the United States or the United Kingdom. Transfers rely on the EU-U.S. Data Privacy Framework, the European Commission’s adequacy decision for the United Kingdom or standard contractual clauses approved by the Commission.

Your rights

You can request access to your data, its rectification or erasure, restriction of or objection to its processing and its portability, and not to be subject to automated decisions. Write to info@acoding.academy or to our registered office, stating which right you want to exercise. We’ll reply within one month at most. You can withdraw your consent at any time, without affecting earlier processing.

If you think we aren’t handling your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Security and confidentiality

We apply technical and organisational measures to protect your data against loss, alteration or unauthorised access: the website is always served encrypted (HTTPS) and the form doesn’t keep copies on our web servers. Everyone involved treats it confidentially. If your data changes, let us know so we can keep it up to date.

Last updated: October 2026.