Legal Privacy

Privacy Policy

This policy explains what personal data we process, why we process it, and how you can exercise your rights.

In this privacy statement, we explain what we do with the data we obtain about you through our website and related services. We recommend that you read this statement carefully.

When processing personal data, we comply with applicable privacy regulations. This means, among other things, that:

  • We clearly state the purposes for which we process personal data.
  • We aim to limit the collection of personal data to what is necessary for legitimate purposes.
  • We apply appropriate security measures to protect personal data.
  • We respect your rights to access, rectify, or delete your personal data upon request.

If you have any questions or would like to know exactly what data we keep about you, please contact us at [email protected].

1. Data controller

Controller: Gonzalo Aguilar García (operating under the trade name “SixHack Academy”).

Address: Calle Nanclares de Oca, 32 2D, 28022 Madrid (Madrid), Spain.

Contact email: [email protected]

1.1. Applicable regulations

This Privacy Policy has been designed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and other applicable data protection regulations.

1.2. Data Protection Officer (DPO)

No Data Protection Officer has been appointed.

2. Purposes of processing

We may process your personal data for the following purposes:

  • To provide information about our services and training content.
  • To manage user accounts and provide access to the platform and courses.
  • To handle support requests and communications.
  • To process purchases and payments (where applicable).
  • To improve security and the overall performance of the service.

2.1. Retention period

We will keep your personal data for as long as necessary to fulfil the purpose for which it was collected and to comply with any applicable legal obligations.

3. Legal basis and categories of data

The legal basis for processing your data may include:

  • Performance of a contract (to provide the service and manage your account).
  • Compliance with legal obligations (e.g., invoicing if applicable).
  • Legitimate interest (security, fraud prevention, and service improvements).
  • Consent (e.g., marketing communications or non-essential cookies, if applicable).

3.1. Data categories

We may collect the following categories of personal data:

  • Identification and contact data (name, email, username).
  • Training-related data (courses, lessons, progress, activity).
  • Billing and purchase-related data where applicable.

4. Security measures

We have adopted reasonable technical and organisational measures to protect personal data and prevent unauthorised access, loss, or alteration.

5. Service providers (Stripe payments)

We use Stripe to process payments. If you make a purchase, the required information to complete the payment is securely transmitted to Stripe. SixHack Academy does not store your full card details.

6. Your rights

You have the right to access your personal data, request rectification of inaccurate data, request deletion, limitation of processing, object to processing, and request data portability.

To exercise your rights, contact us at [email protected].

You also have the right to lodge a complaint with your local data protection authority.

7. Cookies

Our website uses cookies. For more information, please read our Cookie policy.

8. Third-party websites

This privacy statement does not apply to third-party websites linked from our website. We recommend reading their privacy policies before using them.

9. Changes to this policy

We reserve the right to amend this Privacy Policy. We recommend checking this page regularly to stay informed about any changes.