Política de privacidad

Cursos IT operates the website at https://www.example.com and is the controller of the personal data described in this policy. "Controller" means we decide why and how your personal data is processed.

You can reach us about anything in this policy using the details below. We have not appointed a data protection officer because the scale and nature of our processing does not require one under Article 37 of the GDPR; if that changes we will publish the contact details here. If we are established outside the EU and offer services to people in the EU, we will appoint a representative under Article 27 and name them on this page.

• Entity: Cursos IT
• Email: [email protected]
• Website: https://www.example.com
• Postal address: available on request by email

We collect only what we need in order to answer enquiries, provide our services and keep the website working. The categories below describe everything we normally hold.

• Identity and contact data — your name, the organisation you represent, email address and telephone number.
• Enquiry data — the message you send us, the service you are interested in and any details you choose to add.
• Correspondence data — emails, call notes and other records of our communication with you.
• Technical data — IP address, browser type and version, operating system, language settings and time zone.
• Usage data — which pages you visit, how long you stay and which links you follow.
• Consent and preference data — the cookie choices you make and whether you have subscribed to or unsubscribed from our updates.

Most of the personal data we hold comes directly from you, when you complete a form on the website, send us an email, call us or meet us. Technical and usage data is collected automatically by our web server and by any analytics cookies you have agreed to.

We do not buy contact lists, and we do not knowingly collect special category data such as health, religious or political information. Please do not include such details in a website enquiry — if you need to share them, contact us first so we can agree a suitable way to do it.

We use personal data for the following purposes, and for no other purpose unless we tell you first.

We do not make decisions about you by automated means alone that produce legal effects or otherwise significantly affect you, and we do not carry out profiling for that purpose.

• To respond to your enquiry and provide the information or service you asked for.
• To manage our relationship with you, including sending service messages and updates about work in progress.
• To operate, maintain and secure the website, including detecting and preventing abuse and fraud.
• To measure how the website is used so that we can improve its content and structure.
• To send marketing messages where you have asked to receive them or where we are permitted to do so.
• To keep records we are required to keep, and to establish, exercise or defend legal claims.

Article 6(1) of the GDPR requires us to have a lawful basis for every use of your personal data. We rely on the following bases.

Where we rely on legitimate interests, we have weighed our interest in running and improving our business against your rights and freedoms, and we only proceed where our interest does not override them. You can ask us for a summary of that assessment.

• Consent — Article 6(1)(a) — for non-essential cookies and for marketing emails where consent is required.
• Performance of a contract — Article 6(1)(b) — to provide services you have engaged us for, and to take steps at your request before entering into a contract.
• Legal obligation — Article 6(1)(c) — to keep accounting, tax and other records required by law.
• Legitimate interests — Article 6(1)(f) — to reply to enquiries, secure the website, keep business records and defend legal claims.
• Vital interests or public interest — Article 6(1)(d) and (e) — only in the rare case of an emergency or a lawful request from a public authority.

Where we rely on your consent, you are free to refuse it and free to change your mind at any time. Withdrawing consent is as easy as giving it: use the unsubscribe link in any marketing email, reopen the cookie settings on the website, or email us.

Withdrawing consent does not make our earlier processing unlawful, and it does not affect processing we carry out on a different lawful basis, such as keeping a record of your instruction not to contact you again.

We use cookies and similar technologies on www.example.com. Under the ePrivacy Directive and the national rules that implement it, cookies that are not strictly necessary to deliver the website are only set after you have given consent through our cookie banner.

Strictly necessary cookies — for example those that remember your cookie choice or protect a form against abuse — are set without consent because the website cannot function without them.

Our Cookie Policy explains each category, how long cookies last and how to change or withdraw your choice.

We do not sell your personal data. We share it only with the categories of recipient below, and only as far as they need it.

Providers who process personal data on our behalf act as processors under a written contract that meets Article 28 of the GDPR. They may not use your data for their own purposes.

• Service providers acting on our instructions — hosting, content delivery, analytics, email delivery and form handling providers.
• Professional advisers — accountants, auditors, insurers and lawyers, where they need the information to advise us.
• Public authorities, courts and regulators, where we are legally required to disclose information.
• A buyer or successor, if our business or part of it is sold or reorganised — in which case we will tell you and this policy will continue to apply.

Some of the providers we use may store or access personal data outside the European Economic Area. Where that happens we make sure one of the safeguards in Chapter V of the GDPR is in place before the transfer.

In practice this means we rely on an adequacy decision of the European Commission under Article 45, or on the European Commission's Standard Contractual Clauses under Article 46 together with an assessment of the laws of the destination country and, where needed, additional technical measures such as encryption.

You can ask us which safeguard applies to a particular provider and request a copy of the relevant clauses by emailing [email protected].

We keep personal data only as long as we have a reason to keep it, then delete it or anonymise it. Our standard periods are set out below and we review them periodically.

• Website enquiries that do not lead to work — up to 24 months from your last message.
• Client records and correspondence — for the duration of the engagement and then for the period required by accounting and limitation rules in our country of establishment.
• Marketing consents and opt-outs — for as long as we send marketing, plus a permanent suppression record so that we do not contact you again by mistake.
• Server logs and security records — normally up to 12 months.
• Analytics data — in aggregated or pseudonymised form, according to the retention setting of the analytics tool we use.

We use technical and organisational measures that are appropriate to the size of our business and the sensitivity of the information we hold. These include encryption of traffic to and from www.example.com, access controls so that only people who need the information can reach it, regular software updates, and backups held by our hosting provider.

We also require the providers who process information on our behalf to keep it confidential and to use it only for the purposes we have agreed with them.

No website or server can be completely secure. If we become aware of a breach that is likely to affect you, we will tell you and any regulator we are required to notify, within the time limits that apply to us.

Articles 15 to 22 of the GDPR give you the following rights over your personal data. They are free to exercise and you do not need to give a reason.

To exercise any of them, email [email protected]. We may ask for information to confirm your identity so that we do not disclose data to the wrong person. We will respond within one month, and will tell you if we need up to two further months because the request is complex.

• Right of access — Article 15 — a copy of the personal data we hold about you and information about how we use it.
• Right to rectification — Article 16 — correction of inaccurate data and completion of incomplete data.
• Right to erasure — Article 17 — deletion of your data where we no longer have a good reason to keep it.
• Right to restriction — Article 18 — to have us pause our use of your data while a dispute about it is resolved.
• Right to data portability — Article 20 — to receive data you gave us in a structured, commonly used machine-readable format, or to have it sent to another controller.
• Right to object — Article 21 — to object to processing based on legitimate interests, and an absolute right to object to direct marketing.
• Rights in relation to automated decision-making — Article 22 — not to be subject to a decision based solely on automated processing that significantly affects you.

If you are unhappy with how we have handled your personal data or your request, please tell us first — most issues can be resolved quickly and directly.

You also have the right under Article 77 of the GDPR to lodge a complaint with a supervisory authority, and you may complain to the supervisory authority in AR. Complaining to an authority does not affect your right under Article 79 to bring proceedings before a court, or your right to compensation under Article 82.

Our website and services are aimed at adults and businesses, and are not directed at children. We do not knowingly collect personal data from children below the age at which they can consent to information society services, which is 16 in the GDPR but lower in some Member States.

If you believe a child has given us personal data, contact us and we will delete it promptly unless we are required to keep it.

We may update this Privacy Policy from time to time, for example when we change the way the website works, adopt a new provider, or when the law changes.

The date at the top of this page always shows when the current version took effect. We keep the wording of previous versions and can provide an earlier version on request.

If a change materially affects how we use personal data that we already hold, we will contact you directly where we have your contact details and, where the law requires it, ask for your consent again.

If you have questions about this Privacy Policy or your personal data, or you would like to make a request or a complaint, please contact us. We aim to acknowledge every message within a few working days.

Please put the subject of your message in the email title so that it reaches the right person, and give us enough detail to identify what you are asking about.

• Entity: Cursos IT
• Email: [email protected]
• Website: https://www.example.com
• Postal address: available on request by email